For more than 20 years, Ondřej Surý has been quietly helping to keep websites around the world running securely, largely in his spare time.
He voluntarily maintains software for two of the most popular versions of Linux, a free operating system similar to Windows, which are often used on web servers.
Typically, this involves keeping them up-to-date with the latest version of PHP, a programming language which underpins a significant number of the world’s websites.
This week, he became very busy indeed.
With the help of AI, two major cyber-security flaws were identified in the programming language, leading the PHP Foundation to release fixes.
But average folk may struggle to understand how to install these onto their systems – so Surý, for free, dropped everything to convert the fixes into packages, which can be easily installed without expertise.
“The feeling is like I am responsible for all these people and I can’t fail them,” he told BBC News.
The vulnerabilities in PHP sparked an international scramble to install security updates, amid fears that cyber criminals could exploit the gaps.
Surý is one of a small number of developers whose work helps make those updates available.
And while keeping the internet secure might sound like a full-time occupation, it isn’t actually his day job.
He works as director of DNS engineering at Internet Systems Consortium, a US non-profit organisation.
But in his spare time, he has spent more than two decades voluntarily maintaining PHP software packages for the Linux versions Debian and Ubuntu.
He takes the source code released by the PHP project and turns it into packages which website operators can easily install on their servers.
When asked how it felt to be described as one of the people who helped “save the internet” this week as some online put it, his response was modest.
“It’s kind of fulfilling because I sense my work has a purpose,” he said.
“At the same time, I feel that not enough credit has been given to other people who has been part of this, like the PHP project people.”
But he also acknowledged the weight that comes with his role.
A race against time
Surý had been given advanced warning about the vulnerabilities by the PHP project, but when information about the weaknesses leaked online, the planned release was brought forward and things started ramping up.
“I got aware that this is quite severe and I don’t have that much time to prepare the packaging of the PHP that I provide to people,” he said.
Despite the urgency, he said he was confident that his experience and preparation would allow him to get the job done.
Other developers around the world were also working to ensure the patches could be distributed – highlighting just how much of the internet’s essential infrastructure sometimes depends on dedicated developers.
