Postimet e fundit
Three Ways Russia Breaks Your Xray Server, and Only One of Them Is a Block
Customers tell us their server's IP is blocked in Russia. Usually it is not. Three independent TSPU mechanisms produce the same dead connection: an active scan, a handshake-burst detector, and a counter that stops at fifteen kilobytes. They need three different answers, and they stack.
August 2026 Platform Update: Windows VPS, Looking Glass, New Languages and More
Windows VPS images, longer-term renewal discounts, eight interface languages, automated DDoS failover, off-site backups, new Balkan connectivity and a public Looking Glass all landed this week.
When BCP 38 Is the Wrong Answer: Iran, Spoofed Tunnels, and Where We Draw the Line
We enforce source address validation everywhere by default. For a specific set of customers reaching their own machines inside Iran, we turn it off on request, scoped to named destinations. Here is the whole reasoning, including the parts that are uncomfortable.
Europe Has Drafted Four Levels of "Sovereign". A Postcode Only Gets You Level 1.
The Cloud and AI Development Act proposes four assurance levels for cloud sovereignty. Keeping data on EU infrastructure is the floor, not the goal, and 90% of public sector workloads sit in the two levels European providers say should not carry the word at all.
GhostLock and the Case Against the Shared Kernel
A Linux kernel flaw that can turn an unprivileged local user into root shows why shared-kernel hosting and full virtualisation have very different security boundaries.
Two Config-Driven Outages, A Year Apart: CloudFront and 1.1.1.1
On 16 July an AWS CloudFront configuration failure broke VPC Origins for three and a half hours. Two days earlier, the first anniversary of Cloudflare's 1.1.1.1 route withdrawal passed quietly. Neither was hardware. Both were the control plane.
314 MEPs Voted To Reject Chat Control. It Survived Anyway.
On 9 July a majority of MEPs voting rejected the reinstatement of voluntary message scanning, and fell 46 votes short of the absolute majority the procedure required. The amended text now sits with the Council, and voluntary CSAM scanning is on course to return until 2028.
Cloudflare Starts Charging AI Crawlers. What It Means If You Run Your Own Server.
On 1 July Cloudflare said Pay Per Crawl is becoming Pay Per Use, and that from 15 September ad-bearing pages will allow search crawlers by default while blocking training, agent and mixed-use ones. It is a significant moment for the economics of the web, and it only works if you are behind the right intermediary.
Everyone Blamed Cloudflare. It Was a Fibre Cut at Zayo.
On 22 June a fibre cut on Zayo's network in Eastern North America degraded X, Zoom, Google and Microsoft services at once. Cloudflare took the public blame and said plainly it wasn't theirs. The layer that actually failed is the one nobody diagrams.
Your "Redundant" Connectivity Probably Shares a Duct
Between 150 and 200 submarine cable faults are reported every year, and most cause no headline because spare capacity absorbed them. When it does not, whole regions drop. Path diversity is not an enterprise luxury.