10 interesting stories served every morning and every evening.

Future of the Web 2026: AI Brand Visibility Research | WordPress VIP

wpvip.com

Key find­ings

74%

con­sumers say the in­ter­net feels less hu­man than 10 years ago

40 min

av­er­age time be­fore con­sumers ex­pe­ri­ence bot fa­tigue”

61%

con­sumers can’t name a brand us­ing AI well in its mes­sag­ing

16.6

av­er­age weekly hours en­ter­prise teams spend im­prov­ing AI vis­i­bil­ity

Brands have been chas­ing AI vis­i­bil­ity for two years. You’ve spent time and bud­get on it, yet your au­di­ence can’t name a sin­gle com­pany they think is do­ing it well. The brands build­ing for the next phase treat their web­site as the place where AI gets clean data and hu­mans get some­thing worth their time.

A less hu­man web costs you read­ers.

Your au­di­ence can sense when a ma­chine is talk­ing to them. Most are check­ing out be­fore they’ve de­cided whether they care. Bot fa­tigue sets in when the in­ter­net stops feel­ing hon­est. The small mo­ments that used to make the web worth vis­it­ing are dis­ap­pear­ing.

The AI web

7/10

con­sumers say the in­ter­net feels less hu­man than it did 10 years ago

Feels less hu­man

Still hu­man

40 min

the av­er­age time to bot fa­tigue,” when in­ter­ac­tions start to feel syn­thetic

Can your con­tent in­fra­struc­ture mea­sure this shift and re­spond to it? We’ll cover how en­ter­prise teams re­struc­ture con­tent for AI dis­cov­ery with­out los­ing what feels hu­man in our up­com­ing we­bi­nar.

What is AI brand vis­i­bil­ity?

AI brand vis­i­bil­ity is how of­ten a brand ap­pears in an­swers gen­er­ated by AI en­gines like ChatGPT, Perplexity, Claude, and Gemini. It’s a dif­fer­ent prob­lem from search en­gine vis­i­bil­ity, which mea­sures rank­ings on re­sult pages. A brand can rank at the top of Google and not ap­pear in­side ChatGPT at all. As of 2026, no sin­gle dash­board tracks AI brand vis­i­bil­ity across every en­gine, and the cat­e­gory has no es­tab­lished leader.

Nobody has won AI brand vis­i­bil­ity yet.

Every an­swer in our con­sumer sur­vey pointed the same way: Nobody has done it well yet. Brands have spent the past year fund­ing AI strat­egy, but con­sumers can’t point to a sin­gle com­pany they think is get­ting it right.

The cat­e­gory has no in­cum­bent, and no tem­plate to copy. The brand that builds that recog­ni­tion first gets to de­fine the stan­dard.

Brand vis­i­bil­ity

61%

of con­sumers can’t name a brand that uses AI well in its mes­sag­ing

16%

say no brand is us­ing AI well at all

60%

say AI in a brand’s mes­sag­ing is a turnoff, not a fea­ture

No cus­tomer or user wakes up and says, I hope I get to talk to a chat bot or an AI agent to­day.’ Human-centered de­sign is truer to­day with ar­ti­fi­cial in­tel­li­gence. Ironically, the an­swer is us­ing AI to be more hu­man.”— Brian Solis, Head of Global Innovation, ServiceNow

No cus­tomer or user wakes up and says, I hope I get to talk to a chat bot or an AI agent to­day.’ Human-centered de­sign is truer to­day with ar­ti­fi­cial in­tel­li­gence. Ironically, the an­swer is us­ing AI to be more hu­man.”

Build for both au­di­ences at once.

AI needs to find the con­tent and a per­son needs a rea­son to stay once they ar­rive. The sec­ond part is harder, and most en­ter­prises are still guess­ing at it. The brands worth watch­ing are bet­ting that staying” comes from giv­ing peo­ple some­thing to do: in­ter­ac­tive con­tent, dy­namic ex­pe­ri­ences, the small mo­ments a flat AI sum­mary can’t de­liver.

The web­site is the only place where both jobs run to­gether. AI gets struc­tured con­tent it can cite, and the reader gets some­thing worth their time. That’s the foun­da­tion you get on WordPress VIP.

The guide for build­ing that dual-pur­pose site is in Future-Proof Your Brand for the AI-Native Web, a frame­work for prepar­ing your web plat­form.

How en­ter­prises are mea­sur­ing AI brand vis­i­bil­ity

The cat­e­gory is barely two years old and the toolset is still set­tling. No sin­gle dash­board tracks every AI sur­face. No shared de­f­i­n­i­tion of good” ex­ists yet. Pricing across the cat­e­gory swings from free to six fig­ures de­pend­ing on cov­er­age and cus­tomiza­tion. What en­ter­prises are us­ing right now sorts into five cat­e­gories, with real tools in­side each.

This is a snap­shot since the spe­cific prod­ucts will shift in the next 12 months. The cat­e­gories will out­last them, which is why the sec­tion is or­ga­nized around what the tools do.

This is the newest cat­e­gory, built specif­i­cally to track how of­ten a brand ap­pears in ChatGPT, Perplexity, Claude, and Gemini an­swers. These tools sim­u­late queries at scale and sur­face ci­ta­tion fre­quency and sen­ti­ment over time.

Tools in this cat­e­gory: Profound, BrightEdge, brand­vis­i­bil­ity.ai, Tryevergreen, and a hand­ful of smaller com­peti­tors that emerged in late 2025.

Best for: Teams that need to con­nect AI vis­i­bil­ity to busi­ness out­comes. AI ci­ta­tions are top-of-fun­nel. This cat­e­gory mea­sures what those ci­ta­tions turn into. The brands that fig­ure out which AI-referred vis­i­tors con­vert can de­fend their AI strat­egy spend.

Watch for: Pricing mod­els are still set­tling. Most plat­forms re­quire four to six weeks of data col­lec­tion be­fore bench­marks are mean­ing­ful. Sample-based query sim­u­la­tion has gaps, and tools that promise complete cov­er­age” of every AI an­swer are over­stat­ing their method­ol­ogy.

These are the es­tab­lished SEO plat­forms that ex­tended into AI track­ing start­ing in 2024. These tools layer AI ci­ta­tion data on top of tra­di­tional search met­rics, which makes them use­ful for teams al­ready run­ning SEO work­flows.

Tools in this cat­e­gory: Similarweb (AI Intelligence), Semrush (AI Toolkit), Ahrefs (Brand Radar).

Best for: SEO teams that want AI vis­i­bil­ity data with­out a new ven­dor re­la­tion­ship. The in­te­gra­tion with ex­ist­ing search re­port­ing is the main value; it lets a team see or­ganic and AI traf­fic in the same view.

Watch for: AI cov­er­age in this cat­e­gory is gen­er­ally nar­rower than in ded­i­cated AI ci­ta­tion plat­forms. The tools were built for search and are still catch­ing up on the AI side. AI num­bers here have to be treated as di­rec­tional.

In this cat­e­gory: the an­a­lyt­ics plat­forms that de­tect and seg­ment traf­fic ar­riv­ing from AI en­gines. These are the ci­ta­tion mon­i­tor­ing tools that tell a brand it’s be­ing men­tioned. This cat­e­gory tells a brand what hap­pens af­ter.

Tools in this cat­e­gory: Parse.ly (part of the WordPress VIP prod­uct fam­ily), Plausible, Fathom Analytics, and most en­ter­prise an­a­lyt­ics plat­forms (Google Analytics 4) with cus­tom seg­men­ta­tion.

Best for: Teams that need to con­nect AI vis­i­bil­ity to busi­ness out­comes. AI ci­ta­tions are top-of-fun­nel. This cat­e­gory mea­sures what those ci­ta­tions turn into. The brands that fig­ure out which AI-referred vis­i­tors con­vert can de­fend their AI strat­egy spend.

Watch for: AI re­fer­rer de­tec­tion still varies by plat­form. Some AI en­gines pass clean re­fer­rer head­ers, oth­ers rely on UTM tag­ging. Coordination be­tween con­tent and an­a­lyt­ics teams is usu­ally re­quired to get clean data.

Broader brand mon­i­tor­ing plat­forms that added AI sur­face track­ing to ex­ist­ing so­cial lis­ten­ing and PR mon­i­tor­ing ca­pa­bil­i­ties. These cover AI en­gines as one in­put along­side so­cial and tra­di­tional me­dia men­tions.

Tools in this cat­e­gory: Brandwatch, Talkwalker, Meltwater.

Best for: Communications and PR teams that al­ready use these plat­forms for cri­sis mon­i­tor­ing and share-of-voice track­ing. The AI cov­er­age is an ex­ten­sion of an ex­ist­ing work­flow.

Watch for: AI cov­er­age in this cat­e­gory tends to be lighter than in ded­i­cated AI ci­ta­tion tools. Useful for a 30,000-foot view, less use­ful for gran­u­lar ci­ta­tion analy­sis.

This is what en­ter­prises with en­gi­neer­ing ca­pac­ity are build­ing them­selves. These so­lu­tions use LLM APIs to query AI en­gines on a sched­ule and sur­face re­sults in a dash­board the team con­trols. Pew Research Center’s work with WordPress VIP, cov­ered in Chapter 2, is one ex­am­ple of this ap­proach.

