Tootfinder

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
Oleksii Oleksenko, Flavien Solt, C\'edric Fournet, Jana Hofmann, Boris K\"opf, Stavros Volos
https://arxiv.org/abs/2507.06039

Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
CPUs provide isolation mechanisms like virtualization and privilege levels to protect software. Yet these focus on architectural isolation while typically overlooking microarchitectural side channels, exemplified by Meltdown and Foreshadow. Software must therefore supplement architectural defenses with ad-hoc microarchitectural patches, which are constantly evolving as new attacks emerge and defenses are proposed. Such reactive approach makes ensuring complete isolation a daunting task, and lea…

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros
Cybersecurity researchers have disclosed two security flaws in the Sudo command-line utility for Linux and Unix-like operating systems that could enable local attackers to escalate their privileges to root on susceptible machines.
🐧

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros
Two critical vulnerabilities in Sudo command-line tool allow privilege escalation for local attackers on Linux systems

Re: https://zeroes.ca/@broadwaybabyto/114804470667350177
Yeah, I still do most of my weekly shopping at one of the big UK supermarkets (Tesco currently, switched from Sainsbury's when they just Would Not Stop advertising on GB News), because I only have so many…

Scoop: Trump denies 9 former Biden aides executive privilege (Alex Thompson/Axios)
https://www.axios.com/2025/06/25/biden-investigation-congress-aides-executive-privilege
http://www.memeorandum.com/250625/p12#a250625p12

I just feel that racist privilege is right for me. Why can't you just respect that?

🇺🇦 #NowPlaying on KEXP's #VarietyMix
Allen Stone:
🎵 American Privilege
#AllenStone
https://allenstone.bandcamp.com/track/american-privilege
https://open.spotify.com/track/3LesC4icjkjsy3ZHZu6aaJ

If it was up to me, I'd ONLY save the ugly animals https://www.abc.net.au/news/2025-06-25/ugly-endangered-animals-ignored-in-conservation-bias/105443062

Wildlife experts say ugly endangered animals are being ignored in conservation efforts
While there are plenty of conservation efforts and community love for cute marsupials like the western ringtail possum, researchers say that pretty privilege is threatening the existence of blood suckers and web weavers.

Asterinas: A Linux ABI-Compatible, Rust-Based Framekernel OS with a Small and Sound TCB
Yuke Peng, Hongliang Tian, Zhang Junyang, Ruihan Li, Chengjun Chen, Jianfeng Jiang, Jinyi Xian, Xiaolin Wang, Chenren Xu, Diyu Zhou, Yingwei Luo, Shoumeng Yan, Yinqian Zhang
https://arxiv.org/abs/2506.03876

Asterinas: A Linux ABI-Compatible, Rust-Based Framekernel OS with a Small and Sound TCB
How can one build a feature-rich, general-purpose, Rust-based operating system (OS) with a minimal and sound Trusted Computing Base (TCB) for memory safety? Existing Rust-based OSes fall short due to their improper use of unsafe Rust in kernel development. To address this challenge, we propose a novel OS architecture called framekernel that realizes Rust's full potential to achieve intra-kernel privilege separation, ensuring TCB minimality and soundness. We present OSTD, a streamlined framework…

@… Heck, even as a white, now US-citizen, immigrant to this country, *I* am starting to rethink whether I need to arm myself explicitly for protection *from* the law.
And if I am thinking that in my position of relative privilege, you bet others are too.

UNDERNEWS: Trump White House takes executive privilege away from Biden staffers
https://prorevnews.blogspot.com/2025/06/trump-white-house-takes-executive.html

«DOGE has provided a template for complete political and cultural rollback, exploiting AI's brittle affordances to trash any pretence at social contract. What the so-called educational offers from AI companies are actually doing is a form of cyberattack, building in the pathways for the hacker tactic of 'privilege escalation' to be used by future threat actors, especially those from a hostile administration.»
"The role of the University is to resist" by @…
https://danmcquillan.org/cpct_seminar.html

»Over 100,000 WordPress Sites Exposed to Privilege Escalation via MCP AI Engine:
The Wordfence Threat Intelligence team identified a severe security flaw in the AI Engine plugin, a widely used tool installed on over 100,000 WordPress websites.«
This is not surprising, especially since WordPress is very popular. However, the fact that it affects this scope should generally draw our attention to it on the web.
😬

Over 100,000 WordPress Sites Exposed to Privilege Escalation via MCP AI Engine
The Wordfence Threat Intelligence team identified a severe security flaw in the AI Engine plugin, a widely used tool installed.

Read somewhere: If you are a lover of freedom, but don't love it for everybody, then it's not freedom you love - it's privilege.
Or impunity.

Bill Maher's "Is Anyone Else Seeing This" was unbearably annoying after a few minutes (who would have guessed), I made it through Bill Burr's "Drop Dead Years" and it was fine (I am not quite where he is yet) and I really enjoyed watching Ari Shaffir's "America's Sweetheart" (so _that_ kind of of white-privilege middle-age is #WhereIAmNow ).

