×
A Mirror World Brings Wonders—and Dread—in This Fantasy Short Story

A Mirror World Brings Wonders—and Dread—in This Fantasy Short Story

io9 is proud to present fiction from Lightspeed Magazine. Once a month, we feature a story from Lightspeed’s current issue. This month’s selection is “It Might Be He Returns” by Fatima Taqvi. Enjoy!

It Might Be He Returns

By Fatima Taqvi

What you need to know about the boy in this story is he is always hungry and the sun is always too hot for him, and he would save the world if he could. This is what he tells himself as he sits opposite the tailor’s shop, looking at the clothes sway in the breeze of the air conditioner within. Fawad would save the world, he would change fate itself. He would give his parents the best of the best. March into any school he wants. Get any kind of education he needs to feel like the person he knows he could be.

The mirror in Master Jee’s shop has always stretched itself up at a tilt behind the counter, framed by the stitched clothes that hang around it. A thin crack smiles across its grime. The fast approaching and departing shapes of Karachi’s blurred traffic reflect on its surface in unsettling bursts. Perhaps it would have been better had it been facing somewhere else. But then none of what was to come would have happened.

The first time Fawad saw the mirror’s true intentions, he was sitting cross-legged against a wall of the shops opposite the tailor’s shop, scratching a map of all he knew into the dirt. He was thinking, always thinking. What to do? Where to go? One of his sandals was about to break, should he spend time looking for a new pair? Pangs of hunger assailed him and the world grew and contracted over the emptiness, shimmering at the edges, radiating unintelligible truths only he felt the impact of.

Opposite the road, the mirror beamed the sun’s reflection back so brilliantly that for the moment that Fawad stopped, his gaze dragged up towards its face where it shone through the glass behind the crouched figure of the tailor over a sewing machine.

Just in time to see the tailor’s reflection peel away from the rest of its flat mirror world and stand up.

Fawad had wobbled where he was sitting, almost passing out. The tailor’s reflection paused for the longest moment, before giving a defeated shrug and sitting down again in faithful imitation of Master Jee as both tailors shook out a length of white cotton.

The next time it happened, he couldn’t breathe, and the last time he almost lost control of his bladder. The reflection had taken to tilting its head, shading its eyes with one hand as it peered out from the shop window. Craning over its doppelganger’s shoulder, face hidden in a flash of light. One arm reaching up. Pointing straight at him.

Needless to say, Fawad was scared out of his mind. At first, at least. Because, really, no matter how strange these happenings are, the mirror belongs to a very large group of things that have nothing to do with him. He is outside, on the streets. It is inside.

When his father died, the inside places all closed themselves to him. People he used to know started sitting too close together, taking up all the space and leaving him none, staring up at him, as if in shock he thought they would yield him a millimeter. When he showed up at school, the Vice Principal held him by the ear and dragged him back out of the school gates. Would there be any payment coming for his fees, she asked. Because if not, it was time he became a man and earned for himself. A man. And schools were for children.

The school gates were bolted twice behind him, once sideways and the other bolt going into the ground, deep into the earth, maybe the aluminum went rattling all the way down into the earth’s core, where no doubt his father sat with all the other dead and deceased swapping stories. The school gates shook for a moment, as if filled with rage. Then stood still and silent as a monument.

The last inside place left was home, and that was swallowed soon after the funeral by the grubby hands of leering, red-eyed uncles, and blockaded by the sharp tongues of aunts who snatched his old model of a cell phone, his school uniform, his small collection of books and toys for their children.

Now all he owns is his name. His name and his hunger, and his last thought every night that if nobody was ready to save the world, he would have loved to if he could.

Fawad.

The yearning in the voice hits him first. The need. Colliding with the emptiness and fullness that coexist inside him, his stupor and aches meet a sensation so strong it creates a pulling, a suction.

And then—

Ignore it. Yes, it’s loud, it blocks everything else out, but is it as loud as the call of styrofoam boxes of hot, greasy food being distributed right now beneath the bridge? Kindly faces waited for him in that great big outside place, a foot away from screaming traffic. If he could feed himself, keep living a bit longer, avoid the gangs so keen to recruit more children with or without their will, he might make it to being a gardener like his father. His father had been successful and well-liked, going around to those large sprawling houses full of shiny things and fed people. He made enough money to send Fawad to school. But remembering all this was a mistake on Fawad’s part, because now he recalled his father’s softness as he’d draw Fawad to him, saying, “You must not be a gardener when you grow up. Not like me. We will find you scholarships. This is Karachi! There are schools, colleges, tuition centers on every street. You will learn, you will grow up, you will change the world.”

And he is undone, left entirely open to the designs of the mirror who now calls to him again without words.

Not by his name. It snares him now, this unshaped sound. The slow vibration of a mother’s breathing whose chest moves as you lie on it. Until it stops moving altogether, and there is nothing but the shrill tone of something else entirely.

He’s already there without really deciding to do it, feet at the door to Master Jee’s shop, twitching hand on the glass. The mirror reaches inside his head, twisting something essential that connects his heart to his eyes. His soul shudders to the resonance of the summoning.

Inside the shop, immediately blanketed in the silent cold of the air conditioning, the mirror is taller than he recalled. He’s giddy, as if looking down from a great height. What if he looks at the mirror and his reflection is all wrong?

But it isn’t. It’s just as he is. Though the set of his reflection’s jaw has a look about it. Maybe it already knows what will happen next.