Best for: Enterprises with en­gi­neer­ing re­sources who want to de­fine their own queries and con­trol their own data. Ideal when the brand’s AI vis­i­bil­ity strat­egy de­pends on niche or in­dus­try-spe­cific queries that off-the-shelf tools don’t cover well.

Watch for: Maintenance bur­den. LLM API ac­cess is now sta­ble, though pric­ing and rate lim­its change fre­quently. Custom dash­boards re­quire on­go­ing en­gi­neer­ing at­ten­tion to keep cur­rent.

AI brand vis­i­bil­ity tools at a glance

How to choose

Match the tool cat­e­gory to the ques­tion the team needs to an­swer:

Are we be­ing cited?” Use an AI ci­ta­tion mon­i­tor­ing plat­form.

Are we be­ing cited rel­a­tive to our search per­for­mance?” Use search an­a­lyt­ics with AI over­lays.

What hap­pens af­ter we’re cited?” Use web an­a­lyt­ics with AI re­fer­ral track­ing.

How does AI fit into our broader brand sen­ti­ment?” Use a brand in­tel­li­gence plat­form.

We need to track some­thing none of the above can an­swer.” Build a cus­tom so­lu­tion.

Most en­ter­prises use two cat­e­gories to­gether. The most com­mon com­bi­na­tion is a tool from the AI ci­ta­tion mon­i­tor­ing cat­e­gory to know whether the brand shows up, and a tool from the web an­a­lyt­ics cat­e­gory to know what that vis­i­bil­ity is worth. The brands that fig­ured this out first are the ones whose 2027 AI vis­i­bil­ity bud­gets won’t be re-lit­i­gated in bud­get meet­ings.

Continue read­ing

Chapter 2

Brands chase AI vis­i­bil­ity. Consumers chase the source.

Chapter 3

Consumers are wary of gate­keep­ing. More than mar­keters are.

Chapter 4

The web­site is still the de­fault trust layer.

Chapter 5

The next web­site does­n’t look like a web­site.

FAQs about AI brand vis­i­bil­ity

Bot fa­tigue is the point at which on­line in­ter­ac­tions start to feel syn­thetic. WordPress VIPs 2026 sur­vey of 1,200 U.S. con­sumers found the av­er­age per­son hits bot fa­tigue in about 40 min­utes. The broader pat­tern: 74% of con­sumers say the in­ter­net feels less hu­man than it did 10 years ago, which is the con­sumer-mood shift dri­ving most of what brands are now try­ing to solve in their AI strat­egy.

Not yet. The cat­e­gory is too new and the mea­sure­ment tools are too im­ma­ture. Platforms cite dif­fer­ent sources for dif­fer­ent queries, the ci­ta­tions change as mod­els up­date, and the met­rics en­ter­prise teams use to track AI vis­i­bil­ity aren’t stan­dard­ized across ven­dors. What’s clear is that no brand has built a durable AI pres­ence. The brand that de­fines what AI brand vis­i­bil­ity done well” looks like will be the one that fig­ures out the mea­sure­ment layer be­fore the rest of the mar­ket does.

The web­site has two jobs now and they have to run on the same foun­da­tion. AI en­gines need struc­tured con­tent they can find and cite ac­cu­rately. Human vis­i­tors need a rea­son to stay once they click through from an AI sum­mary. The brands solv­ing for both are treat­ing the web­site as the place where AI ex­tracts data and a per­son has an ex­pe­ri­ence worth their time. This is the cen­tral ar­gu­ment of WordPress VIPs 2026 State of the Open Web re­port.

Learn about Lore: next-generation open source version control

lore.org

Maintained by Epic Games, Lore is de­signed for un­prece­dented scal­a­bil­ity of both data and teams. It’s op­ti­mized for pro­jects—in­clud­ing games and en­ter­tain­ment—that com­bine code with large bi­nary as­sets, and caters for the needs of de­vel­op­ers and artists alike.

GLM-5.2 is the new leading open weights model on the Artificial Analysis Intelligence Index

artificialanalysis.ai

Z ai’s GLM-5.2 is the new lead­ing open weights model on the Artificial Analysis Intelligence Index scor­ing 51 and it sits on the Pareto fron­tier of Intelligence vs Cost per Task

GLM-5.2 is the same size as GLM-5.1 (744B to­tal / 40B ac­tive pa­ra­me­ters) but scores 11 points higher on the Intelligence Index v4.1, plac­ing ahead of MiniMax-M3 (44) and DeepSeek V4 Pro (max, 44). On the first-party API it is priced in line with GLM-5.1 at $1.4/$4.4/$0.26 per 1M in­put/​out­put/​cache hit to­kens

Key re­sults:

➤ GLM-5.2 is the lead­ing open weights model on the Intelligence Index v4.1. At 51, it leads MiniMax-M3 (44), DeepSeek V4 Pro (max, 44) and Kimi K2.6 (43)

➤ Improvements across most eval­u­a­tions, par­tic­u­larly sci­en­tific rea­son­ing: GLM-5.2 gains over GLM-5.1 on most eval­u­a­tions, led by sci­en­tific rea­son­ing on CritPt (+16 points to 21%) and HLE (+12 points to 40%), along­side AA-LCR (+9 points to 71%), tau3 bank­ing (+15 points to 27%) and SciCode (+7 points to 50%). TerminalBench v2.1 also im­proves (+16 points to 78%) and GPQA Diamond gains 3 points to 89%

➤ Leading open weights model on GDPval-AA v2 and com­pet­i­tive with pro­pri­etary mod­els: GLM-5.2 scores 1524 on GDPval-AA v2, ahead of MiniMax-M3 (1418) and DeepSeek V4 Pro (max, 1328). This im­pres­sive re­sult places GLM-5.2 in-line with pro­pri­etary mod­els in­clud­ing GPT-5.5 (xhigh rea­son­ing). GDPval-AA v2 builds on the orig­i­nal GDPval-AA by baselin­ing Elo to hu­man per­for­mance at 1000, in­tro­duc­ing a ro­tat­ing panel of fron­tier-model judges, and rais­ing the turn limit from 100 to 250 for longer-hori­zon agent tra­jec­to­ries

➤ GLM-5.2 uses more out­put to­kens per task than other lead­ing open weights mod­els: the model uses 43k out­put to­kens per Intelligence Index task, up from GLM-5.1 (26k) and above MiniMax-M3 (24k), Kimi K2.6 (35k) and DeepSeek V4 Pro (max, 37k)

➤ On the Intelligence vs. Cost per Task Pareto Frontier: GLM-5.2 is on the Pareto fron­tier of the Intelligence vs Cost per Task chart, with the low­est cost per task among mod­els at its in­tel­li­gence level. GLM-5.2 costs ~$0.46 per task, com­pared to GLM-5.1 ($0.25), Kimi K2.6 ($0.31), MiniMax-M3 ($0.18) and DeepSeek V4 Pro (max, $0.05)

Additional Model Details:

➤ License: MIT

➤ Size: 744B to­tal pa­ra­me­ters, 40B ac­tive pa­ra­me­ters, equiv­a­lent to GLM-5.1

➤ Context win­dow: 1M to­kens, up from 200K on GLM-5.1

➤ Pricing: $1.4/$0.26/$4.4 per 1M in­put/​cache hit/​out­put to­kens

➤ Availability: Alongside Z ai’s first-party API, GLM-5.2 is avail­able across third-party providers in­clud­ing DeepInfra, Novita, Nebius, Parasail, Siliconflow, GMI Cloud, Baseten, and Fireworks

GLM-5.2 leads all open weights mod­els on GDPval-AA v2, our pri­mary met­ric for real-world agen­tic per­for­mance. At 1524 it places ahead of MiniMax-M3 (1418) and DeepSeek V4 Pro (max, 1328), and is ef­fec­tively level with GPT-5.5 (xhigh, 1514). We vi­su­ally in­spected GLM-5.2′s out­puts across a range of GDPval-AA tasks. We have at­tached a se­lec­tion be­low.

GLM-5.2 scores 4 on the AA-Omniscience Index, up from GLM-5.1 (2). The gain comes from both higher ac­cu­racy (25.1% vs 24.2%) and a lower hal­lu­ci­na­tion rate (28.1% vs 29.4%), with at­tempt rate flat at 47%.

GLM-5.2 uses 43k out­put to­kens per Intelligence Index task, of which 37k is rea­son­ing. This is up from GLM-5.1 (26k) and higher than open weights peers MiniMax-M3 (24k) and Kimi K2.6 (35k), plac­ing it among the less to­ken-ef­fi­cient open weights mod­els at its in­tel­li­gence level. GLM-5.2 sits off the most at­trac­tive quad­rant on the Intelligence vs Output Tokens chart.

Breakdown of the in­di­vid­ual eval­u­a­tions in the Artificial Analysis Intelligence Index v4.1.

