Europe Has Drafted Four Levels of "Sovereign". A Postcode Only Gets You Level 1.
The Cloud and AI Development Act proposes four assurance levels for cloud sovereignty. Keeping data on EU infrastructure is the floor, not the goal, and 90% of public sector workloads sit in the two levels European providers say should not carry the word at all.
GhostLock and the Case Against the Shared Kernel
A Linux kernel flaw that can turn an unprivileged local user into root shows why shared-kernel hosting and full virtualisation have very different security boundaries.
Two Config-Driven Outages, A Year Apart: CloudFront and 1.1.1.1
On 16 July an AWS CloudFront configuration failure broke VPC Origins for three and a half hours. Two days earlier, the first anniversary of Cloudflare's 1.1.1.1 route withdrawal passed quietly. Neither was hardware. Both were the control plane.
314 MEPs Voted To Reject Chat Control. It Survived Anyway.
On 9 July a majority of MEPs voting rejected the reinstatement of voluntary message scanning, and fell 46 votes short of the absolute majority the procedure required. The amended text now sits with the Council, and voluntary CSAM scanning is on course to return until 2028.
Cloudflare Starts Charging AI Crawlers. What It Means If You Run Your Own Server.
On 1 July Cloudflare said Pay Per Crawl is becoming Pay Per Use, and that from 15 September ad-bearing pages will allow search crawlers by default while blocking training, agent and mixed-use ones. It is a significant moment for the economics of the web, and it only works if you are behind the right intermediary.