Master Jee glances at him, his lips part and his brow furrows, but a flash from the mirror, and Master Jee’s face relaxes. He turns away, humming an old song, from days back when bills weren’t so high and he would imagine a more comfortable old age.

Fawad runs his fingers along the mirror’s surface. He traces the outlines of the grime, but he cannot feel its ridges and bumps as he should. The cloud is beneath the mirror’s smooth surface. Inherent to its substance.

As if he has planned it all along, as if he is a happy dancer at a mehndi, he lifts a foot, twists his body, and steps right through the mirror.

Once, on one of Fawad’s birthdays, his father had bought him a cake like the ones they’d seen lining the shelves in bakeries. A white creamy cake, with triangular chunks of sweet pineapple closing ranks in a circle, usually reserved for the children of fathers on whose chests the expenses of everyday life didn’t weigh so heavy. The sun had done its work and the cream cake was soft. As the mirror now melts around the contours of his body, Fawad thinks of how the knife had fallen through his birthday cake as he’d cut it, like it had waited all its life for the knife to know it. He is a little boy again. It is his birthday, his father smiles, he laughs and jumps on the spot for a slice, and falls through the mirror on the other side.

Darkness. Neither of night, nor of power failure, because he can see perfectly well. Light is not needed—everything here carries its own light within itself, glowing against the void.

He turns. There are clothes on either side of the mirror on this side too. They bulge as if filled by invisible bodies. The ends of the kameezes move as if swaying. The shoulders slump, the necklines loll, all this fills him with terror, and he looks away.

The Other Tailor’s shop is only a glowing facade, marooned in all this darkness. There are walls, but they’re not joined at the top. There is no roof. A door frame but no glass door. The shop rumbles, it is cold, but there is no air conditioner.

I must go, he thinks. What am I doing? Djinn, churail, demons, all the stories he’s ever heard race through his mind. Who else would live here in this sunless land?

In the darkness behind him there’s a sound, and he sees in the spaces between the disconnected walls a large horse made of paper trot away down an unseen road, tattered reins slack at its side. The horse’s eyes are blinkered by decades-old newspapers yellowed by age. It shakes its inky mane as it trots along, and Fawad sees an ad for a nightclub scrunched up over one eye, an announcement from a mosque over the other.

As it disappears Fawad realizes he has no idea what else lurks just beyond. Perhaps the next creature may be something other than a horse.

But when he turns to leave, the clothes don’t look the same. Why hasn’t he tried one on yet, his mind demands to know. These clothes are so alluring, so beautiful, and kept ready for him by some kind hand no doubt. Look at this sherwani, for example. What a prince he’d look. His Vice Principal would hold him as an example to the other students. His uncles would hold the doors of his home open to him again. He could hand out food under bridges instead of being the one taking.

He lifts his own gray kameez over his shoulders.

“Stop that.”

The voice comes from beyond, and he sees now it belongs to a person, another human. Master Jee.

Except it isn’t, not at all. He wears the same clothes. The same spotless brown kameez. The same agate ring on his index finger. The same Peshawari chappal on his feet.

But his ring is on his left hand. Not the right. He’s hunched over, absorbed in some work he holds in his hands, and the cap he wears throws a shadow on his face. He’s bent, turned slightly away, and his face is hidden from view. And it’s easy to see he isn’t human at all. He’s too still. He radiates lack.

“Get out of here.” He says, curt as all people belonging to inside spaces are. “You don’t belong.”

“I was called.” Indignation triumphs over fear, and Fawad peers closer. He sees a glint of something on the Other Tailor’s face. Hard to see.

A cat yowls from a corner, making him jump. It dashes across Fawad’s vision, made up entirely of scrunched up Urdu magazines ripped apart and remade to a feline form, an extract of a forgotten short story legible across its back.

“You really didn’t call me?” He stirs uneasily. He knows he was called. But now that he’s here, he doubts any of it happened.

“Those meant to be here are here.” The Other Tailor replies. “But you must go if you are not interested in untangling these threads. For there is a lot to do, and I work to a deadline. And I only warn you away from those,” he waves a hand without looking up in the direction of the clothes, “because they have had their fill already. Which is why they look so fine.”

Fawad now sees a sleeve has snaked closer to him. It stops the moment he sees it.

The Other Tailor seats himself on a stool and bends over his work. A tangle of threads sits in front of him. He mutters and picks up this thing and that. A pair of scissors fall from his lap.

Before I leave, I will pass him this one thing, Fawad thinks. It is good to be helpful, father always said. So he passes it and as he does there is a splash of light as the Other Tailor looks up for the briefest of moments.

“I will not pay you.” He says immediately. “Do not expect payment for that action.”

“I was just passing it to you.”

“We have no agreement. Your work has no recompense.”

“I only meant—”

“Contracts are everything here. Promises here matter. You cannot agree to something and renege on it later, as they do in your world.”

Fawad digests this.

“So you have been there then? In my world? I did see you, you know.”

“I might have stretched my back,” the Other Tailor speaks thoughtfully. “I work so hard. I might have looked out into the other world, to where cities are voiceless and nothing wears its meaning on its sleeve. So are we agreed?”

“Agreed to what?”

“To our contract. You will assist me. Procure me my items. And I will pay you.”

Something makes him look to see what manner of outfit the Other Tailor is stitching.

The thread is sticky. He thinks of corpses with dead things hanging out of their mouths. Filaments stick out, ragged. It is colorless, translucent. Disgusting. It makes no noise, no rustling. As silent as the moment just before he falls asleep when he can’t remember what his father’s voice sounded like.