Compare GLM-5.2 with other lead­ing mod­els at: https://​ar­ti­fi­cial­analy­sis.ai/​mod­els/​glm-5 – 2

Want your images back? Sure... That'll be $5!

www.lutr.dev

We’re in the era of tril­lion-dol­lar com­pa­nies, but that does­n’t mean you should leave $5 on the table!

Take, for ex­am­ple, Photobucket. In case you’ve never heard of it, it is the Imgur-equivalent of ages ago. I was us­ing it as a kid to up­load im­ages there and link them on var­i­ous fo­rums. A nice, sim­ple web­site that just did its job.

So what’s my old pal Photobucket do­ing now?

Well, re­cently, I was go­ing through my old ac­counts and started clean­ing them up. Deleting what needs to be deleted, restor­ing pass­words to what was no longer work­ing, things like that1…

And that’s how I re­mem­bered about Photobucket!

Now, mind you, that was af­ter I’d al­ready found my old Imgur ac­count with hun­dreds of old (and nos­tal­gic!) screen­shots that I then backed up safely. So I was re­ally ex­cited! This Photobucket ac­count must have been… damn… even older! Who knows what rem­nants of my child­hood I’ll find there?

And so, I logged in ex­pec­tantly. Ready to be amazed! Prepared to drop a nos­tal­gia tear! Excited to fi­nally…

Wait, WHAT?!!

You shared them. We pro­tected them.

AGAINST WHAT?!! Because it sure as hell is­n’t against cor­po­rate greed! More like:

You shared them. We pay­walled them. (And you should thank us!)

You shared them. We pay­walled them. (And you should thank us!)

So I now have to pay for the im­ages I up­loaded on a (previously) free ser­vice?!! No way, I’m not do­ing that! Take my im­ages and keep them on your servers un­til you go bank­rupt! I won’t en­dorse such be­hav­ior by giv­ing you money.

I’m no fool!

But… I mean it’s just $5… Surely my child­hood mem­o­ries must be worth more than that, right? And I guess it’s kinda nice they did­n’t delete them… So, okay, I’ll give this some thought and…

$5… PER MONTH?!!

So this unas­sum­ing claim:

It’s time to re­live them for just $5.

It’s time to re­live them for just $5.

from the sweet-sweet Photobucket Inc. was miss­ing just a tiny lit­tle de­tail… a foot­note… some legalese, as you might say… That it’s a MONTHLY SUBSCRIPTION, MAYBE?!!

THE. BLATANT. GREED!

So they’re hop­ing that I’m cu­ri­ous, I pay for this crap, and then for­get about my MONTHLY SUBSCRIPTION? Oh no, no, no. That’s al­most evil. Paywalling my child­hood mem­o­ries in or­der to trap me into ac­ci­den­tally sub­scrib­ing to your use­less ser­vice? Hoping I’d then can­cel it af­ter maybe a few years, when I fi­nally no­tice an odd ex­pense on my card?

NO.

Just no. I won’t stand for this. Childhood mem­o­ries be damned!

Aw man… I re­ally won­der what’s in there… I mean it’s just a sub­scrip­tion… I pay the $5, I down­load my im­ages, I can­cel the sub­scrip­tion, and I’m outta there. May God be my wit­ness that it was­n’t an easy call, that I fought for my dig­nity!

Ok, let’s do this quickly. I want to min­i­mize the pain.

Enter the card de­tails… click on Pay by Card… wait a bit…

And I’m in!

Finally! Really won­der­ing what’s in here! Let’s take a… look……

Oh… No…

IS IT FREAKING EMPTY?!!

I think I hate my­self now. I’m such a fool!!! That’s what I get for go­ing along with these preda­tory tac­tics… Should’ve known this would hap­pen. I guess I was us­ing a dif­fer­ent, even older Photobucket ac­count as a kid, or some­thing.

Wait.

Photobucket. You must have known I don’t have any im­ages on my ac­count. AND YOU STILL MADE ME PAY?!! Reclaim your mem­o­ries my ass.

That’s it, I’m done.

I knew I for­got some­thing!

Okay. Now I’m done.

Editor’s note

As I was writ­ing and re­liv­ing this beau­ti­ful ex­pe­ri­ence, I no­ticed a lit­tle foot­note on the pay­ments page:

Did I no­tice this in time to re­quest the re­fund? Of course I did­n’t. Those 5 beau­ti­ful dol­lars are for­ever gone.

But maybe this helps some­one… Yay to the move­ment against cor­po­rate greed!… 🍻

Update

This post ended up be­ing pretty pop­u­lar on Hacker News with lots of fun dis­cus­sions. Two things worth men­tion­ing:

Just to be ex­tra clear, I don’t be­lieve Photobucket in­ten­tion­ally deleted all the im­ages I up­loaded and then asked for $5/mo just be­cause they hate me. While I do re­mem­ber up­load­ing things there as a kid, I bet I was us­ing an even older ac­count.

Just to be ex­tra clear, I don’t be­lieve Photobucket in­ten­tion­ally deleted all the im­ages I up­loaded and then asked for $5/mo just be­cause they hate me. While I do re­mem­ber up­load­ing things there as a kid, I bet I was us­ing an even older ac­count.

It was sug­gested that I re­quest a charge­back from my card. Apparently debit cards also al­low them, did­n’t know this! I might give it a shot, who knows, maybe I’ll end up pay­ing $0 for this story!

It was sug­gested that I re­quest a charge­back from my card. Apparently debit cards also al­low them, did­n’t know this! I might give it a shot, who knows, maybe I’ll end up pay­ing $0 for this story!

Ok, no, pay­ing $0 won’t hap­pen. Apparently us­ing Vercel to host a per­sonal blog might not be the best idea. I’m nearly reach­ing the limit of Edge Requests in just 2 hours af­ter the post. According to trust­wor­thy Claude, the site will go down if I sur­pass it?…

So I’ll prob­a­bly end up do­ing this2:

No men­tion of any re­funds though, I checked! :P

I was bored. Also, go­ing through a fi­nite list of things and com­plet­ing them one at a time feels sat­is­fy­ing… even pro­duc­tive! However, feels is the cor­rect verb here. ↩

I was bored. Also, go­ing through a fi­nite list of things and com­plet­ing them one at a time feels sat­is­fy­ing… even pro­duc­tive! However, feels is the cor­rect verb here. ↩

And mi­grate to Cloudflare Pages or some­thing, when I have some time to spare. ↩

And mi­grate to Cloudflare Pages or some­thing, when I have some time to spare. ↩

America’s compact between science and politics is broken

www.scientificamerican.com

Last year Christopher Reynolds started to worry that his space tele­scope was go­ing to be killed.

The mis­sion had started tak­ing shape nine years ear­lier, a bil­lion-dol­lar or­bit­ing ob­ser­va­tory that would look back in time into the early uni­verse to study the first black holes, the for­ma­tion of galax­ies, and more. Eight teams of re­searchers pitched NASA their ideas; Reynolds, an as­tronomer at the University of Maryland, was part of a group that wanted to de­ploy a new tech­nol­ogy: x-ray mir­rors made of sin­gle-crys­tal sil­i­con. It sounded promis­ing enough that in October 2024 Reynolds’s group got a $5-million grant from the agency to re­fine the idea—the Advanced X-ray Imaging Satellite, or AXIS. The sci­en­tists teamed up with space­craft builders at the nasa Goddard Space Flight Center. Everything seemed to be go­ing pretty well,” Reynolds says. And then we started to get hit by pro­gram­matic chaos.”

Last June the bud­get hawks in the Department of Government Efficiency (DOGE) pushed NASA into of­fer­ing a broad pack­age of buy­outs, paid leave and early re­tire­ment. Over the next few weeks nearly 4,000 NASA em­ploy­ees—about a fifth of the work­force—took the deal. Reynolds’s AXIS team lost 20 peo­ple. The en­gi­neer de­sign­ing the heaters to keep the x-ray mir­ror at a con­stant tem­per­a­ture: gone. The lead pro­ject man­ager: gone. William Zhang, the as­tro­physi­cist who in­vented the tele­scope’s mir­ror tech­nol­ogy: gone. We were lit­er­ally left with their PowerPoints, try­ing to fig­ure out what they’d done and where we were with as­pects of the de­sign,” Reynolds says.

On sup­port­ing sci­ence jour­nal­ism

If you’re en­joy­ing this ar­ti­cle, con­sider sup­port­ing our award-win­ning jour­nal­ism by sub­scrib­ing. By pur­chas­ing a sub­scrip­tion you are help­ing to en­sure the fu­ture of im­pact­ful sto­ries about the dis­cov­er­ies and ideas shap­ing our world to­day.

Around the same time President Donald Trump’s bud­get pro­posal came out—with mas­sive cuts to sci­ence fund­ing. In the U.S., pri­vate money funds vast amounts of sci­en­tific de­vel­op­ment re­search, and phil­an­thropy con­tributes a bit, but some­thing like 40 per­cent of all the fund­ing for ba­sic, blue-sky, ex­ploratory re­search comes from the fed­eral gov­ern­ment. The pro­gram that would have funded AXIS was ze­roed out en­tirely.

