Vista elenco

What We Learned from a Multi-Service Vulnerability Disclosure

10 Giugno 2026 ore 11:51
A series of vulnerabilities reported through the RIPE NCC bug bounty programme revealed weaknesses across multiple services and highlighted the risks posed by vulnerability chains. We look at how the issues were addressed, and what the disclosure taught us about handling complex security reports that span teams and systems.

Sustaining the Commons in an Age of Digital Sovereignty

8 Giugno 2026 ore 10:19
Digital sovereignty raises legitimate questions about dependency, resilience and control. It can strengthen the Internet when it builds capacity and meaningful choice. It becomes risky when it is pursued as control over the common layer that keeps the global Internet interoperable.

Legacy Out of Contract

15 Maggio 2026 ore 13:39
Last time, we looked at legacy address space in terms of contract coverage, ROA coverage, and proportion of announced prefixes. Now it’s time to take a closer look at those blocks still to be brought under contract and get a clearer picture of what kind of behaviour we see coming from them.

Making Resource Holders Easier to Identify: Introducing reg-nr: in the RIPE Database

30 Aprile 2026 ore 10:21
Proposed at RIPE 91 in the Address Policy Working Group and then further discussed in the Database Working Group, the reg-nr: attribute (NWI-21) has already been implemented ahead of RIPE 92, showing how quickly community input can lead to practical results. It adds official company registration numbers to organisation objects co-maintained by the RIPE NCC. This helps clearly identify organisations, especially when names are similar or identical.

Understanding DDoS Scrubbing in BGP: Five Leading Scrubbers

23 Aprile 2026 ore 13:12
DDoS mitigation often relies on BGP for "scrubbing", but how this appears in routing data is not well understood. We analyse five major providers to distinguish between always-on and on-demand protection, showing how mitigation manifests in practice and what it means for routing visibility and RPKI.
❌