The Web

The Web

Navigating the digital landscape through updates on internet trends, big tech, social media, cloud computing, streaming and more.

software eff ceo hacking ai vulnerability bugs cloudflare
Security The Web

AI will keep uncovering critical software flaws for years, says Cloudflare CEO

The EFF says 3% of all known software vulnerabilities were found in October alone
Big quote: Cloudflare CEO Matthew Prince says the PHP flaws that forced websites offline last week are only the beginning. His company already knows of other severe vulnerabilities in critical software, and he expects AI tools to keep turning up new ones for years. Because these models have sharply cut the time and skill needed to find and exploit serious bugs, defenders and everyday users face a long stretch of disruption before the internet's core software ends up safer.
Full story By Skye Jacobs, 12 comments
steam pc gaming indie gaming platformer free-to-play multiplayer game development angry birds generative ai
Gaming The Web

Only one person in the world can play this free Steam game at a time

In Jono, you watch while waiting in line, get one minute of play, and then hand control to the next person
First look: These days, a big online game is one that can drop 100 strangers onto the same map at once. Jono, a free platformer that quietly landed on Steam earlier this month, goes in the opposite direction entirely: there's exactly one playable character for the whole planet, and everyone who downloads it has to wait in line for a turn.
Full story By Zo Ahmed,
developers internet of things psa php servers security lock cloud emergency patch
Security The Web

Two web emergencies in one week: guessable certificate keys and critical PHP bugs that leaked before patches

Browsers patched one problem remotely. Servers will need to be fixed by hand.
A hot potato: Security teams are dealing with two separate emergencies this week, and both go straight to the foundations of the web. The first is a certificate authority that shipped private keys anyone could guess. The second is a pair of critical PHP flaws that leaked before patches existed. Browsers fixed the certificate problem within hours. Everything else, from Linux servers to Docker images and IoT gear, needs someone to log in and patch.
Full story By Julio Franco,
networking wifi vulnerability broadcom routers
Security The Web

Millions of routers can be hijacked over Wi-Fi thanks to a 16-year-old bug

Broadcom says it replaced the vulnerable code in 2018 and won't assign a CVE. The fix never reached the routers.
Why it matters: Chipmakers ship buggy code all the time, that alone isn't news. What makes WPSplinter stand out is that Broadcom apparently did issue a fix eight years ago, but that fix never reached the routers sitting in people's homes. Furthermore, the lack of a CVE kept the problem invisible to the advisories and patch pipelines that router makers and ISPs rely on.
Full story By Julio Franco, 22 comments
lawsuit ticket washington scalpers
The Web Tech Culture

Ticket resale giants sue Washington DC over new law that caps scalper markups at 10%

Four major resale platforms argue the price cap will do more harm than good while giving Ticketmaster an unfair advantage
Winners & losers: It's a depressingly common sight to see tickets for concerts, shows, and other events getting snapped up en masse before appearing on reseller sites with huge markups. It's why Washington DC introduced a bill limiting how much resellers can raise the price of tickets, but the marketplaces are now suing the District of Columbia to block this law.
Full story By Rob Thubron, 33 comments
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
  6. 6
  7. 7
  8. 8
  9. 9