That was just the re­quest, Reynolds fig­ured at the time; Congress still has to do the ac­tual ap­pro­pri­a­tion. In any nor­mal year, that’s what would have hap­pened,” he says. But the cen­ter lead­er­ship started quite quickly align­ing their pri­or­i­ties to the pres­i­den­t’s bud­get re­quest.”

Goddard re­as­signed en­gi­neers to pro­jects that would be funded if Congress ap­proved the bud­get as writ­ten. Reynolds’s team lost its sys­tems en­gi­neers, which in turn de­layed shar­ing of AXISs pro­posed de­sign with Goddard’s cost an­a­lysts and sched­ule spe­cial­ists. We got our very first cost es­ti­mate in the mid­dle of September 2025,” Reynolds says. We were 10 per­cent over bud­get.” He started try­ing to find things to cut. But then, in October, the fed­eral gov­ern­ment shut down. The whole cen­ter just stopped,” he says. Everything stopped.”

When the shut­down ended in mid-No­vem­ber, Reynolds’s team had just two weeks to get on bud­get. It failed. The plan the group sub­mit­ted would cost too much and take too long. Our last hope was that NASA head­quar­ters would un­der­stand what had gone on and give us some lee­way,” Reynolds says. NASA did not. After nearly 10 years of work, AXIS was dead.

Now, Reynolds says, he’s fine, mostly. He’s a tenured pro­fes­sor and has other re­search to work on. The jobs that are lost are the fu­ture jobs,” he says. And there’s an en­tire field of study in which U.S. lead­er­ship is at stake.” The hard­est part, though, is how it hap­pened. DOGEs cuts sliced through American re­search grants like a thresher, but this was much murkier,” Reynolds says. We were never can­celed. We were just starved to death.”

Countless sci­en­tists around the coun­try are go­ing through the same thing. Thousands of fed­eral grants have been frozen or can­celed, with per­haps 2,600 still in limbo—about $1.4 bil­lion worth. The National Science Foundation and the National Institutes of Health are award­ing three quar­ters of their usual num­ber of grants. Fewer peo­ple are en­ter­ing grad­u­ate pro­grams. Nearly 95,000 sci­en­tists have left fed­eral gov­ern­ment em­ploy­ment. The NIH used to is­sue as many as 850 Notices of Funding Opportunity” every year—re­quests for pro­pos­als that sought spe­cific kinds of re­search. In 2025 the agency is­sued 120. By mid-March of 2026, the NIH had sent 14.

What’s go­ing on is noth­ing short of a gen­er­a­tional change in how the U.S. or­ga­nizes its sci­en­tific en­ter­prise. More than that, sci­ence feels dif­fer­ent. Its pur­pose, its ex­is­ten­tial vibe, seems to have shifted. The cul­tural sta­tus of the peo­ple who do it has changed. And they don’t un­der­stand why.

The pre­vail­ing emo­tions among sci­en­tists right now are rage and shock. A sur­vey con­ducted by sci­ence news web­site STAT found that more than half of re­searchers with grants from the NIH—once a re­li­able source of $40 bil­lion a year—re­ported some level of dis­rup­tion to their fund­ing: a to­tal freeze, a de­lay in dis­burse­ment or a re­duc­tion in amount. And 81 per­cent of re­searchers in tenure-track po­si­tions said they were con­cerned that fund­ing dis­rup­tions could af­fect their pro­duc­tiv­ity enough to jeop­ar­dize their chances of get­ting tenure.

Now, to be sure, the end prod­uct of sci­ence is sup­posed to be sci­ence, not grants or tenure. Applying for highly com­pet­i­tive grants with lim­ited fund­ing is what sci­en­tists have al­ways had to do to carry out the sci­ence—a flawed process with few al­ter­na­tives. But ar­bi­trary can­cel­la­tions and de­layed dis­burse­ments are un­prece­dented. And jus­ti­fy­ing them on the ba­sis of pol­i­tics—pro­hibit­ing, for in­stance, grants that in­clude lan­guage ref­er­enc­ing di­ver­sity, eq­uity and in­clu­sion (DEI)—was un­heard of un­til now.

When Jenna Norton, a pro­gram di­rec­tor at the National Institute of Diabetes and Digestive and Kidney Diseases (NIDDKD), first got to the NIH 12 years ago, she wanted to in­crease re­search into the so­cial de­ter­mi­nants of health—struc­tural racism in home-loan prac­tices meant that non­white peo­ple got iced out of home own­er­ship and gen­er­a­tional wealth, which forced them to live in neigh­bor­hoods closer to toxic sites such as fac­to­ries and high­ways, with­out side­walks and ameni­ties. It’s a chal­leng­ing field to quan­tify, but we’re get­ting to a place in sci­ence where we can start ask­ing these ques­tions,” Norton says. Now the topic is ver­boten in U.S. grants. That whole line of re­search has been shut off and cen­sored be­cause some peo­ple find the words structural racism’ of­fen­sive.”

Mari Fouz (illustration); Getty Images (photographs fea­tured in il­lus­tra­tion)

Political op­er­a­tives at the NIH passed around lists of words that grants weren’t al­lowed to use—in ei­ther ap­pli­ca­tions or ex­ist­ing, funded pro­jects. Program man­agers across the NIH and the NSF were told to ask af­fected re­searchers whether they’d care to change the lan­guage in their re­search de­scrip­tions or risk los­ing their fund­ing. Some re­searchers whose grants Norton man­aged at the NIDDKD called her to say they wanted to pre­emp­tively change the lan­guage in their grant ap­pli­ca­tions—be­fore they’d been dinged. Norton com­plained so much that she was placed on ad­min­is­tra­tive leave, al­though she has since been re­in­stated.

Of course, not all lost sci­ence had ob­vi­ous po­lit­i­cal im­pli­ca­tions. As Reynolds, the AXIS lead re­searcher, puts it, whether there are black holes at a red­shift of 10 or not is not a par­ti­san is­sue.”

These kinds of ob­sta­cles are a new ex­pe­ri­ence for most re­searchers. Getting into a ca­reer in sci­ence was al­ready hard—stu­dents of­ten un­der­take in­tel­lec­tu­ally tax­ing and phys­i­cally gru­el­ing aca­d­e­mic work last­ing years longer than most peo­ple spend in school, with lim­ited re­mu­ner­a­tion. The peo­ple who do it tend to be mis­sion-dri­ven: they want to help oth­ers, learn some­thing about the uni­verse or in­vent some­thing new. If they con­sider the po­lit­i­cal im­pli­ca­tions, it’s be­cause they’re in­trin­sic to the work. It’s not just that peo­ple feel their ca­reer is un­der at­tack,” says one long­time pub­lic health re­searcher. They feel they per­son­ally are un­der at­tack.”

DEI as­so­ci­a­tions aren’t the only top­ics that get cap­tured by the new po­lit­i­cal fil­ters. Now, for the first time, grant re­cip­i­ents aren’t al­lowed to sub­con­tract to col­lab­o­ra­tors on pro­jects over­seas. That’s ob­vi­ously a prob­lem when you study nasty dis­eases such as Lassa fever and Ebola, be­cause they’re not in this coun­try,” says Kristian Andersen, an evo­lu­tion­ary bi­ol­o­gist at Scripps Research in La Jolla, Calif. That’s my whole ca­reer. This is why I came to the United States.”

Most years, when Andersen ad­ver­tises a post­doc­toral re­search op­por­tu­nity in his lab­o­ra­tory, he gets up to 200 ap­pli­cants with per­haps a third of them from Europe. This year he had 100 ap­pli­cants and none from Europe. Typically his lab would ap­ply for two or three so-called cen­ter grants every year. This past year there were none in vi­rol­ogy, im­munol­ogy or vi­ral im­munol­ogy to ap­ply for. So what’s next? Andersen, who’s Danish, says that for peo­ple like my­self, I think the best op­tion is prob­a­bly to leave and do sci­ence else­where.” And he is­n’t the only one think­ing of get­ting out. Of about 1,650 sci­en­tists who re­sponded to a poll by the jour­nal Nature, 75 per­cent said they were con­sid­er­ing it.

The most pas­sion­ate and cre­ative sci­en­tists are very in­tu­itive and very dri­ven by emo­tion and cu­rios­ity,” says Gregory Feist, a psy­chol­o­gist at San José State University who stud­ies sci­en­tists. Until Trump, they’d been able to keep po­lit­i­cal ques­tions out of mind.” Their work was, if not above pol­i­tics, at least out­side it—es­sen­tial to every­one, re­gard­less of where they were on the po­lit­i­cal spec­trum.

Now they see things dif­fer­ently. The big eye-opener for me this past year is how quickly things can change,” a NASA cli­mate sci­en­tist says. This shock at the ease with which the gov­ern­ment can rewrite the sys­tem came up in mul­ti­ple in­ter­views. Is your grant go­ing to be frozen? Is it go­ing to be ter­mi­nated? Is it go­ing to be re­in­stated? Is it go­ing to be de­layed be­cause you’re re­quired to change the word­ing?” asks Scott Delaney, a for­mer Harvard University epi­demi­ol­o­gist who co-cre­ated the watch­dog group Grant Witness. The re­al­ity is, be­cause of what hap­pened and what’s hap­pen­ing now, the trust be­tween re­searchers and the fed­eral gov­ern­ment is com­pletely bro­ken.”

