Tootfinder

Back with the Taiwanese colleagues to explore the #semiconductor industry, now in #Dresden. We started with vanished #chip histories, moved to promised silicon futures and will now venture out – a…

Classical Acceptance Is Not Hybrid Authentication: Measuring X.509 Verifier Semantics in Post-Quantum Migration
Taesung Kim, Boheung Chung, Keonwoo Kim, Yousung Kang
https://arxiv.org/abs/2607.20800 https://arxiv.org/pdf/2607.20800 https://arxiv.org/html/2607.20800
arXiv:2607.20800v1 Announce Type: new
Abstract: A relying party validating a hybrid X.509 certificate --- carrying both a classical and a post-quantum credential --- must distinguish whether its accepting judgment rests on the post-quantum evidence or only on the classical path. To preserve compatibility, the separable designs place that evidence where classical path validation may ignore it. A verifier can then validate the classical path and accept while the post-quantum evidence never bears on the decision --- a valid classical result silently promoted to a hybrid conclusion it did not establish. We measure this across eight path-validation stacks (seven independent codebases), in nine validation modes, over six certificate schemes. Under a hybrid-required policy, nearly every stack parsing a separable hybrid certificate accepts on the classical path without making the post-quantum evidence outcome-bearing; one enforcing mode instead fractures interoperability over a signature-input encoding not yet interoperably profiled; and stacks that verify post-quantum signatures still do not enforce the binding by default: the gap is structural, not explained by missing primitive capability alone. Under lifecycle desynchronization the downgrade is realized: when a bound post-quantum credential is revoked while the classical certificate stays valid, the default path still accepts, because the bound credential lies outside the decision's scope. Binding success is not authentication success. We contribute a specification-derived verifier model and an executable, policy-parametric reference contract --- what a verifier must recognize, verify, make outcome-bearing, and check before reporting a validation as hybrid --- with a diagnosis of why standards do not require it.
toXiv_bot_toot

🔊 #NowPlaying on #BBCRadio3:
#SundayFeature
- Afterwords: Elgar Howarth
An exploration of the trumpet player, composer and conductor Elgar - Gary - Howarth. Musical colleagues together with his son Patrick reflect on his international achievements.
Relisten now 👇
https://www.bbc.co.uk/programmes/m002v8f7

Silk And Sentences: Smart Conversations About Books
Hosted by Danielle, each episode explores the books worth talking about properly — from literary classics and contemporary fiction to cult favourites and beautifully strange novels that linger in the mind...
Great Australian Pods Podcast Directory: https://www.

🔊 #NowPlaying on #BBCRadio3:
#SundayFeature
- Afterwords: Elgar Howarth
An exploration of the trumpet player, composer and conductor Elgar - Gary - Howarth. Musical colleagues together with his son Patrick reflect on his international achievements.
Relisten now 👇
https://www.bbc.co.uk/programmes/m002v8f7

Typ mit Colakiste in U-Bahn. Wird er explodieren?

Common plastic chemical linked to lifelong anxiety in new study #environment

Common plastic chemical linked to lifelong anxiety in new study
Exposure to a common plastic chemical before and shortly after birth may have lasting effects on behavior. Researchers found that male rats exposed early in life to DEHP—a plasticizer used in products ranging from medical devices to toys—showed significantly higher anxiety as adults, even long after exposure had ended. The animals were more hesitant to explore open spaces and spent more time frozen in place, classic signs of anxiety in rodents.

Maya glyphic texts from the Classic period (250–900 CE)
typically chronicle the exploits of historical or divine characters;
everyday or functional records are rare.
Here, the authors offer a reconstruction and transcription of a ‘microtext’
painted on an interior wall of Structure 10K-2 at the site of Xultun, Guatemala.
The text records a unique astronomical formula that concludes with a name,
attributing the work to an individual named Sak Tahn Waax …

The identification and work of an eighth-century Maya mathematician | Antiquity | Cambridge Core
The identification and work of an eighth-century Maya mathematician

Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study
Shanna M. Kahn, John D. Hastings
https://arxiv.org/abs/2607.20713 https://arxiv.org/pdf/2607.20713 https://arxiv.org/html/2607.20713
arXiv:2607.20713v1 Announce Type: new
Abstract: LLM-based coding tools enable non-expert users to generate routine automation scripts that may enter enterprise workflows without meaningful security review. This study examines that risk directly. Code was collected from ChatGPT, Microsoft Copilot, and Google Gemini using identical prompts across three automation domains. Claude Code performed a standardized vulnerability review. Each identified vulnerability was scored using CVSS v3.1 and mapped to the OWASP Top 10:2021 and the MITRE ATT&CK frameworks. Every script contained exploitable vulnerabilities. Nine of the 17 identified vulnerability classes appeared in code from all three models, while 14 of the 17 vulnerability classes appeared in at least two models. The weighted CVSS scores across platforms differed by less than 10%. The risk is not tied to any particular model but rather to the task category. Organizations should therefore ask not which tool to trust, but instead whether LLM-generated automation code should be deployed without review.
toXiv_bot_toot

🔊 #NowPlaying on #BBCRadio3:
#KeyChanges:Radio3sEssentialHistoryOfClassicalMusic
- 1772: The Symphony Laboratory
1772. The remote court of Esterhšza in the Hungarian marshlands. Historian Simon Schama joins Gillian Moore to explore how Haydn pushes the boundaries of the classical symphony.
Relisten now 👇
https://www.bbc.co.uk/programmes/m002z7s4