1 comment

sorted by: hot top controversial new old
[–] 5 points 2 weeks ago

On Tuesday, the world found out about two massive security vulnerabilities in PHP, a programming language that is used by roughly 70 percent of websites.

Matthew Prince, the CEO of the hosting company Cloudflare, wrote that in the 10 hours before the flaws were publicly announced, “we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.”

Surý, who lives in Czechia, does not work for the PHP Foundation. But alongside his day job as director of domain-name-system engineering at the nonprofit Internet Systems Consortium, in a volunteer capacity, he maintains and helps automate patches for the coding language. His work, with that of just a handful of others, has allowed countless websites and organizations to fix these vulnerabilities quickly. Over the past 48 hours, he’s become arguably the unsung hero of the entire internet—despite the fact that the only compensation he receives is from modest donations. “Ondřej will save the internet today,” a user in the PHP Subreddit wrote.

I spoke with Surý today from his home about the unfolding AI-cybersecurity crisis, how the internet’s infrastructure is maintained by small crews of volunteers such as himself, and how it feels to go to bed after saving the web as we know it.

(Bolding is mine to indicate who this is about.)

  • source
  • 16 comments in c/technology@lemmy.world view that post
    [–] 26 points 2 weeks ago (4 children)

    Is it just a matter of time until the internet goes offline?

  • source
  • hideshow 4 child comments
  • [–] 19 points 2 weeks ago

    Well yes, obviously, the heat death of the universe will happen eventually.

    In the near future for us? Probably not, too much relies on it.

    When exactly? I don't know, and anyone who does is not telling.

  • source
  • parent
  • [–] [S] 8 points 2 weeks ago (1 child)

    Yes, and experts have been saying that for a few years. It's so large an attack area that sooner or later a bad actor may succeed.

    The counter argument is that it is also very compartmentalized and surprisingly nimble. Even with major physical infrastructure being destroyed by Iran, Ukraine, Russia, China, etc., the internet itself is basically fine.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 20 points 2 weeks ago

    "But the reason it was not crazy for me was that I actually don’t have any system running PHP myself." - Ondřej Surý

  • source
  • [–] 8 points 2 weeks ago

    What a very relaxed and laid back guy Mr. Sury is! And his statements are fundamentally informative.

    I'm glad he's running the internet.

  • source
  • [–] 22 points 2 weeks ago (5 children)

    Saved the Internet

    Yeah... this appears to have been overblown.

  • source
  • hideshow 5 child comments
  • [–] 6 points 2 weeks ago (3 children)

    I mean, the national cybersecurity council here saw exploits happening in the wild. So it's definitely possible and practical enough for it to happen.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 12 points 2 weeks ago (2 children)

    Hi, can you please provide some sources for this? I can't seems to find anything official. Thanks

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 2 weeks ago

    https://nltimes.nl/2026/10/23/dutch-cybersecurity-center-investigating-first-signs-hackers-abused-php-issues

    Official source this is based on is https://www.ncsc.nl/en/alerts/update-php-vulnerabilities-remain-a-reason-for-immediate-patching, which mentions they're investigating signs of exploits and that they have at least one confirmed exploit that happened abroad.

    It's still a complex exploit, mind, but not an unusable one.

  • source
  • parent
  • [–] 7 points 2 weeks ago

    Internet is dead and after this AI shit ramps up to full speed, even the dead remains will become useless.

  • source
  • [–] -4 points 2 weeks ago (1 child)

    Just seems likely with AI and terrorist groups. If it's not hacked then couldn't the internet cables in the ocean just be destroyed?

  • source
  • hideshow 1 child comment