Without that trust, the en­tire sys­tem could blow apart. Laboratories are go­ing to close. Trainees are go­ing to go to other coun­tries or pur­sue non­science ca­reers,” says Carole LaBonne, a de­vel­op­men­tal bi­ol­o­gist at Northwestern University. This com­pact that has ex­isted since World War II, that made the U.S. the suc­cess­ful, pros­per­ous na­tion that it is, is be­ing dis­man­tled.”

What broke the com­pact? Several re­searchers iden­ti­fied the re­sponse to the COVID pan­demic as a flash point. Public health guid­ance flailed ini­tially on ques­tions of mask­ing, school clo­sures and front­line drugs. It also pro­duced a good vac­cine in un­der a year, an un­heard-of suc­cess. Ultimately around a mil­lion peo­ple died of the dis­ease within the first two years.

The ex­pe­ri­ence dam­aged trust in sci­ence and sci­en­tists. It’s still high—the num­ber of peo­ple say­ing they have a lot of trust in sci­ence has hov­ered around 77 per­cent for years. But it was 10 points higher be­fore COVID, and it now splits hard along lines of po­lit­i­cal af­fil­i­a­tion. Especially in the U.S. and with so­cial me­dia, all of a sud­den every­body was an ex­pert on COVID. So much of it was just bull­shit,” Andersen says. And then at some point bull­shit was all that was left.”

That helps to ex­plain how a non­sci­en­tist such as Robert F. Kennedy, Jr., known for un­ortho­dox and un­proven ideas about health and med­i­cine, be­came leader of the Department of Health and Human Services with over­sight of the NIH. But it does­n’t ex­plain how Elon Musk, an in­dus­tri­al­ist and the rich­est hu­man to ever live, got the power to ex­cise so much of the coun­try’s re­search. It does­n’t ex­plain why the for­mer con­ser­v­a­tive think tanker Russell Vought could use con­trol of the wonk­ish Office of Management and Budget to zero out re­search fund­ing.

I would like to see more peo­ple speak­ing up, but the fact is, mostly peo­ple don’t.” —Kristian Andersen Scripps Research

I would like to see more peo­ple speak­ing up, but the fact is, mostly peo­ple don’t.” —Kristian Andersen Scripps Research

There’s a strain of an­tipa­thy to uni­ver­si­ties and aca­d­e­mic truth-seek­ing in far-right con­ser­vatism, cer­tainly. But other than burn-it-all-down ni­hilism or anti-in­tel­lec­tu­al­ism, why nuke the so­cial con­tract be­tween gov­ern­ment and sci­ence? One pos­si­bil­ity is that the deal was al­ready dy­ing.

In the first half of the 20th cen­tury, busi­ness­peo­ple, pol­i­cy­mak­ers and sci­en­tists try­ing to fig­ure out how airy aca­d­e­mic re­search got turned into use­ful stuff came up with what’s now called the lin­ear model of in­no­va­tion, a the­o­ret­i­cal (and con­tested) se­quence that went from fund­ing to ba­sic re­search to ap­plied re­search to the de­vel­op­ment of a tech­nol­ogy or prod­uct. The best-known cod­i­fi­ca­tion of the model came to­ward the end of World War II in a re­port called Science: The Endless Frontier, by Vannevar Bush, an en­gi­neer who had headed the wartime Office of Scientific Research and Development. Bush un­der­stood that ap­plied sci­ence had won the war for the Allies—not only the atomic bomb but also radar, peni­cillin, food preser­va­tion, cryp­tog­ra­phy, and so on. Nerds saved free­dom’s ba­con, but Bush and oth­ers had had a hell of a time get­ting that nascent sci­en­tific po­ten­tial onto the bat­tle­field. So Bush pro­posed putting all of U.S. sci­ence on re­tainer.

Basic re­search, Bush wrote, was performed with­out thought of prac­ti­cal ends” and creates the fund from which the prac­ti­cal ap­pli­ca­tions of knowl­edge must be drawn.” So he pro­posed a vast ex­pan­sion of the state’s ca­pac­ity to do sci­ence, via fund­ing man­aged by agen­cies such as the NSF and the NIH. The gov­ern­ment would give tax dol­lars to sci­en­tists so they could cast around in the dark do­ing ba­sic re­search. Irregularly, some of that work would lead to new drugs or com­mu­ni­ca­tions satel­lites or op­ti­mized food crops. Not every dol­lar of gov­ern­ment sup­port for sci­ence would re­sult in a block­buster drug or a bil­lion-dol­lar tech­nol­ogy, but a ma­jor­ity of block­buster drugs and bil­lion-dol­lar tech­nolo­gies would de­rive from gov­ern­ment sup­port. So the gov­ern­ment promised to fund a lot. And in re­turn, the sci­en­tists promised to jump through the gov­ern­men­t’s hoops and re­spond to an oc­ca­sional Bat-Signal. That’s the hand­shake be­tween sci­ence and the mar­ket,” says Benjamin Jones, an econ­o­mist at Northwestern, who stud­ies in­no­va­tion.

It sounds like a busi­ness- and de­fense-minded strat­egy. But as in­no­va­tion re­searcher Benoît Godin points out, even though Bush agreed with busi­ness in­ter­ests about the fact that re­search and the train­ing of sci­en­tists led to in­dus­trial progress, his ra­tio­nale was ex­plic­itly so­cial. Without sci­en­tific progress the na­tional health would de­te­ri­o­rate; with­out sci­en­tific progress we could not hope for im­prove­ment in our stan­dard of liv­ing or for an in­creased num­ber of jobs for our cit­i­zens; and with­out sci­en­tific progress we could not have main­tained our lib­er­ties against tyranny,” Bush wrote.

In fact, by the 1960s mil­i­tary and in­dus­trial in­ter­ests had mostly lost pa­tience with the ivory-tower ex­ploratory side of the equa­tion. The lead­ers of American cap­i­tal and fi­nance cer­tainly wanted to goose sci­en­tific and tech­ni­cal in­no­va­tion, but they thought the real prob­lem was where the money went and how much was avail­able. Banks did­n’t want to risk loans to iffy tech start-ups with no col­lat­eral. But a spe­cial kind of in­vestor—a ven­ture in­vestor—would bring high-risk dol­lars to re­search in re­turn for par­tial own­er­ship of the com­pany do­ing it.

That ap­proach seemed to stall out, too. In 1977 William Casey, fu­ture di­rec­tor of the Central Intelligence Agency, wrote a re­port for the U.S. Small Business Administration ar­gu­ing that it was be­cause ven­ture cap­i­tal did­n’t have ac­cess to enough money. His new model for in­no­va­tion, says M. R. Sauter, a his­to­rian of tech­nol­ogy at the University of Maryland, brought to the cen­ter not ba­sic re­search or even ap­plied en­gi­neer­ing but, sim­ply, money—and the in­vestors who had it. Casey’s re­port rec­om­mended chang­ing the reg­u­la­tions in the Employee Retirement Income Security Act of 1974 so that in­sti­tu­tional cap­i­tal, like re­tire­ment funds, could en­ter the riskier ven­ture game. In 1979 Congress did just that.

And in 1980 Congress passed the Bayh-Dole Act, mov­ing own­er­ship of the re­sults of gov­ern­ment-funded uni­ver­sity re­search from the gov­ern­ment to the uni­ver­si­ties. Now a block­buster new drug or search al­go­rithm could be a wind­fall for a uni­ver­sity, and uni­ver­sity ad­min­is­tra­tions had com­mon cause with ven­ture in­vestors. More ba­sic dis­cov­er­ies started get­ting turned into dol­lars. But the al­liance shifted the em­pha­sis from state ca­pac­ity to fi­nan­cial out­comes.

Today the most in­flu­en­tial pri­vate-sec­tor de­vel­op­ers of tech­nol­ogy are in Silicon Valley, and their per­spec­tive on in­no­va­tion is that it should move fast, dis­rupt mar­kets and make money. That per­spec­tive is in­flu­enc­ing gov­ern­ment fi­nanc­ing of sci­ence more than ever be­fore. Right now the [Trump] ad­min­is­tra­tion is very de­struc­tive and is chang­ing its mind all the time. It has this dim­mer view of sci­ence and also sort of wants to win in tech­nol­ogy,” says Jones, the Northwestern econ­o­mist. That is fu­eled some­what by the dis­rup­tive ori­en­ta­tion of suc­cess­ful peo­ple in Silicon Valley who are hav­ing an in­flu­ence.”

I think that per­spec­tive is flat-out wrong,” Jones adds.