“What is this? Who is it for?”

“You can give it to the client yourself,” the Other Tailor’s voice is gentle. “If you like.”

So soft his voice, like a rotten birthday cake spoiled in a bakery and sold at a discount to a man eager to give his son a special moment, though for days afterwards he’d been racked with fever, his ribs aching from how he’d thrown up, the cream cake gone bad reaching up through his throat, exiting the body it was never meant for.

“Do you go to school?”

Fawad’s mouth twists.

“No matter,” the Other Tailor says. “We have schools here. Even on the other side of Karachi, we have schools on every street, and some of our graduates, they’ve changed the world. That can be your payment.”

Forgotten were the styrofoam boxes. The plastic bags of biryani. The kindly faces on the great big outside. One thing gleamed for him, beyond all other wants or desires. There were schools here. And the Other Tailor was guaranteeing him a place.

Should he have investigated first? Seen what manner of places they were? Despite everything, he was his father’s son, and at the promise of book learning he leapt before he looked.

• • •

The first item he was sent to find was easy enough, but returning to the mirror with it taught him the ways of this other world.

Rubbish heaps in Karachi are as common as clouds in picture-book skies, and Fawad knows them. They have their own ecosystems. If you study one of them, you know them all. He finds what he’s looking for immediately—scratch cards. Lying crumpled, used, faded by sun, sodden in liquid waste. He picks them up by the handful.

They are grubby. Used up. He does not understand at all.

But then he steps through the mirror to the other side, and the gray flat rectangles burst into hopeful firefly lights, coalescing into silver chiffon, illuminated by sighs and yearnings. The digits on them coil, become black curlicues, embroidered floral arrangements, imitations of wedding flowers that were never picked. In another life Fawad’s father would send him to buy these scratch cards, then they would input them into cell phones for credit to talk to people far away.

The silver chiffon shimmers, and for a moment Fawad thinks of the flare of a skirt lined with this cloudy fabric.

The Other Tailor sighs and takes it. He stabs the cloth with his needle. He has only one word for Fawad now.

“More.”

A cricket ball turns into a floating sort of emerald and ochre silk. A bridal bracelet studded with jasmine buds turns to thread the color of moonlight and romance. A garland of roses to crimson patches. A broken tile from the city’s biggest shrine to a string of ribboned squares. He sits and picks and unpicks thread from the cloth. He spools the thread that tangles up at his feet. Then out for more.

Discarded syringes stained with blood become white muslin—swaddling cloths smelling of milk.

“They always do that,” the Other Tailor says. So, he ventures out to wash them. There’s a swamp, a shrine, a river, so he sits at the river, hoping the amused faces beneath the mire of the swamp don’t come closer to investigate him.

A watchman’s discarded sandal turns to smooth leather. A school girl’s uniform dupatta retains its starched form, and he must unravel it, the starched white swiftly dissolving into cobalt ink threads. A butcher’s stained clothes must be unpicked as well to pink rosettes. A khwaja sira at the traffic lights gives up a snippet from the patterned inner cloth of her handbag bemusedly.

“Are you eating?” She asks him. “You look kangra sa.”

Fawad realizes he hasn’t for a while and goes back to the place under the bridge where they hand out those styrofoam box meals and occasionally fruit juice cartons. He’s rarely hungry anymore. He doesn’t know if it is magic or anticipation.

“More.”

Somewhere an Imam is getting ready to lead the Friday prayer at the smallest mosque in Karachi, but a cat has fallen asleep on the only kameez he owns. He can’t be late, and he can hardly go to mosque in his prayer cap and his lanky vest, but the cat is weak as she lies belly up on his right sleeve. Her bones poke out, the way his own do from under his hungry frame. He can’t bear to wake her when she looks so at ease. He’s heard her wailing recently, and he thinks she has lost her kittens. Her body is still heavy with milk. She shouldn’t be disturbed any more.

But then if he doesn’t go to the mosque, they’ll choose someone else to do the khutba, and that person will speak of fire and shame instead of wishing for others what you want for yourself. The Imam cuts off the sleeve with scissors, pulls his torn kameez over his head, and rushes away past where Fawad hides in the shadows.

In the other world, the sleeve turns into gold.

“More.”

Broken arcade lights turn to sequins. Shriveled up almonds in wedding favors become cold rubies.

A teenager stops to wipe the sweat off his face. His motorcycle wobbles, hits a stone and a metal piece breaks off the frame. He doesn’t stop, deliveries must be made on time, so he swerves past a thin boy who picks up the broken metal.

The metal piece turns to silver.

Fawad goes to Clifton. At the seaside he steps between rubbish to collect bluebottles in an empty ice-cream tub. He wonders, crossly, what the mirror image of these coasts are like in the other world, and if they are free from the stench of pollution. The bluebottles sting him, and so his skin wears angry red welts. He tosses them in anger at the Other Tailor in a cloud of sand that all turns, mid-air, to a nude granular fabric with aquamarine crystal work.

“It’s chaotic”, Fawad says, feeling mean. “It won’t go together.”

But he doesn’t talk too much anymore. His mind feels uneasy. Something isn’t right in this arrangement. To settle his thoughts, he has walked around to see the schools. The buildings on the horizon move with him. They don’t stay still long enough for him to reach them. He thinks he can hear children talking. He thinks he can hear a bell ringing.

The worst was the gunny bag.

