Tootfinder

Quantification of atmospheric carbon dioxide from the Geostationary Operational Environmental Satellite (GOES East)
Aaron Sonabend-W, Sean Campbell, John Platt, Christopher Van Arsdale, Anna M. Michalak
https://arxiv.org/abs/2605.23991 https://arxiv.org/pdf/2605.23991 https://arxiv.org/html/2605.23991
arXiv:2605.23991v1 Announce Type: new
Abstract: There is a growing urgency to track greenhouse gasses with the resolution, precision and accuracy needed to support independent verification of $CO_2$ fluxes at local to global scales. The current generation of space-based sensors, however, only provides sparse observations in space and time. This challenge has fueled interest in the potential use of data from existing missions originally developed for other applications for inferring global greenhouse gas variability. The Advanced Baseline Imager (ABI) onboard the Geostationary Operational Environmental Satellite (GOES-East), operational since 2017, provides full coverage of much of the western hemisphere at 10-minute intervals from geostationary orbit at 16 wavelengths at an approximately 2$km^2$ spatial resolution. Here, we leverage this high spatial coverage and temporal revisit to develop a single-pixel, physics-guided neural network to estimate dry-air column $CO_2$ mole fraction ($XCO_2$). The model employs a time series of GOES-East's 16 spectral bands, ECMWF ERA5 lower tropospheric meteorology, MODIS surface reflectance, solar and satellite viewing geometry, and day of year. Training used collocated GOES-East and OCO-2/OCO-3 observations. We also present case studies illustrating the use of the model to observe $XCO_2$ enhancements over urban areas and drawdown over agricultural regions. Overall, while the precision of GOES-East derived $XCO_2$ can never rival that of dedicated instruments, the unprecedented combination of contiguous geographic coverage, 10-minute temporal frequency, and multi-year record offers the potential to observe aspects of atmospheric $CO_2$ variability currently unseen from space.
toXiv_bot_toot

AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Jay Barach
https://arxiv.org/abs/2607.20574 https://arxiv.org/pdf/2607.20574 https://arxiv.org/html/2607.20574
arXiv:2607.20574v1 Announce Type: new
Abstract: Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a malicious request is byte-for-byte indistinguishable from a legitimate one, which is precisely why web application firewalls and single identity scanners fail to catch it. We present AuthProbe, an open-source, black-box scanner that detects BOLA and IDOR in HTTP APIs by driving its tests from an OpenAPI specification and by acting under two or more identities that the operator controls. AuthProbe discovers, for each identity, the objects that identity legitimately owns, then attempts to read one identity's objects while authenticated as another and confirms a leak by comparing the response against a ground-truth fetch by the true owner. It also walks predictable identifiers to expose enumeration and reports missing authentication and existence oracles. The tool returns a severity-thresholded exit code and machine-readable reports so that it can gate a continuous integration build. On a synthetic recruitment API in which the McHire failure class is reproduced, AuthProbe detects every planted cross-identity read with no false positives on a hardened counterpart, and its running time grows linearly with the number of objects under test. AuthProbe is released under the Apache 2.0 license with an authorized-use guardrail.
toXiv_bot_toot

findet man schnell die locations einer nicht-dokumentierten config Datei, wo man sowas eintragen kann, aber bei jedem Update des Clients wird die überschrieben. 🙄
Das Support-Ticket, was dieses Feature verlangt gibt es seit Jahren, aber die Firma macht nix.
Also wollte ich die KI ein CLI schreiben lassen, was exclude Konfiguration bei mir schön im Home ablegt und dann die interne Datei draus neu schreiben kann.
2/n