For most of this cen­tury pretty much every met­ric of sci­en­tific pro­duc­tiv­ity—new re­sults, new dis­cov­er­ies and new in­ven­tions—has ap­peared to be down. This idea is con­tro­ver­sial, and the data are dif­fi­cult to mea­sure, but that’s aca­d­e­mic be­cause this nom­i­nal down­turn opened the in­sti­tu­tions of sci­ence to crit­i­cism that it was sci­en­tists who were fail­ing to honor the bar­gain. Maybe it’s no sur­prise that the whole thing has turned into what Arizona State University so­ci­ol­o­gist Edward Hackett calls academic cap­i­tal­ism.” Today’s in­vestors and pol­i­cy­mak­ers think all re­search should be eco­nom­i­cally rel­e­vant and as­sist in the ac­cu­mu­la­tion of cap­i­tal. A knowledge-based econ­omy,” says Lancaster University so­ci­ol­o­gist Bob Jessop, wants all sci­en­tists to be en­tre­pre­neurs. Which all sounds fa­mil­iar.

This view might be why the newly re­con­sti­tuted President’s Council of Advisors on Science and Technology in­cludes just one sci­en­tist, a physi­cist. The other 12 mem­bers are Silicon Valley lu­mi­nar­ies such as ven­ture cap­i­tal­ist Marc Andreessen and Jensen Huang, CEO of com­puter chip­maker Nvidia. And in March, Trump nom­i­nated ven­ture cap­i­tal in­vestor Jim O’Neill as di­rec­tor of the NSF. Companies that work on ar­ti­fi­cial in­tel­li­gence, the hot tech of the mo­ment, tout the abil­ity of their prod­ucts to take over the la­bor of do­ing sci­ence, from an­a­lyz­ing data to for­mu­lat­ing hy­pothe­ses. GPT-5.2 is kind of al­ready in­tel­li­gent enough to be a soft col­lab­o­ra­tor in many sci­en­tific in­quiries,” says Sébastien Bubeck, a com­puter sci­en­tist at OpenAI.

That’s not the world sci­en­tists want, but it’s the one they’ve got. The prob­lem is, sub­ject­ing sci­ence to po­lit­i­cal taste tests and a more com­mer­cial mind­set al­most cer­tainly means fewer world-chang­ing re­sults. No one can ever know when noodling around with Gila mon­ster saliva will yield anti-obe­sity GLP-1 drugs. And putting politi­cos atop the pyra­mid of grant eval­u­a­tions, sci­en­tists say, will be a dis­as­ter. Researchers who man­age to get grants to study health out­comes on the con­di­tion that they ig­nore the ef­fects of vari­ables such as so­cioe­co­nomic sta­tus, gen­der and eth­nic­ity won’t even be able to pub­lish their find­ings, be­cause peer re­view­ers, an NSF di­rec­tor says, are not go­ing to sud­denly in­dulge this fan­tasy.” They’re go­ing to de­mand that stud­ies fac­tor in rel­e­vant vari­ables.

Last year a team of econ­o­mists imag­ined what this new fu­ture might look like by cre­at­ing an al­ter­na­tive past. In 2025 the NIH cut the amount of grant money awarded by more than 40 per­cent com­pared with years prior. What if, the team mem­bers asked, the NIH re­search bud­get had been 40 per­cent smaller for the past few decades? Grants in the bot­tom 40 per­cent of the pri­or­ity queue, they rea­soned, would­n’t have been funded. The team tracked those grants to their out­comes—re­search that never hap­pened in this par­al­lel uni­verse—and found that some­thing like half of all drugs sim­ply would­n’t ex­ist to­day. The lost ther­a­pies in­clude ima­tinib, the first real treat­ment for chronic myeloid leukemia, and the lung can­cer drug er­lotinib.

What are sci­en­tists sup­posed to do about all this? I would like to see more peo­ple speak­ing up, but the fact is, mostly peo­ple don’t,” Andersen says. They don’t want to be a tar­get of the fed­eral gov­ern­ment. Having been in that, and still be­ing in that, [I can say] it’s not very pleas­ant.”

Like many other sci­en­tists, Andersen ex­presses dis­ap­point­ment in what he sees as a fail­ure of the in­sti­tu­tions of sci­ence—the na­tional acad­e­mies, the American Association for the Advancement of Science, uni­ver­si­ties—to mount a louder op­po­si­tion. We have seen none of that, es­pe­cially from the acad­e­mies,” he says.

Some sci­en­tists try to just keep their heads down and keep work­ing. Others know they can’t. In pub­lic health, we have a proud his­tory of or­ga­niz­ing, right? We were cam­paign­ers,” says Gregg Gonsalves, an epi­demi­ol­o­gist and pol­icy pro­fes­sor at Yale University. By the 21st cen­tury that had changed. We were told it was not im­por­tant, that what mat­tered was the num­ber of grants and pub­li­ca­tions you had. Forget all the so­cial and po­lit­i­cal things; those are in­ci­den­tal.’ Turns out they were not. They’re core to it.”

Gonsalves, who was in­volved in the fight to care for peo­ple with HIV and AIDS in the 1980s, says that sci­en­tists now have an­other job: bearing wit­ness and putting ev­i­dence on the table. It may not be per­sua­sive to Russell Vought or Marco Rubio, but it is for the dossier, for the truth and rec­on­cil­i­a­tion com­mis­sion, for the Nuremberg tri­als that come af­ter,” he says. Keep the re­ceipts. Write down what you see. Tell them what they did. We’re very good at doc­u­ment­ing how X leads to Y.”

That’s the thing about gen­er­a­tional shifts. There’s al­ways a next gen­er­a­tion af­ter this one.

Bubbles

bubbles.town

5034 in­de­pen­dent, per­sonal blogs. One front page. Ranked by votes and fresh­ness, shaped by you.

the girly well­ness aes­thetic as a white su­prema­cist dog whis­tle (ava’s blog)

11 hours ago · Writing · 0 com­ments

27

the girly well­ness aes­thetic as a white su­prema­cist dog whis­tle (ava’s blog)

11 hours ago · Writing · 0 com­ments

27

No re­grets switch­ing to Linux (Greg Boone)

5 hours ago · Tech · 0 com­ments

12

No re­grets switch­ing to Linux (Greg Boone)

5 hours ago · Tech · 0 com­ments

12

FileZilla is still awe­some af­ter 24 years (Paul Jacobson)

11 hours ago · Tech · 0 com­ments

18

FileZilla is still awe­some af­ter 24 years (Paul Jacobson)

11 hours ago · Tech · 0 com­ments

18

I wanted Bear Blog, but for my pho­tos (Peter Gombos)

1 day ago · Life · 16 com­ments

58

I wanted Bear Blog, but for my pho­tos (Peter Gombos)

1 day ago · Life · 16 com­ments

58

Caps lock is use­less and I wish I could re­move it (opulence piledrive)

14 hours ago · Tech · 6 com­ments

14

Caps lock is use­less and I wish I could re­move it (opulence piledrive)

14 hours ago · Tech · 6 com­ments

14

Adding a Town Square (Kev Quirk)

13 hours ago · Life · 1 com­ment

12

Adding a Town Square (Kev Quirk)

13 hours ago · Life · 1 com­ment

12

Bubbles men­tioned in the Installer Newsletter by The Verge. (@gurupanguji)

1 day ago · Tech · 1 com­ment

22

Bubbles men­tioned in the Installer Newsletter by The Verge. (@gurupanguji)

1 day ago · Tech · 1 com­ment

22

Apple Intelligence may be­come manda­tory in iOS and ma­cOS 27 (Manual do Usuário)

2 hours ago · Tech · 0 com­ments

2

Apple Intelligence may be­come manda­tory in iOS and ma­cOS 27 (Manual do Usuário)

2 hours ago · Tech · 0 com­ments

2

Optimism is good, ac­tu­ally (§kuthus)

6 hours ago · Life · 0 com­ments

4

Optimism is good, ac­tu­ally (§kuthus)

6 hours ago · Life · 0 com­ments

4

20 Years of Blogging (remy sharp’s b:log)

9 hours ago · Tech · 0 com­ments

5

20 Years of Blogging (remy sharp’s b:log)

9 hours ago · Tech · 0 com­ments

5

Why Does Trump Want the Save America Act? The Answer Should Worry Us. (Balkinization)

2 hours ago · Politics · 0 com­ments

2

Why Does Trump Want the Save America Act? The Answer Should Worry Us. (Balkinization)

2 hours ago · Politics · 0 com­ments

2

Appreciation for the small web (jola.dev)

2 days ago · Tech · 0 com­ments

41

Appreciation for the small web (jola.dev)

2 days ago · Tech · 0 com­ments

41

it’s a mother*&#@ing web­site (RNOTTÉ Animation)

1 day ago · Tech · 0 com­ments

14

Volkswagen App: Page 3 - GrapheneOS Discussion Forum

discuss.grapheneos.org

GrapheneOS Discussion Forum

Only 16 percent of Americans think AI will have a positive impact on society, a new study shows

techcrunch.com

Despite the fact that AI in­creas­ingly dom­i­nates our econ­omy (it’s a hot IPO sum­mer and we’re all just along for the ride), most Americans are not par­tic­u­larly op­ti­mistic about the tech­nol­o­gy’s long-term im­pact on the coun­try, a new study from Pew Research re­veals.

In fact, al­though a whole lot of Americans in­creas­ingly use AI in their daily lives, most of them have neu­tral to neg­a­tive views about it, the re­search re­veals.