“Can I not just get one from a bag of flour?” He had pleaded. But no. This one. At this location. Behind this many trees, in a deserted area. The streetlamps don’t work here, they have more sense than that. There are spaces where people live and deserve light, and spaces that absorb violence, the haunts of the criminally cruel.

The gunny bag is heavy. He pulls and pleads with the burlap, but it insists on falling out of his hands, each time with an unsettling thud Fawad would sell his soul to unhear. He can’t see clearly but he knows those are maroon stains on it, and he knows where they’re from. The flies and other insects know too, and they scramble as Fawad continues to disturb their feast.

Finally, he manages to empty the contents of the gunny bag out. He delivers the figure out of the bag with his small hands. Folds up the bag. Pauses.

The Other Tailor had no further instructions, and Fawad cannot leave the mutilated form just like that. So he starts to dig a hole, and the ground won’t give, it has seen too much to be soft. Fawad collapses, taking heaving sobs. He runs his hand over the ground and finds grass.

He places the blades of grass at the figure’s mutilated feet. Something gleams there in the shadow, having fallen out of the gunny bag too, along with an empty wallet. He picks it up—a broken blade.

Why does he pocket it? He cannot say. And then he’s running as one vehicle and then another draws up, with a new gunny bag, its contents still alive. He ignores the sounds of crying and pleading, men laughing, and he races away, banging through Master Jee Number One Tailor’s door, stepping through the mirror. He doesn’t even blink when the gunny bag turns into a white, shroud coloured sheet.

The blade sits in his pocket. It is the least magical of all items, and keeps its form when he passes through the mirror. He somehow knew it would.

He tosses the sheet to the Other Tailor.

“Unpick it.” The Other Tailor says without turning.

Fawad doesn’t move. The clothes hanging in the Other Tailor’s shop watch him. Waiting for him to get it.

Perhaps it is pity that moves the Other Tailor. Or impatience.

“Look,” he offers.

Fawad peeks behind the counter.

The chaos of patchwork has disappeared. It is no longer colorless. It is all one outfit, skirts flaring out. It is no longer silent, but rustles a song as the Other Tailor moves it, the chorus in more languages than Fawad knows. It looks warm now and full of life. It is a pleasure to behold.

When it’s worn, all this bedsheet sized fabric will be gathered into bunches around the woman’s waist to fall in the most graceful of ways.

“A gharara,” he says.

The Other Tailor nods. Impossible to know what he’s thinking. His face has always been hidden. Fawad wants to ask him now to show it, but he wonders if the Other Tailor is too shy, or too full of shame. Asking feels too intimate, too presumptuous. Who is he to ask? His anger now feels like a foolish, knobbly thing. And yet he feels to disperse it would mean rejecting something he cannot fully grasp.

The Other Tailor watches him.

“My mother wore one,” Fawad says for the sake of saying something. “A gharara. At her wedding.”

“And her mother wore one on her wedding too. But before her, her mother wore a gharara every single day. And her mother before her too. But when each of them died, they wore a shroud, and we make those here too. Fawad,” the Other Tailor says. “Are you certain?”

“Certain of what?”

But the Other Tailor’s eyes are now affixed behind Fawad.

“She is coming.”

“When?”

“Any day now. It is important that she not be annoyed in any way.”

And he falls to work swiftly, assimilating the new fabric into the whole.

“Be certain,” he murmurs. “Be certain you don’t regret it.”

The sewing machine is clattering though, so maybe Fawad imagined it.

• • •

The client climbs out of the sea. Or out of the swamp, out of the river, out of the distant buildings on the horizon, or out of all of these at once. Worst of all, Fawad recognises her, because, after all, he’s known her his entire life. He knows all about her.

Karachi flashes charcoal eyes. Shakes the smell of grilled kebabs out of her hair every morning and washes it with sea water. The hem of her faded skirt is lined with bluebottles. Her feet are bare except for anklets of bougainvillea. Her soles are always sandy.

Fawad tries to speak but his throat doesn’t cooperate, it closes his voice away. Something about children, he’s thinking: Karachi’s arms swing the children round and round, giving them sights and sounds and adrenaline so that their laughter touches the peach fires in the sunset sky. Then at dusk she goes for a walk leaving them behind, ignoring their tears and starving wails as the night gently claims them. She inspects the produce on the market thelas, maybe stopping to look at a secondhand book stall, or to gaze at the locked gates of an art exhibition, wishing she could go inside. Oh, she says. Did you think I’d forgotten the children? The stray cats, the scab-ridden dogs, the overburdened donkeys? The baby girls left on rubbish heaps? The monkeys and flamingoes who escape their handlers, every cell of their being in search of habitats long since wiped out? Look here, she beckons, and you see them all sleeping safe inside the knots at the ends of her dupatta slung around her neck.

And the whimpering of the strays and the tearful voices of the children fade away as Karachi tires out, crawling inside a horse’s corpse left to rot outside a leather factory. She puts a trembling finger in her mouth and then passes it over the gunny bags strewn across the city, writing something in an ancient language that was spoken on her shores long before there were any humans. Nobody knows that the men in gunny bags have become children again, sound asleep, wrapped inside the loop of her dupatta, held close in worlds above her bosom.

“But you don’t,” Fawad says. “You don’t do any of that.”

“No,” Karachi replies. “But it would be nice if I did, wouldn’t it?”

She is here for herself today. Here for something that will be the perfect thing. She is distractible, her thoughts are like so many rickshas, buses, tankers zooming around, but she also has a malaise, maybe something autoimmune, that brings the traffic to a shrill standstill for hours.

