NB589: OpenAI Makes Cyber Mess, Wants World to Clean It Up; Cisco Strategizes Infrastructure Identity

Take a Network Break! We start with listener followup about how Device Bound Session Credentials could thwart session cookie theft, and then highlight a string of critical vulnerabilities in IBM’s AIX. On the news front, Nvidia has reportedly bought Hugging Face for $12.9 billion, Nvidia and AWS team up on GPUs and physical AI, and... Read more »

New Tool – Traceroute / Ping Visualizer

New on the Network Tools page: a Traceroute / Ping Visualizer. Paste raw output from traceroute, Windows tracert, or ping and it turns the wall of text into something you can actually read at a glance — a per-hop latency chain or a per-packet chart, with timeouts, latency jumps, and dropped packets flagged automatically.

What It Does

It auto-detects which of the four formats you pasted — Linux/Mac traceroute, Windows tracert, Linux ping, or Windows ping — and renders the right visualization:

Introducing Adaptive Intelligence: Undermining the economics of every bot attack

Modern bot threats are increasingly driven by determined, sophisticated attackers. Often it is not even one person, but a group trading techniques with each other or a commercial service sold to anyone willing to pay. For many of them, getting past bot detection is a full-time job they genuinely enjoy. Block them and they get to work, finding a workaround. AI has simplified this further, making it even easier to set up complex configurations for attackers, lowering the overhead of an attack. 

This shift puts defenders at an economic disadvantage. Responding and adapting to new attacks takes care, evidence, and effort to ensure efforts to block attackers don’t impact real users on the way. Attackers have no such concerns and are primarily constrained by their time and their pool of proxies, and ensuring their infrastructure providers don’t shut down their accounts.

Their advantage is the cost of adaptation. Attackers can adapt as often and continuously as they need, while most defenses are deployed in discrete, managed releases. Cloudflare analyzes more than a trillion requests a day for signs of automated abuse, so we see how fast attackers change tactics. That gap in responsiveness is widening.

The inconvenient truth: bot Continue reading

Mengenal Careproctus Rastrinus: Ikan Deepsea Unik dan Langka

Ikan deepsea careproctus rastrinus merupakan salah satu spesies ikan yang menarik perhatian para ilmuwan kelautan dan penggemar biologi kelautan. Spesies ini dikenal karena kemampuannya bertahan hidup di lingkungan laut dalam yang ekstrem, di mana tekanan air sangat tinggi dan cahaya hampir tidak ada. Hingga saat ini, pemahaman tentang careproctus rastrinus semakin berkembang seiring dengan kemajuan teknologi eksplorasi bawah laut. Artikel ini akan membahas secara lengkap mengenai karakteristik, habitat, adaptasi, serta pentingnya ikan deepsea careproctus rastrinus bagi ekosistem laut dalam saat ini.

Sejarah Penemuan dan Klasifikasi Careproctus Rastrinus

Careproctus rastrinus termasuk dalam famili Liparidae, yang sering dikenal dengan sebutan “snailfish.” Spesies ini pertama kali diketahui dari hasil survei laut dalam yang dilakukan di perairan zona hadal, yaitu zona kedalaman lebih dari 6.000 meter, dimana sebagian besar kehidupan laut belum banyak dipahami secara detil. Awal tahun ini, ekspedisi ilmiah di Samudra Pasifik berhasil mengumpulkan data dan sampel penting yang memperdalam pengetahuan tentang careproctus rastrinus.

Dari segi taksonomi, careproctus rastrinus dibedakan berdasarkan morfologi tubuhnya yang lunak dan berdaging, serta bentuk siripnya yang khas. Ikan ini memiliki kepala besar dengan mata kecil, yang menjadi adaptasi terhadap minimnya pencahayaan di habitat asli mereka. Perkembangan teknologi sonar dan robot bawah laut memungkinkan para peneliti Continue reading

Misteri Fenomena Kaan Ix Crystal Nexus di Gua Sistema Hydrobaric

Dalam periode terbaru, fenomena alam yang memukau kembali menjadi sorotan dunia speleologi dan geologi, khususnya terkait dengan gua Kaan Ix Crystal Nexus. Gua ini dikenal sebagai salah satu keajaiban alam yang menyimpan banyak misteri unik di kedalaman sistem gua subterranean yang kompleks. Fenomena yang terjadi di gua ini tidak hanya menarik perhatian para ilmuwan, tetapi juga pelancong dan pencinta petualangan yang mencari pengalaman eksklusif di lokasi yang belum banyak dijelajahi. Artikel ini akan membahas secara mendalam tentang kaan ix crystal nexus serta fenomena hidrobarik dan kristal yang menjadikannya produk alam yang sangat langka dan misterius.

Pendahuluan: Mengenal Kaan Ix Crystal Nexus

Sistem gua Kaan Ix Crystal Nexus terkenal sejak awal tahun ini sebagai lokasi gua yang kaya dengan struktur kristal hidrobarik yang unik, yang terbentuk melalui proses geologis dan hidrologis yang masih dipelajari secara intensif. Gua ini terletak di wilayah tropis dengan kondisi pengaruh hidrobarik tinggi dan iklim mikro yang stabil, memungkinkan kristal-kristal berkualitas tinggi tumbuh dalam kondisi sempurna.