Only 16% of Americans think that AIs im­pact on so­ci­ety dur­ing the next 20 years will be pos­i­tive, Pew says, while around 40% say that it will have a neg­a­tive im­pact.

A vast ma­jor­ity of peo­ple (67%) don’t be­lieve that the U.S. gov­ern­ment will do any­thing to mean­ing­fully reg­u­late AI. A sim­i­larly skep­ti­cal co­hort (59%) don’t trust com­pa­nies to de­velop it safely.

Young peo­ple — that is, those peo­ple un­der 30 — are the ones with the most neg­a­tive feel­ings about AI. Pew says that only 14% of this co­hort be­lieve the tech will have a pos­i­tive im­pact on so­ci­ety.

On top of all this, a vast ma­jor­ity of Americans — nearly two-thirds — also think that AIs de­vel­op­ment is oc­cur­ring too quickly.

Despite all of the skep­ti­cism, a whole lot of Americans also re­port us­ing AI in their daily lives on an in­creas­ingly reg­u­lar ba­sis. About a quar­ter of Americans say they use AI chat­bots on a daily ba­sis. Those who do are typ­i­cally us­ing the chat­bots for re­search pur­poses or for work, Pew says.

A vast ma­jor­ity of peo­ple us­ing AI are us­ing ChatGPT. Pew writes that 44% of U.S. adults now say they use OpenAI’s chat­bot, a fig­ure that’s more than dou­bled since 2023.

The next most pop­u­lar chat­bot is Gemini (24%), fol­lowed by Copilot (17%) and Meta AI (14%), with Grok (8%), Claude (6%), and Character.ai (3%) lag­ging be­hind.

There is a bit of a gen­der di­vide. While chat­bot use is grow­ing for both men and women, men still use AI more and are more en­thu­si­as­tic about it, while women are more skep­ti­cal, Pew says. Men are more likely to say they use AI chat­bots in their daily lives (27% ver­sus 20% for women) and while equal shares of men and women re­port us­ing ChatGPT, men more com­monly re­port us­age of other brands, such as Copilot and Grok.

The re­port also high­lights how AI is chang­ing the ways Americans con­sume in­for­ma­tion. Six in 10 sur­vey re­spon­dents told Pew that they rou­tinely read AI-generated in­ter­net sum­maries (indeed, on Google, they’re pretty much un­avoid­able). A much smaller num­ber re­port us­ing AI to get in­for­ma­tion on fit­ness and di­et­ing.

There are also still a whole lot of peo­ple — about half of the coun­try — that say they do not use AI in their daily lives. The peo­ple who do not use AI tend to be older, while those un­der 50 are more likely to say that they use it. Nearly 75% of Americans aged 65 or older say that they never use AI chat­bots.

Those peo­ple who don’t use chat­bots say they don’t be­cause they’re not in­ter­ested in them, and add that they have no in­ten­tion of us­ing them in the fu­ture.

When you pur­chase through links in our ar­ti­cles, we may earn a small com­mis­sion. This does­n’t af­fect our ed­i­to­r­ial in­de­pen­dence.

Lucas is a se­nior writer at TechCrunch, where he cov­ers ar­ti­fi­cial in­tel­li­gence, con­sumer tech, and star­tups. He pre­vi­ously cov­ered AI and cy­ber­se­cu­rity at Gizmodo.

You can con­tact Lucas by email­ing lu­cas.ropek@techcrunch.com.

View Bio

humiliating iis servers for fun and jail time

mll.sh

March 18, 2026 · 13 min­utes read

A friend of mine once told me:

If you ever spot an IIS blue screen, don’t stop there; there must be some­thing.

If you ever spot an IIS blue screen, don’t stop there; there must be some­thing.

Yep, he was right. That IIS splash page is not a dead end. Behind that blue win­dow sits one of the most con­sis­tently mis­con­fig­ured web servers on the www, and it’s beg­ging you to look deeper.

So let me walk you through how I ap­proach IIS tar­gets dur­ing bug bounty:

table of con­tents

psst, psst, IIS servers, where are you?

shodan google dork­ing ac­tive tech fin­ger­print­ing

shodan

google dork­ing

ac­tive tech fin­ger­print­ing

ok, I found an IIS server. now what?

in­ter­nal IP dis­clo­sure

in­ter­nal IP dis­clo­sure

pwn time

nu­clei tem­plates: au­to­mate the bor­ing stuff the HTTPAPI 2.0 dead end that is­n’t IIS tilde enu­mer­a­tion: the gift that keeps giv­ing

us­ing LLMs github dorks to re­solve short­names us­ing BigQuery to re­solve short­names brute­forc­ing the rest with crunch

fuzzing: the IIS-specific wordlist mat­ters web.con­fig: the keys to the king­dom

path tra­ver­sal to web.con­fig bin di­rec­tory DLL ex­po­sure via cook­ie­less ses­sions

re­verse proxy path con­fu­sion au­then­ti­ca­tion by­pass via NTFS hacks file up­load tricks

nu­clei tem­plates: au­to­mate the bor­ing stuff

the HTTPAPI 2.0 dead end that is­n’t

IIS tilde enu­mer­a­tion: the gift that keeps giv­ing

us­ing LLMs github dorks to re­solve short­names us­ing BigQuery to re­solve short­names brute­forc­ing the rest with crunch

us­ing LLMs

github dorks to re­solve short­names

us­ing BigQuery to re­solve short­names

brute­forc­ing the rest with crunch

fuzzing: the IIS-specific wordlist mat­ters

web.con­fig: the keys to the king­dom

path tra­ver­sal to web.con­fig bin di­rec­tory DLL ex­po­sure via cook­ie­less ses­sions

path tra­ver­sal to web.con­fig

bin di­rec­tory DLL ex­po­sure via cook­ie­less ses­sions

re­verse proxy path con­fu­sion

au­then­ti­ca­tion by­pass via NTFS hacks

file up­load tricks

by­pass­ing WAFs via HPP

psst, psst, IIS servers, where are you?

Here are some tech­niques I use to find IIS servers.

shodan

Before you even touch a tar­get, go see what Shodan al­ready knows:

ssl:“tar­get.com” http.ti­tle:“IIS” ssl.cert.sub­ject.CN:“tar­get.com” http.ti­tle:“IIS” org:“tar­get” http.ti­tle:“IIS”

These sam­ple queries will list IIS boxes tied to the tar­get’s org or SSL cer­tifi­cates. You’ll some­times find stag­ing servers, for­got­ten ad­min pan­els, and in­ter­nal tools that no­body re­al­ized were in­ter­net-fac­ing.

Feel free to re­place or com­bine shodan with other plat­forms like fofa, cen­sys, net­las, odin, etc. They all in­dex dif­fer­ent slices of the in­ter­net. 🍕

google dork­ing

Google can find IIS servers for you be­fore you even fire up a scan­ner. These dorks are all about lo­cat­ing IIS tar­gets within a scope:

site:tar­get.com in­ti­tle:“IIS Windows Server” site:tar­get.com in­url:asp­net_­client site:tar­get.com ext:aspx | ext:ashx | ext:asmx site:tar­get.com in­text:“Mi­crosoft-IIS” | in­text:“X-Pow­ered-By: ASP.NET” site:tar­get.com in­url:_vti_bin site:tar­get.com in­ti­tle:“Mi­crosoft Internet Information Services”

The asp­net_­client folder and _vti_bin (FrontPage ex­ten­sions) are dead give­aways for IIS; if Google has in­dexed them, you’ve got a tar­get. The ext:aspx dork catches any in­dexed ASP.NET pages, which means IIS is un­der­neath.

Also, ex­pand your scope with stacked wild­cards to catch nested sub­do­mains that ba­sic enu­mer­a­tion misses:

site:*.tar­get.com in­ti­tle:“IIS” site:*.*.tar­get.com in­ti­tle:“IIS”

That sec­ond one has sur­faced dev/​stag­ing boxes for me more than once.

ac­tive tech fin­ger­print­ing

The eas­i­est way to know you’re star­ing at IIS is the re­sponse head­ers. Hit it with a raw re­quest:

nc -v tar­get.com 80

Or if it’s TLS:

openssl s_­client -connect tar­get.com:443

What you’re look­ing for some­thing like this in the re­sponse head­ers:

Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET

But prob­a­bly you want to do this at scale. Then just keep calm and use httpx (or nu­clei):

httpx -l tar­gets.txt -td | grep IIS | tee iis-tar­gets.txt

ok, I found an IIS server. now what?