Ah, yes. She remembers now. A whole suit, if he has it. A gharara suit.

“Of course. Have I not been working on it all this time?” The Other Tailor replies, and the words are courteous but his voice has a nervous anger laced within it.

“And who is this?” She asks.

“An apprentice. A helper,” the Other Tailor says. And he brings up an outfit Fawad can barely recognize, though surely he has seen it every day he’s been working.

“I love it,” she says, clasping her hands. “Oh, this is beautiful. Better than the last one so many years ago.”

Her face dimples. Her kajal-lined eyes dance as they follow the gleaming embroidery going up and down the skirts.

The Other Tailor says, in a cross sort of relief. “Did I not tell you? And do you listen?”

There is one last step every tailor knows which must be done for the gharara. It is always stitched inside out. But he must wait for her command. This is their ritual.

“Now,” she says.

The Other Tailor reaches into the garment, grabs the inner cloth, and pulls. The cloth flips. The gharara has folds that ripple, their stitches sticking out. The Other Tailor pulls all the folds so they fall on the inside. Right way around, Fawad thinks. That’s how it’s meant to be.

When the Other Tailor withdraws his hand, the world on the right side of the mirror screams.

The shops turn inside out. The rooms flip so their insides come on the outside. The malls, the houses, the offices, each flips so that everyone falls out, like coins from pockets shaken roughly.

And everyone outside falls inside. Gates burst open, the flower peddlers and children selling balloons are pulled in. Bodies fly out of gunny bags. Let us not think on whose turn it is now to fill them.

A pause, a tremor, and then, just like that, life goes on. Not one person remembers. This is how it has always been, they say, as the ministers pick up the rubbish collecting bags and the homeless drive their shiny cars to their new mansions.

The fates have been switched, and nobody is the wiser.

Karachi touches the fabric.

“How soft,” she murmurs. “How full of life.” The Other Tailor sits back down, content.

“No.”

“What’s that now?”

Karachi steps towards him, and he realises he has spoken. She tilts his face up. You might think that was mehndi on her palms, but Fawad sees now it is dried blood.

“Nothing is without consequence.” Fawad continues, his voice shaking. “Won’t you pay the price? For the garment?”

“I have never paid for it yet. Have I?” She appeals to the Other Tailor. “Don’t be ridiculous. What would that even look like?”

“And yet you always take. You took our cricket balls, our shrouds, our scratch cards and the things that live on seasides. You took the school girl’s dupatta without which they will not let her into school, the khwaja sira’s handbag where she keeps her ID documents. You took the maulana’s sleeve, the corpse’s resting places. And made yourself pretty. I ask you, what do you give?”

“Consider that I switch the fates.” Karachi says. “And so, in a way, everybody is equally unlucky. It is always somebody’s turn, given a generation or two. Isn’t that very fair of me?”

“Not good enough. So many people are ground down into suffering. Every family has a story of pain. Of hurt. And your dress has taken from representatives of all the city’s inhabitants.”

“Very well,” she says softly. “Let’s say you have the right of it. What shall I grant you? A throne? A crown?”

“Grant your people street lights that do not fade. Roads that do not cave. Electricity that doesn’t fail. Factories that never catch fire. Libraries anyone can join. Water that does not flood.”

“You ask a lot,” she says calmly. “None of this is in my gift.”

“If you don’t know how to do it—”

“I did not say I don’t know how to do it. It’s not what I am for.”

“Come now,” the Other Tailor says to Fawad. “We did not agree to this. The contract was for an education.”

“You promised me that. But what has she promised to the people who own the materials? They could have used the silver, the gold, the gemstones. And what has she promised in return to me?”

“The sea,” she murmurs. She is not a person anymore, Fawad sees. She is ancient, she has fins and an elongated neck and sharp teeth. She bites her own hide, and light pours out, all on the shoreline. The first light on the swamp where the city of lights would come to be. “The sea is for you, for me, for all of us. One day when the sun is hot enough, we shall drown together.”

Fawad flinches. It’s already happening. Unnatural monsoons have been devastating Karachi. Going on all night long, without stopping. New faces are appearing under the bridges. The dead are welcoming ever increasing numbers in their circle beneath the ground. Hidden hands of powerful people far away have altered the balance of the land through negligence and malice.

“And yes,” she feels the fabric again. “I will grant you all that.”

Fawad stares.

“You said—”

“Oh, I won’t do one bit of it. You will.”

“How?”

“Is it my business to know? When you learn real magic, you can use it for all sorts of things, I imagine. And I need an attendant. So stay here. Learn. There are schools enough if you want to change the world. All the secrets of bending life itself to what it should be, even when the powerful move against you. Even when they consume your city to its dregs. And when you’ve learned it all, let’s see what you want to do with it. Maybe, someday, you can become the city.”

“It is not that simply done,” the Other Tailor says.

“Of course it isn’t. You will first go back.” She turns Fawad away from her by the shoulders. “Until the full moon sits in your sky again. See how you like life with the fates flipped. Will you return? That is the crucial bit. Once they taste privilege, few ever desire change.”

“Has this happened before? Have there been—”

“School tomorrow! Your driver will take you. Your lunch will be packed. Your parents are still dead, but your house is yours, you have money and people who help you. When you sleep at night, you might think you will do something for those sad faces who tap on the window of your car and ask for money. But you will wake up the next day, and your bed will be soft, and the air conditioner just right, and so you won’t. Have I not seen this many, many times?”

