{
  "id": 20086314,
  "title": "Who keeps the internet running, and what happens when they can no longer afford to? An expert explains",
  "url": "https://urgent.news/2026/11/15/who-keeps-the-internet-running-and-what-happens-when-they-can-no",
  "topic": "world",
  "section": "World",
  "published": "2026-11-15T00:46:54.000Z",
  "source": {
    "name": "The Indian Express",
    "slug": "the-indian-express",
    "url": "https://indianexpress.com/article/explained/explained-sci-tech/expert-explains-php2shell-ondrej-sury-open-source-maintenance-10962624/"
  },
  "original_language": "en",
  "account": "Open-source software powers much of the internet, but maintaining it relies heavily on a small number of dedicated volunteers. Czech software engineer Ondřej Surý maintains PHP packages for Debian and Ubuntu, even for older releases that no longer receive official updates. Surý and others patched the widely used PHP programming language following critical security flaws discovered in October, which prompted services like Japan's Finance Ministry and Wikipedia to shut down in precaution. These vulnerabilities were the most serious type, allowing attackers to execute arbitrary code on remote machines.\n\nWhen ethical researchers discover critical flaws, they privately inform the affected project. Fixing the issue depends on the project's size and resources. In PHP's case, maintenance falls to volunteers and few paid employees. The recent surge in vulnerability reports highlights how AI tools make it easier to identify potential flaws, but human expertise is still crucial for assessing and fixing them. AI can assist maintainers in finding vulnerabilities, but it requires supervision by experts to avoid false positives or overlooked serious issues.\n\nThe sustainability of open-source software is under scrutiny as essential projects depend on a shrinking pool of maintainers. Surý believes businesses profiting from open-source software should contribute to its maintenance. Despite the challenges, those who initially embraced free software remain driven by its ideals.",
  "summary": null,
  "key_points": [
    "Open-source software maintains internet infrastructure",
    "Critical PHP vulnerabilities forced shutdowns",
    "Volunteers and few paid employees handle maintenance"
  ],
  "editors_take": "The growing reliance on a shrinking pool of volunteer maintainers creates a systemic vulnerability where the digital infrastructure depends on individual dedication rather than sustainable corporate investment.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}