Press and talks.

In October 2024 I found that wpad.rs was unregistered. Misconfigured devices use the WPAD name to fetch proxy settings, so whoever controls it can redirect their web traffic. The same name had appeared earlier in academic research on WPAD abuse.

I registered the domain on 23 October 2024, published a safe proxy configuration and reported the case to RNIDS, the .rs registry, and to Serbia's national CERT.

Covered by Netokracija and PC Press.

• PC Press · Article

  A small domain hides a dangerous security threat

  Mali domen krije opasnu pretnju za bezbednost (in Serbian)

  November 2024 ↗

• Netokracija · Guest article

  How one small domain exposed a serious threat to internet security

  Kako je jedan mali domen otkrio ozbiljnu pretnju za bezbednost na internetu? (in Serbian)

  4 November 2024 ↗

Ratomir Jovanovic is a product leader for payments and fintech infrastructure. He was Head of Product at Webio, a conversational AI platform for collections and payments acquired by Aryza in 2025, and is Chief Product Officer at Payshen, a payment orchestration platform. He is an ISO/IEC 27001 Lead Auditor and contributes security fixes to open-source payment libraries.

Photo: portrait (JPG). Interviews and speaking: email me.