She laughs, and Fawad can hear the rain hammering on the right side of the mirror. Perhaps there is water in Master Jee’s shop on the other side. She laughs again, but the Other Tailor, he raises his face to Fawad, and Fawad sees himself in his glass face. He feels the Other Tailor is trying to say something.

“You don’t think I will return? I will be back,” Fawad says, voice trembling from what? Uncertainty? “At the next full moon.”

“It might be he returns,” the Other Tailor says. He slips something to Fawad. Something sharp.

Karachi shrugs, and turns away.

When Fawad steps back out of the mirror into an amnesiac world newly remade, he is filled with an overwhelming panic. It is silent on the other side. The rain has stopped. There is a power failure, so the shop is dark, and nobody has started the generator.

He leaves Master Jee’s shop, and spots another boy sitting cross- legged opposite the shop. His heart sinks to see him—but oh, the relief when he realizes it need never be him again.

He sees a car pull up, and his memories are rearranging themselves, so he recognises it as his own. He backs away, inside the shop again.

It will unmake him, he thinks. The amnesia. He can feel the lure of thinking that it wasn’t just luck that rescued him. It was himself, the trap his new life has laid for him whispers. It is his cleverness that got him off the street. He deserves this life.

Something pricks his hand.

He looks at what the Other Tailor had given him.

It is the broken blade he’d brought back with the gunny bag. He must have dropped this somewhere, and now the Other Tailor had given it to him back.

So it did happen, he tells himself, walking to the door. All of it happened. He mustn’t forget. He places it with care in his pocket.

One hand on the door handle about to step out, and he’s scared. There’s so much to do. Who will help him?

He turns back to see the mirror.

All he sees is his reflection.


About the Author

Fatima Taqvi is a short story writer of horror and fantasy hailing from Karachi, Pakistan, and currently living in London. She has work appearing in Strange Horizons, Magazine of Fantasy and Science Fiction, Nightmare Magazine, The Dark, and other places. She can be contacted on her website fatimataqvi.com.

© Adamant Press

Please visit Lightspeed Magazine to read more great science fiction and fantasy. This story first appeared in the August 2025 issue, which also features short fiction by David Anaxagoras, Osahon Ize-Iyamu, Adam-Troy Castro, Christopher Rowe, Sarah Langan, Naomi Kanakia, V.M. Ayala, and more. You can wait for this month’s contents to be serialized online, or you can buy the whole issue right now in convenient ebook format for just $4.99, or subscribe to the ebook edition here.

Want more io9 news? Check out when to expect the latest Marvel, Star Wars, and Star Trek releases, what’s next for the DC Universe on film and TV, and everything you need to know about the future of Doctor Who.

Source link
#Mirror #World #Brings #Wondersand #Dreadin #Fantasy #Short #Story

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK

European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK">This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch

What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 

The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.” 
 
Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  

There are around 3,600 AI startups in London, which, together, have raised around $12.1 billion out of the $14.8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me. 
 
That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a $3.3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  

“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

This former notorious red-light district is now one of the world’s top AI hubs | TechCrunch
What every U.K. AI startup wants to know these days is, how can I get office space in King’s Cross?  

The area is so hot that a VC firm allegedly recently won a deal by promising a founder office space in the neighborhood. “We stop at nothing to win deals [for] and to support” founders, “including helping them source office space when needed,” the firm told me when asked about the rumor, declining to confirm or deny any details. 







The neighborhood’s popularity began back in 2016 when DeepMind — then newly acquired by Google — moved in. Soon after, a flood of AI startups followed, wanting to be around the Google DeepMind magic. Today, they hope to take advantage of the cluster of AI talent there. 

This has transformed King’s Cross into one of the world’s top AI hubs, rivaled only by San Francisco and Beijing. Around London, it’s known by the sobriquet “Knowledge Quarter,” as it’s home to names like OpenAI, Meta, Isomorphic Labs, Cusp AI, Wayne, Recursive, and, a little farther down the road, Synthesia and Anthropic. The European Technology Network (ETN) just moved into a glossy new office nearby, while University College London sits around the corner.  

Mixed in with the new developments are trendy food spots like Hoppers and BAO. Hop a train from King’s Cross, and founders can be in Cambridge in 45 minutes to source talent or can be in Paris in two hours to strike a deal.  

Who would have guessed that a little more than 20 years ago, this was one of the seediest areas in London?  

“In the ’80s, crack and heroin made the area a major narcotics market,” Hussein Kanji, an investor at Hoxton Ventures, said, recalling syringes in tree trunks and gangs patrolling the streets. “In 1982, the local church was occupied by the English Collective of Prostitutes for 12 straight days.” Then, in the early 2000s, a real estate developer had a dream and, well, “now it is the AI hotbed of the United Kingdom,” Kanji said. “What a change.”  Around 18 months ago, his portfolio company BioCorteX moved from the neighborhood Holborn to the Jellicoe building in King’s Cross, hoping to be near the action. “Lots going on in London right now,” Nik Sharma, co-founder of BioCorteX, told me. “Lots of hyperscalers moving in.” That includes, reportedly, Jeff Bezos’ AI company Prometheus, which is also said to be in talks to move into the Jellicoe.  


