// web standards

All signals tagged with this topic

Nov 2

PHP vulnerabilities expose the fragility of web infrastructure

A critical flaw in PHP—the software powering roughly 77% of all websites—forced major services like Pinboard offline without warning, cascading across government sites and independent services. Web infrastructure lacks the redundancy and transparency of legacy systems: a single vulnerability in a widely-used tool can instantly disable entire digital ecosystems, yet most users and operators have no visibility into or control over these dependencies. The risk extends beyond hacking. Open-source foundational software is often ad-hoc and volunteer-maintained, allowing critical vulnerabilities to persist undetected until catastrophic discovery, with no coordinated disclosure or mitigation process.

theme-culture regulation/policy ai governance web standards

Jul 3

Cloudflare forces AI companies to label crawlers or get blocked

Source: Nbcnews

Cloudflare is creating enforceable technical categories for AI scraping by September 15, distinguishing between search indexing, training data collection, and agent operations. The move converts crawler identification from voluntary disclosure into mandatory machine-readable standards. Since many AI builders rely on Cloudflare's infrastructure, the company has leverage to reshape how they access the open web. The deadline also forces a differentiation the industry has deliberately kept murky to avoid legal liability and preserve unrestricted data access. Whether this becomes industry standard or gets circumvented remains uncertain, but infrastructure providers are now positioning themselves as enforcers of web scraping norms rather than neutral pipes.