Fenomena-fenomena yang ditemukan di Kaan Ix berbeda dari gua pada umumnya karena adanya keseimbangan unik antara tekanan air, mineralisasi, dan kondisi lingkungan yang sangat spesifik. Keberadaan kristal hidrobarik di dalam gua ini membuka lembaran baru dalam riset ilmiah seputar dinamika pembentukan Continue reading

Just Saying No!@e

What part of “No!” is so hard for the DNS understand? When we look at the way the DNS behaves when it is given a negative answer, we see that many DNS resolvers struggle with this and repeat the query. Here we will look at the different ways to say "No" and the number of repeat queries that are seen with each of these negative responses.

Worth Reading 082926


The term “content delivery network” reflects the technology’s original value proposition.

 


Sam Altman released ChatGPT for free in late 2022. Many users fell in love both with it and Altman’s argument that artificial general intelligence could be achieved through scaling. T

 


If you work around data centers and high-density builds, you have probably heard the term “Multi-Core Fiber” thrown around.

 


Ask yourself these questions, assuming you have a serious medical condition and your doctors are going to be using GenAI to scan your images and test results to discover the breadth and depth of your condition and to recommend treatment.

 


Maybe adoption is low not because people don’t believe DNSSEC is useful, but because turning it on and keeping it on is still genuinely harder than it should be.

Why Is My Switch Still Red? The Future of Network Switches

Rethinking Network Switches The rate of technological change today can seem overwhelming but if you are old enough, you start to realize its pretty much more of the same. My biggest fear with tech change is that I don't want it to happen TO me. I may not be in a position to be in READ MORE

The post Why Is My Switch Still Red? The Future of Network Switches appeared first on The Gratuitous Arp.

HN839: Why Flows, Packets, and DDI are All Critical for Operational Effectiveness (Sponsored)

If you think of BlueCat as just an IPAM or DDI company, think again. BlueCat acquired LiveAction in 2024, and since then, they’ve been working to integrate LiveAction’s network observability capabilities with the DDI portfolio. In this sponsored episode, Ryan Grande, Field CTO at BlueCat, is here to dig into how network observability and DDI... Read more »

BotBase for Operators: A clearer path to joining Cloudflare’s directory of bots and agents

Last month, on our second Content Independence Day, we announced a couple of features designed to give website owners more visibility and control over automated traffic: BotBase added a searchable directory of known bots to the Cloudflare dashboard, while Business Insights helped owners understand how crawlers interact with their content. We know that the ecosystem of bots is vast, making it all the more important for site owners to be able to manage bot traffic sustainably.

But this ecosystem goes both ways. While website owners need to decide which automated traffic they allow, bot operators need a clear way to identify themselves, explain what their bots do, and keep that information current. BotBase works best when both sides can participate.

When we launched BotBase, we said we would build tools to bring bot operators into this ecosystem. Until now, their experience largely ended at submission. After pressing submit, an operator had no easy way to check the submission's status, understand why it was rejected, or update an existing entry. Today, we start to change that with the launch of BotBase for Operators, tackling what bot operators need first: transparency.

A new home for bot submissions

Imagine you’re a bot operator Continue reading

Using netlab in Software Testing with Dinesh Dutt

I know a few software development companies use netlab to test their network management software (and contribute back to netlab – thanks a million!), and I always wanted to chat about that. As I have known Dinesh Dutt for ages, it wasn’t hard to decide who to invite to have that chat with ;)

As it turns out, it’s dangerous to put Dinesh1 and me in the same (virtual) room – we were all over the place, from the ancient history of Vagrant in networking labs to the recent Ansible woes, but we did manage to cover how netlab helps Stardust Systems test new SuzieQ features.

Read more …

The Safest Place to Run an AI Agent Is On a Cluster That Doesn’t Trust It

Every organization running AI agents has already made a hosting decision. Most made it by accident.

The sales team switched on the agent built into their CRM. Engineering is piloting a coding agent in a vendor’s cloud. Someone on the data team deployed a LangGraph service to a VM with a database key in an environment variable, and someone else is running an agent framework on a laptop with production credentials in a dotfile. Each of these is a hosting decision. Each one quietly settled who holds the agent’s credentials, what network paths it can reach, what gets recorded when it acts, and who can stop it. Nobody ran an architecture review, because no single deployment looked big enough to deserve one.

The scale says otherwise. By May 2025, 82% of organizations surveyed by SailPoint were already using AI agents. Only 44% had policies for securing them, 80% said their agents had already taken unintended actions, and 23% had watched an agent get tricked into revealing credentials. A year later the bill arrived: IBM’s 2026 Cost of a Data Breach report found that one in four malicious breaches is now AI-enabled, up 56% in a single year, and that those Continue reading

How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache

Big Pineapple, the platform behind 1.1.1.1, Gateway DNS, DNS Firewall, AS112, and several other Cloudflare DNS services, stores over 250 billion DNS cache entries at any given time. At that scale, wasting a single byte per entry costs more than 250 gigabytes of memory across our fleet.

Five successive changes to how cache entries are stored in memory cut the per-entry footprint by over 50%. Across our fleet, these changes freed up roughly 100 terabytes of memory, equivalent to the amount of RAM in 130 of our Gen 13 servers. The cache also got faster. Insert throughput rose 43% and lookup latency dropped 19%, as fewer allocations and better memory locality meant we did not trade speed for space.

What we cache

On cold start, Big Pineapple starts out with an empty cache. As DNS queries arrive, the cache fills until it hits its maximum entry count, at which point we evict older or less popular items to make room.

The exact cache size varies by data center. When EDNS Client Subnet (ECS) is in use, authoritative servers return different answers depending on the client's network, so we cache multiple versions of Continue reading

1 … 12 13 14 15 16 … 3,914