Zero-Trust Foundation Models: A New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things
Kai Li, Conggai Li, Xin Yuan, Shenghong Li, Sai Zou, Syed Sohail Ahmed, Wei Ni, Dusit Niyato, Abbas Jamalipour, Falko Dressler, Ozgur B. Akan
https://arxiv.org/abs/2505.23792

Zero-Trust Foundation Models: A New Paradigm for Secure and Collaborative Artificial Intelligence for Internet of Things
This paper focuses on Zero-Trust Foundation Models (ZTFMs), a novel paradigm that embeds zero-trust security principles into the lifecycle of foundation models (FMs) for Internet of Things (IoT) systems. By integrating core tenets, such as continuous verification, least privilege access (LPA), data confidentiality, and behavioral analytics into the design, training, and deployment of FMs, ZTFMs can enable secure, privacy-preserving AI across distributed, heterogeneous, and potentially adversari…

Found in Naomi Klein's Doppelganger. The one lesson I wish the modern left would internalize more than anything.
Use shared language.
Don't use lefty jargon when the person you're talking to doesn't subscribe to these ideas. No white privilege, no colonial oppression, no intersectionality. Translate to a shared language, built on reasonable, common assumptions and do the work required to bring people on board.
Because you can be damned sure the MAGA crowd ar…

SimuPanel: A Novel Immersive Multi-Agent System to Simulate Interactive Expert Panel Discussion
Xiangyang He, Jiale Li, Jiahao Chen, Yang Yang, Mingming Fan
https://arxiv.org/abs/2506.16010

SimuPanel: A Novel Immersive Multi-Agent System to Simulate Interactive Expert Panel Discussion
Panel discussion allows the audience to learn different perspectives through interactive discussions among experts moderated by a host and a Q&A session with the audience. Despite its benefits, panel discussion in the real world is inaccessible to many who do not have the privilege to participate due to geographical, financial, and time constraints. We present SimuPanel, which simulates panel discussions among academic experts through LLM-based multi-agent interaction. It enables users to defin…

This https://arxiv.org/abs/2412.19961 has been replaced.
initial toot: https://mastoxiv.page/@arXi…

Incentivizing supplemental math assignments and using AI-generated hints is associated with improved exam performance
Inequities in student access to trigonometry and calculus are often associated with racial and socioeconomic privilege, and often influence introductory physics course performance. To mitigate these disparities in student preparedness, we developed a two-pronged intervention consisting of (1) incentivized supplemental math assignments and (2) AI-generated learning support tools in the form of optional hints embedded in the physics homework assignments. Both interventions are grounded in the Sit…

Immunological mechanisms and immunoregulatory strategies in intervertebral disc degeneration
Xianyi Yan, Xi Wang, Ying Che, Peng Feng, Ting Zhang
https://arxiv.org/abs/2506.09336 …

Immunological mechanisms and immunoregulatory strategies in intervertebral disc degeneration
Intervertebral discs are avascular and maintain immune privilege. However, during intervertebral disc degeneration (IDD), this barrier is disrupted, leading to extensive immune cell infiltration and localized inflammation. In degenerated discs, macrophages, T lymphocytes, neutrophils, and granulocytic myeloid-derived suppressor cells (G-MDSCs) are key players, exhibiting functional heterogeneity. Dysregulated activation of inflammatory pathways, including nuclear factor kappa-B (NF-kappaB), int…

Extremism in defence of privilege is no virtue.

As Canada Day approaches, this story of a Mom finding her Canadian identity through helping Syrian refugees settle here after 2015 is poignant.
"In 2025, being a Canadian woman to me means looking out for our neighbours, leaning into differences in culture, religious practices and learning how to help others in need. Because we are not different at all. We are all just looking for safety and peace. It's our Canadian values of equality, respect and freedom in action.
It is the singular privilege of my life to walk alongside these families from Cape Breton and those who are newcomers to Canada. It's changed how I live, and I intend to do this work as long as I am able. I learn from them grace, service, faith and hope. They taught me how to be a Canadian.”
#Canada #CanPoli #CdnPoli #Refugees #Immigration #Syria #AlanKurdi
https://www.cbc.ca/news/canada/nova-scotia/first-person-cape-breton-welcomes-syrian-refugees-1.7559341

Quantifying Azure RBAC Wildcard Overreach
Christophe Parisel
https://arxiv.org/abs/2506.10755 https://arxiv.org/pdf/2506.10755…

Quantifying Azure RBAC Wildcard Overreach
Azure RBAC leverages wildcard permissions to simplify policy authoring, but this abstraction often obscures the actual set of allowed operations and undermines least-privilege guarantees. We introduce Belshazaar, a two-stage framework that targets both the effective permission set problem and the evaluation of wildcards permissions spread. First, we formalize Azure action syntax via a context free grammar and implement a compiler that expands any wildcard into its explicit action set. Second, w…

At the German #Perl Workshop, I had the privilege to organize a panel about #OpenSource #Sustainability on #CPAN…