There are around 3,600 AI startups in London, which, together, have raised around .1 billion out of the .8 billion raised in the city since late July, according to Dealroom. Since the start of June, AI-related startups have leased more than 1 million square feet of office space in London, according to the real estate firm Knight Frank. With that, prime rents in King’s Cross have risen 18% over the past three years, Chris Dunn, a commercial insight associate at the firm, told me.  That percentage represents only the largest leases encompassing at least 10,000 square feet, like the ones OpenAI and Prometheus are signing. The shorter deals go for even more, he said, and now the vacancy rate for conventional office space is just 0.9%. “Demand has outstripped supply,” he continued.  

Today, one of the big topics of the area is sovereignty. It was a wake-up call for many when Anthropic shut off access to Mythos and Fable this summer, leaving some in the ecosystem to conclude: “We’d better look after ourselves,” Saul Klein, co-founder of the VC firm Phoenix Court, told me.  

Phoenix Court is located in the King’s Cross area and has three portfolio companies in the vicinity, including Olix (which just announced a .3 billion valuation), Early Health and CoMind. Robin Klein, co-founder of the firm, said the shutdown of Fable and Mythos access was a “small but sharp reminder that Europe can’t simply rent its AI capabilities and capacity; it needs to build and hold some of its own.” King’s Cross, he said, is where much of this building is actually happening.  







“The bigger question,” he continued, “is whether the U.K. builds the infrastructure, compute, energy, capital, to make this self-reliance durable, rather than just hosting outposts of U.S. labs.” 

Image Credits:Phoenix Court

Top founders want to stay 

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said.  Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said.  Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Image Credits:Phoenix Court

Top founders want to stay

Simon Kohl, founder of Latent Labs, has offices in King’s Cross and San Francisco. The London office, at the moment, is growing faster, and he’s more bullish than ever on the ecosystem, he said. “The mood right now feels less like London trying to catch up and more like London becoming one of the default places to start a serious AI company,” he said. 
 
Look around and you are likely to see Wayve testing its autonomous cars. Founded in 2017 by co-founder Alex Kendall, the unicorn is one of London’s biggest success stories.  

“Ten years ago, building a frontier AI company from London felt like an unusual choice,” Kendall told me. “Now it feels like an obvious one.” Wayve moved into King’s Cross in 2018 looking for a space that could double as a garage — “a rare combination in Central London,” Kendall said. He has watched the ecosystem mature around him — and it’s now evident that a startup can stay in London, raise serious capital, hire world-class AI talent, and remain globally competitive, he said. 
 
Down the street from Anthropic’s new 158,000-square-foot office is the AI agent builder Sierra and the AI video platform Synthesia. 

Laura Gonzalez Florez, Synthesia’s chief of staff and head of people, says the company moved into its glossy new office building a year ago to accommodate its growing team. They were drawn to the area for the same reason as everyone else: “It’s very close to the airport … very close to where a lot of investors are,” she said. 

Image Credits:Synthesia

Around two-thirds of Synthesia’s engineers are remote, Gonzalez Florez said, letting the company tap into an affordable, international, and diverse talent pool and helping it scale faster. “From London, we can hire and work, without any problem, people from anywhere, from Slovenia to Portugal,” she said.  

Unsurprisingly, London’s AI boom is also causing a talent war.

U.K. AI job postings have skyrocketed in the past few years, per data from PwC. When Anthropic announced it moved into town earlier this year, it listed, for example, a salary range of £260,000 to £630,000 for a machine learning research engineer when the average salary in London for the same role is around £102,000. Some founders in the U.K., like those in Silicon Valley, are being forced to raise more and bigger rounds to keep up. 

“The real test is whether more globally significant AI companies are founded, funded, and scaled from the U.K., while continuing to attract the world’s best talent to build them here,” Zain Ali, founder of the King’s Cross-based AI legal firm Centuro, told me. “If that continues to happen, King’s Cross won’t just be an AI hub. It’ll become one of the U.K.’s most important strategic assets.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

#Thisformernotorious #redlight #districtis #nowone #worlds #top #hubs #TechCrunchUK
Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026
	
Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.





Why Remote Server Access Is a Common Attack Vector



Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.



How to lock down SSH access in the right way



The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:




Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.



Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.



Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).



Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.



Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.




Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.



Why Do I Need a Bastion Host?



When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.



Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.



Mistakes Leading to Leaving Cloud Servers Open



The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.



Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.



System Administrators Guide to Secure Remote Access 



Prohibit SSH password logins totally and depend exclusively on key-based authentication




Surely no one wants to type in the password every time; because of this, use only key-based authentication 



Deter the user from logging in as root by default and instead use the sudo command to do root tasks



A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 



For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host



Periodically change SSH keys and inspect access lists



Maintain records of login attempts and detect brute-force attacks as quickly as possible




Frequently Asked Questions



What is the principal means by which cloud servers suffer break-ins through remote access? By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.  Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication?  It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection.   Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys?  A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.  Bastion host vs VPN as methods of accessing the server?  The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle.   How often should SSH keys be rotated?  The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.  Why is only changing the port number for SSH enough to secure that port? Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.  





#Secure #Remote #Access #Cloud #ServerCloud,remote access

  1. free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access">How to Secure Remote Access to Your Cloud Server in 2026

Protection against unauthorized remote logins to your cloud server is a matter of SSH key-based authentication, a strict security policy on the firewall, two-factor authentication, and a secure communication channel – no individual component will give adequate protection by itself. The major risk point in breaches is not the server but the open door to remote login. To patch that vulnerability, you need a series of countermeasures, not a magical setting.

