# "The entire internet is broken": ethical hacking expert John Hammond meets James Kettle

DevFeed: ["The entire internet is broken": ethical hacking expert John Hammond meets James Kettle](<https://devfeed.tech/articles/the-entire-internet-is-broken-ethical-hacking-expert-john-hammond-meets-james-kettle-7741.md>)

Original publisher: [Read original article](<https://portswigger.net/blog/the-entire-internet-is-broken-ethical-hacking-expert-john-hammond-meets-james-kettle>)

Author: Amelia Coen

Published: 2025-08-27T09:11:17Z

Content type: article

Language: en

Sources: [PortSwigger Blog](<https://devfeed.tech/sources/portswigger-blog.md>)

Topics: [Application Security](<https://devfeed.tech/topics/application-security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [demo](<https://devfeed.tech/tags/demo.md>), [http](<https://devfeed.tech/tags/http.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [video](<https://devfeed.tech/tags/video.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

A video examines research on HTTP/1.1 request-desynchronization attacks, arguing that ambiguous request boundaries can expose websites to takeover. It contrasts this with HTTP/2 and says deployments must use it upstream between reverse proxies and origin servers as well as at the edge.

## Source excerpt

In a brand-new collaboration between ethical hacking and AppSec expert John Hammond and world-renowned security researcher James Kettle, the pair explore how tens of millions of websites are compromis