Telling stories @IPinfo, prev @Cloudflare, @CloudflareRadar, journalist @Publico SIC @dinheiro_vivo, etc. Discoverer. Human🇵🇹. Tech, cinema, cars. Podcaster.

Lisboa
Pinned Tweet
First issue of something new I’m trying: The Internet Brief. This one: Yandex’s data centers going dark, French supermarket fridges, today’s critical PHP flaw (!!), a month of outages, and the South Pole’s satellite hours. First try, so feedback welcome!
Article

The Internet Brief #1 | Yandex goes dark, French fridges go warm

“The world cannot be understood without numbers. And it cannot be understood with numbers alone.” Hans Rosling, Factfulness (2018) Hi, I'm João, and I work on data insights at IPinfo and I'm based in

2
4
11
1,043
A blackout hit occupied Crimea overnight after a reported strike on a Russian substation that supplies it. Within 20 minutes, Internet addresses answering IPinfo’s pings fell to 15% of normal. About half were back by Saturday afternoon. Routes stayed up, so it was a power cut.
⚡️️️️️️️Mass blackouts reported across occupied Crimea. According to satellite imagery from NASA FIRMS, the Taman substation in Russia's Krasnodar Krai — a key energy node supplying electricity to Crimea —was damaged in an overnight attack. kyivindependent.com/mass-bla…
31
João Tomé retweeted
Millions of attempts is the attacker side. On the defender side, @IPinfo re-checks the same ~1.3M PHP servers every day: the share on a patched release went from 5% to 10% in a day. But servers on old versions with no official fix barely moved: 0.6% upgraded overnight, while 7% went quiet or started hiding their PHP version.
Millions of hacking attempts have been made since critical vulnerabilities were discovered in a PHP, per ABC
3
3
91
João Tomé retweeted
A day after PHP fixed PHP2Shell, about 3,000 of 409,494 servers on old, unfixed PHP versions had moved to a newer one (0.7%). On the fixed versions, 18% were already patched. PHP only released updates for recent versions (8.2–8.5). Versions 5.4–7.3 are affected and get no official fix (a few vendors and volunteers patch old versions themselves); for most, the way out is moving the site to a newer PHP. The flaw has the tech world on edge (rightly so). Government sites in Europe, Wikipedia and the Internet Archive went offline to be safe, and today RIPE NCC took three of its sites down as a precaution.
1
1
3
169
A day after PHP fixed PHP2Shell, about 3,000 of 409,494 servers on old, unfixed PHP versions had moved to a newer one (0.7%). On the fixed versions, 18% were already patched. PHP only released updates for recent versions (8.2–8.5). Versions 5.4–7.3 are affected and get no official fix (a few vendors and volunteers patch old versions themselves); for most, the way out is moving the site to a newer PHP. The flaw has the tech world on edge (rightly so). Government sites in Europe, Wikipedia and the Internet Archive went offline to be safe, and today RIPE NCC took three of its sites down as a precaution.
1
1
3
169
Update, this Friday afternoon: Zhytomyr is still at about 71% of normal at 12:00 UTC (15:00 in Kyiv). About a quarter of addresses are still silent, while neighboring regions are back to normal.
19
No Ocidente, as novas gerações têm rendimentos reais superiores aos dos seus pais e avós quando estes tinham a mesma idade. Talvez esteja na altura de deixar cair a lenga-lenga do empobrecimento geracional como explicação para o crescimento da extrema-direita.
54
14
120
13,273
Russian drone strikes cut power in Ukraine’s Zhytomyr region on October 22 (yesterday). About 4 in 10 Internet addresses there stopped answering IPinfo’s pings. This morning, about a quarter were still silent. The neighboring regions stayed normal. Routes stayed up, so this was a power problem, not a network one.
1
3
110
João Tomé retweeted
21 years ago I named "Reddit" and everyone said it was a horrible name, but I insisted one day people would say "I read it on reddit" and used my CEO-privilege to overrule everyone + kept the name. Now the company twitter account (unbeknownst to them) is making the joke. Heh.
I'd tell you a joke, but you've probably already Reddit.
707
13,335
261,547
5,644,729
João Tomé retweeted
Chief information security officer @ anthropic btw
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
39
348
5,167
978,902
end of an era…
Getty Images has officially filed for bankruptcy, per NYP
59
João Tomé retweeted
North Korea’s state websites are flickering again. The country reaches the rest of the Internet through just two carriers, one Chinese and one Russian. Since Tuesday everything has gone through Russia, and early this morning even that link dipped three times, once to under a third of the Internet able to reach it. The bigger problem now is the country’s own “phone book”: both servers that tell computers where .kp sites live are failing. Sites still open for most people because other servers remember the old answers, but those memories expire.
1
1
1
226
João Tomé retweeted
Today I turn 88…I’ve seen some serious shit. The most serious of it all is love. I love my family, my friends, and my wonderful fans. The power of love remains.
6,289
14,001
155,357
2,685,380
João Tomé retweeted
First issue of something new I’m trying: The Internet Brief. This one: Yandex’s data centers going dark, French supermarket fridges, today’s critical PHP flaw (!!), a month of outages, and the South Pole’s satellite hours. First try, so feedback welcome!
Article

The Internet Brief #1 | Yandex goes dark, French fridges go warm

“The world cannot be understood without numbers. And it cannot be understood with numbers alone.” Hans Rosling, Factfulness (2018) Hi, I'm João, and I work on data insights at IPinfo and I'm based in

2
4
11
1,043
Hundreds of US university websites will show security warnings in Chrome from October 27. Chrome is dropping a certificate they rely on, issued by eMudhra, after weak keys were found beneath it. Of 643 checked today, 568 hadn't switched. Firefox users already see the errors.
1
2
6
253
From IPinfo's October 14–15 Internet-wide scan (2,172 addresses on this root, 2,113 serving .edu names), re-checked live on October 21. Removal per Mozilla and the Chrome Root Program.
1
2
40
João Tomé retweeted
PHP fixed two critical flaws today. Wiz, which found them, says every version since 5.4 is affected, but the official updates only cover 8.2 and newer. In @IPinfo's Internet-wide scan last week, at least 502,180 addresses showed a PHP version from 5.4 to 7.3: affected, with no fix at all. That’s nearly 4 in 10 of those that show a version. Many servers hide their version, and some Linux distributions patch old ones themselves, so this is a floor.
ALERT - Multiple websites worldwide could go dark as critical PHP flaws spark global cyber alert insiderpaper.com/critical-ph…
1
8
3,750
php related?
Archive.org is currently offline. We are working to restore service now.
4
364
Introducing The Internet Brief, a new IPinfo data insights newsletter by João Tomé! From Yandex data center outages to RPKI adoption and exposed supermarket refrigeration systems, the first issue explores what IPinfo's data reveals about how the Internet works and where things go wrong. Read the first issue and subscribe for more data-driven research! 👇
First issue of something new I’m trying: The Internet Brief. This one: Yandex’s data centers going dark, French supermarket fridges, today’s critical PHP flaw (!!), a month of outages, and the South Pole’s satellite hours. First try, so feedback welcome!
Article

The Internet Brief #1 | Yandex goes dark, French fridges go warm

“The world cannot be understood without numbers. And it cannot be understood with numbers alone.” Hans Rosling, Factfulness (2018) Hi, I'm João, and I work on data insights at IPinfo and I'm based in

2
6
396