First off, let’s con­firm what we’re deal­ing with and grab as much in­for­ma­tion as the server is will­ing to give away for free.

in­ter­nal IP dis­clo­sure

Here’s a free­bie most peo­ple miss. Send an HTTP/1.0 re­quest to cer­tain IIS se­tups (especially Exchange or OWA fronts) and the server will some­times hand you an in­ter­nal IP in the Location header:

curl -v –http1.0 http://​ex­am­ple.com

You might get back some­thing like:

HTTP/1.1 302 Moved Temporarily Location: https://​192.168.5.237/​owa/ Server: Microsoft-IIS/10.0 X-FEServer: NHEXCHANGE2016

That in­ter­nal IP and that X-FEServer header just told you the in­ter­nal host­name of the Exchange server. File that away. It’s in­for­ma­tion dis­clo­sure that we could lever­age in the fol­low­ing steps.

pwn time

Enough re­con by now, let’s get to the juicy parts.

nu­clei tem­plates: au­to­mate the bor­ing stuff

Once you’ve got your list of IIS tar­gets, blast them with nu­clei us­ing rel­e­vant tags:

nu­clei -l iis-tar­gets.txt \ -tags mi­crosoft,win­dows,asp,aspx,iis,azure,con­fig,ex­po­sure -silent

I like to fire this in the back­ground while I’m do­ing man­ual re­con.

the HTTPAPI 2.0 dead end that is­n’t

You’ll hit a lot of IIS boxes that re­spond with a generic HTTPAPI 2.0 404 er­ror. Most peo­ple see this and think nothing here.” Wrong.

What this ac­tu­ally means is the server did­n’t re­ceive the right do­main name in the Host header. The IIS in­stance is there, it’s run­ning some­thing, but it’s bound to a spe­cific vir­tual host. You need to fig­ure out which one.

Two ap­proaches:

check the SSL cer­tifi­cate. The sub­ject or SAN field of­ten con­tains the host­name you need. Just hit it in a browser and in­spect the cert.

if the cert does­n’t help, you brute-force vir­tual hosts. Tools like ffuf with a Host header wordlist work well here:

ffuf -u https://​TAR­GET_IP/ -H Host: FUZZ.target.com” -w vhosts.txt -fs 0

When you land on the right host­name, the server sud­denly wakes up and serves you a real ap­pli­ca­tion in­stead of that use­less 404.

if the cert does­n’t help, you brute-force vir­tual hosts. Tools like ffuf with a Host header wordlist work well here:

ffuf -u https://​TAR­GET_IP/ -H Host: FUZZ.target.com” -w vhosts.txt -fs 0

When you land on the right host­name, the server sud­denly wakes up and serves you a real ap­pli­ca­tion in­stead of that use­less 404.

IIS tilde enu­mer­a­tion: the gift that keeps giv­ing

This is, one of the most un­der­rated tech­niques. IIS has a legacy be­hav­ior in­her­ited from the old DOS 8.3 file­name con­ven­tion. By send­ing spe­cially crafted re­quests, you can enu­mer­ate the short names of files and di­rec­to­ries on the server even if di­rec­tory list­ing is dis­abled.

The tool you want is short­scan:

short­scan https://​tar­get.com/ -F -p 1

Note -F -p 1 pa­ra­me­ters tell short­scan to fuzz the di­rec­to­ries (full urls) and enu­mer­ate the short­names (-p stands for pa­tience).

Another tool you can use is bur­p’s IIS Tilde Enumeration Scanner.

This will spit out short­name frag­ments like:

File: WEB~1.CON File: GLOBAL~1.ASA File: SITEBA~1.ZIP Dir: ADMIN~1

Now here’s the thing: WEB~1.CON is ob­vi­ously web.con­fig. But what’s SITEBA~1.ZIP? Is it site­backup.zip? site­base.zip? site­batch.zip? If we can guess the full name, we can try to down­load it.

Let’s ex­plore some op­tions for wordlist gen­er­a­tion:

us­ing LLMs

Something like:

Return only a list of words, sep­a­rated by new­lines, and noth­ing else. Ensure that the words con­tain only al­phanu­meric char­ac­ters. Make a list of guesses, for what the rest of the word could be from this snip­pet. Ensure that the snip­pet is a sub­string of your guess. Make the list as ex­ten­sive as pos­si­ble. Snippet: {shortname}

github dorks to re­solve short­names

Stop Killing Games fails to secure EU law despite 1.3M signatures

www.dexerto.com

The Stop Killing Games cam­paign has been dealt a ma­jor set­back in Europe, as the European Commission de­clined to pro­pose leg­is­la­tion re­quir­ing pub­lish­ers to keep dis­con­tin­ued video games playable.

The move­ment, for­mally sub­mit­ted in the EU as the European Citizens’ Initiative Stop Destroying Videogames,” was built around the idea that pub­lish­ers should not be able to make games un­playable af­ter end­ing of­fi­cial sup­port, es­pe­cially when those games were sold to cus­tomers as com­plete prod­ucts.

In January, the ini­tia­tive was con­firmed to have se­cured 1,294,188 ver­i­fied state­ments of sup­port, pass­ing the one mil­lion thresh­old re­quired for the European Commission to for­mally ex­am­ine it. It was later pre­sented to the Commission in February, fol­lowed by a European Parliament hear­ing in April and a ple­nary de­bate in May.

EU re­jects Stop Killing Games’ key de­mand

In its of­fi­cial re­sponse on June 16, the Commission said it cannot pro­pose a le­gal oblig­a­tion” re­quir­ing pub­lish­ers to keep games playable af­ter they stop be­ing sold com­mer­cially.

Instead, the Commission said it will be­gin dis­cus­sions by the end of 2026 with the video game in­dus­try and con­sumer rep­re­sen­ta­tives to draft an in­dus­try code of con­duct for man­ag­ing games at the end of their life cy­cle.

The Commission’s full com­mu­ni­ca­tion said a le­gal oblig­a­tion to keep games playable, as re­quested by the ini­tia­tive, would not be pro­por­tion­ate.” It cited con­cerns about in­tel­lec­tual prop­erty rights, con­fi­den­tial busi­ness in­for­ma­tion, pub­lisher costs, and po­ten­tial cy­ber­se­cu­rity or safety risks once games are no longer sup­ported.

The code of con­duct could in­clude more trans­par­ent store­front la­bel­ing about pos­si­ble game dis­con­tin­u­a­tion, along with more part­ner­ships be­tween pub­lish­ers and cul­tural her­itage in­sti­tu­tions to pre­serve games. However, it would not legally re­quire pub­lish­ers to pro­vide of­fline patches, pri­vate server tools, or other meth­ods for play­ers to con­tinue ac­cess­ing games af­ter of­fi­cial sup­port ends.

The Commission also ar­gued that ex­ist­ing EU con­sumer law al­ready pro­vides some safe­guards, in­clud­ing re­quire­ments around trans­parency, con­tract du­ra­tion, ter­mi­na­tion con­di­tions, and pos­si­ble re­funds if a shut­down con­flicts with the agree­ment or a con­sumer’s rea­son­able ex­pec­ta­tions.

Reuters re­ports the de­ci­sion comes as French con­sumer group UFC-Que Choisir con­tin­ues le­gal ac­tion against Ubisoft over The Crew, which be­came per­ma­nently un­playable af­ter its servers were shut down. Ubisoft has ar­gued play­ers bought lim­ited ac­cess rather than full own­er­ship, while the con­sumer group al­leges play­ers were mis­led over how long the game would re­main avail­able.

While the Stop Killing Games cam­paign suc­ceeded in forc­ing the is­sue into EU in­sti­tu­tions, the Commission’s re­sponse falls short of its cen­tral de­mand. For sup­port­ers, the out­come means pub­lish­ers are not cur­rently fac­ing a new EU-wide le­gal re­quire­ment to keep pur­chased games playable once sup­port ends.

Stop Killing Games says the fight will not be the end”

Despite the set­back, Stop Killing Games has said it is not end­ing its push for leg­is­la­tion.

In a re­sponse posted af­ter the Commission’s de­ci­sion, the of­fi­cial Stop Killing Games ac­count said the out­come was not un­ex­pected” and claimed the cam­paign had al­ready pre­pared for the re­sult. The group said it is now push­ing for mem­bers of the European Parliament to amend Stop Killing Games into the Digital Fairness Act in­stead.

We can move on with­out the Commission and their non-de­ci­sion,” the group said, ref­er­enc­ing ear­lier com­ments from Accursed Farms cre­ator Ross Scott.

The re­sponse echoes com­ments made by the ac­count on June 13, when it said the Commission’s de­ci­sion would not be the end” and pointed to progress in both California and the European Parliament.

We’re in a po­si­tion to pass leg­is­la­tion on this even with­out the Commission’s bless­ing,” Stop Killing Games said at the time. EU leg­is­la­tion should be go­ing through ei­ther way.”

The cam­paign also ar­gued it was in a better po­si­tion than ever” to win, adding that sup­port­ers should thank the Commission for en­sur­ing the move­ment did not rest on our lau­rels.”

That means the EU re­sponse is a ma­jor blow to the cam­paign’s orig­i­nal European Citizens’ Initiative, but not nec­es­sar­ily the end of Stop Killing Games’ broader ef­forts. The fo­cus now ap­pears to be shift­ing away from di­rect Commission ac­tion and to­ward in­flu­enc­ing up­com­ing EU dig­i­tal con­sumer leg­is­la­tion.

To add this web app to your iOS home screen tap the share button and select "Add to the Home Screen".

10HN is also available as an iOS App

If you visit 10HN only rarely, check out the the best articles from the past week.

Visit pancik.com for more.