Why Remote Server Access Is a Common Attack Vector

Every cloud server exposes at least one remote access point – usually SSH on port 22 – and that port is scanned constantly by bots looking for weak credentials. Password-based login is the most common way a system can be attacked by brute force, and it is quite common with a standard setup that the system is left in a state where an admin/user of that system – “root user” – can log in directly by guessing the user ID and the password combination. Add in shared team credentials, forgotten firewall rules from old projects, and staging servers left publicly reachable, and it’s clear why misconfigured remote access – not zero-day exploits – is behind most cloud server compromises. The fix is simple, though you’ll need to do some setup yourself instead of trusting the default setting.

How to lock down SSH access in the right way

The best way to secure remote access is through a series of small improvements rather than one major overhaul. The following is a real working method:

  1. Switch to SSH key authentication, then turn off password login completely in the same location: sshd_config. Keys are far harder to brute-force than passwords.
  2. Disable root login over SSH and require a non-root user with sudo privileges instead; this is a security advantage that even without any change, one key compromising would limit the impact.
  3. Change the default SSH port away from 22 to cut down on automated scanning noise (not a security measure on its own, but it reduces log clutter).
  4. Restrict access by IP using your firewall or security group, allowing SSH only from known office or VPN IP ranges rather than the entire internet.
  5. Add a VPN as a connection layer for anyone accessing servers from outside a trusted network – a VPN like Planet VPN’s free VPN service can encrypt the connection between a remote worker’s laptop and the server before SSH traffic ever leaves their device, which matters especially on public wi-fi or shared networks.

Every step you take closes the doors that the attacker may open slightly, and when you combine everything, you would have a door to a series of locked gates.

Why Do I Need a Bastion Host?

When it comes to teams working with many servers, deploying a bastion host (jump box) may be a clean and effective way to solve the long-term problem. With this method, you only expose SSH to the bastion, and the other servers accept it only when it’s from the bastion’s internal IP. This centralizes logging and makes auditing access far simpler.

Using a virtual private network (VPN) and a bastion host together is perfectly fine – and many solutions use both: a safe way to access the private network via a VPN, followed by use of a bastion host to restrict which servers can be accessed. Some teams may decide to forgo the bastion because they don’t have the manpower to manage one, and so use a combination of a VPN and a set of firewall rules that still quite a bit lowers the exposure, but without the extra effort.

Mistakes Leading to Leaving Cloud Servers Open

The Mistakes That Cause Leaving Cloud Servers Open: Even the safest development teams may have slip-ups from time to time. One of the most frequent is leaving staged, or test servers with relaxed firewall rules equivalent to those of the production environment – hackers don’t concern themselves with which environment they first land on. Another frequent error is reusing the same SSH key on several servers and clients, causing one hacked laptop to compromise all servers that key has access to.

Another common human error is not removing or changing access when someone leaves the team, so stale credentials remain valid and accessible. At last, putting trust in the strategy of “security through obscurity” – meaning one thinks that setting up the unusual port or hiding the hostname from the public is actually sufficient security – creates a wrong impression of security. This is mostly true; in reality, modern-day attackers scan all ports anyway, and there is no way to hide from them.

System Administrators Guide to Secure Remote Access 

Prohibit SSH password logins totally and depend exclusively on key-based authentication

  • Surely no one wants to type in the password every time; because of this, use only key-based authentication 
  • Deter the user from logging in as root by default and instead use the sudo command to do root tasks
  • A firewall or security group rule can provide great help with IP address-based restrictions on SSH logins 
  • For access that comes from untrusted sources or external networks, use a secure tunnel like a vpn or bastion host
  • Periodically change SSH keys and inspect access lists
  • Maintain records of login attempts and detect brute-force attacks as quickly as possible

Frequently Asked Questions

What is the principal means by which cloud servers suffer break-ins through remote access?

By far the biggest reason why this can happen is unauthorized password-based SSH logins that have been cracked by brute force. The scenario is most likely to develop where the administrator allows root login via password and leaves the default port open.

Sufficient security measures for the server via SSH keys: Do you think it is safe to rely only on key authentication? 

It is true that SSH keys drastically decrease the danger of a successful brute-force attack. However, if there is only key authentication on the server, there are still risks – the server administrator can always enable root login or disable the IP-based login restrictions. So it is recommended to always have these three in the server configuration: disabled root login, restricted access to known IPs, and rotating the keys regularly as the main components of meaningful protection. 

Is it really necessary to set up a separate VPN network while I am able to connect via SSH keys? 

A VPN gives extra security by first encrypting your computer traffic before it reaches your network, where the SSH connection will be used. This is mostly important when working on untrusted networks – like public wi-fi – where there is a threat of a potential hacker in your local network looking at your data.

Bastion host vs VPN as methods of accessing the server? 

The bastion host works by funneling SSH sessions from many users through a single, carefully monitored server point while the rest of the network (and mostly the servers) remains protected from the internet. At the same time, a vpn will fully encrypt the communication between the user and the corporate network or servers. The combination is very common among larger security teams as a part of the defense-in-depth principle. 

How often should SSH keys be rotated? 

The ideal period to change your SSH keys depends on the security practices of your organization, but generally a good practice is to change SSH keys between 90 and 180 days, or in the case that the user who had access with the key leaves or is no longer able to be contacted, such as when a team member leaves.

Why is only changing the port number for SSH enough to secure that port?

Changing the port reduces automated scanning noise in your logs but isn’t a real security control on its own — port scanners check all ports, so it should never replace key-based auth and firewall rules.

#Secure #Remote #Access #Cloud #ServerCloud,remote access

Post Comment