Secrets Revealed in Container Images: An Internet-wide Study on Occurrence and Impact

Containerization allows bundling applications and their dependencies into a single image. The containerization framework Docker eases the use of this concept and enables sharing images publicly, gaining high momentum. However, it can lead to users creating and sharing images that include private keys or API secrets-either by mistake or out of negligence. This leakage impairs the creator's security and that of everyone using the image. Yet, the extent of this practice and how to counteract it remains unclear. In this paper, we analyze 337,171 images from Docker Hub and 8,076 other private registries unveiling that 8.5% of images indeed include secrets. Specifically, we find 52,107 private keys and 3,158 leaked API secrets, both opening a large attack surface, i.e., putting authentication and confidentiality of privacy-sensitive data at stake and even allow active attacks. We further document that those leaked keys are used in the wild: While we discovered 1,060 certificates relying on compromised keys being issued by public certificate authorities, based on further active Internet measurements, we find 275,269 TLS and SSH hosts using leaked private keys for authentication. To counteract this issue, we discuss how our methodology can be used to prevent secret leakage and reuse.Comment: 15 pages, 7 figure

ECN with QUIC: Challenges in the Wild

TCP and QUIC can both leverage ECN to avoid congestion loss and its retransmission overhead. However, both protocols require support of their remote endpoints and it took two decades since the initial standardization of ECN for TCP to reach 80% ECN support and more in the wild. In contrast, the QUIC standard mandates ECN support, but there are notable ambiguities that make it unclear if and how ECN can actually be used with QUIC on the Internet. Hence, in this paper, we analyze ECN support with QUIC in the wild: We conduct repeated measurements on more than 180M domains to identify HTTP/3 websites and analyze the underlying QUIC connections w.r.t. ECN support. We only find 20% of QUIC hosts, providing 6% of HTTP/3 websites, to mirror client ECN codepoints. Yet, mirroring ECN is only half of what is required for ECN with QUIC, as QUIC validates mirrored ECN codepoints to detect network impairments: We observe that less than 2% of QUIC hosts, providing less than 0.3% of HTTP/3 websites, pass this validation. We identify possible root causes in content providers not supporting ECN via QUIC and network impairments hindering ECN. We thus also characterize ECN with QUIC distributedly to traverse other paths and discuss our results w.r.t. QUIC and ECN innovations beyond QUIC.Comment: Accepted at the ACM Internet Measurement Conference 2023 (IMC'23

A chiral self-sorting photoresponsive coordination cage based on overcrowded alkenes

In recent years, increasing efforts have been devoted to designing new functional stimuli-responsive supramolecular assemblies. Here, we present three isomeric supramolecular coordination complexes consisting of a Pd2L4 stoichiometry. As shown by NMR, CD and X-ray studies, as well as DFT calculations, these complexes form cage-like structures by chiral self-sorting. Photochromic ligands derived from first generation molecular motors enable light-driven interconversion between the three isomers. Two of the isomers were able to form host–guest complexes opening up new prospects toward stimuli-controlled substrate binding and release.Supramolecular & Biomaterials Chemistr

Simultaneous MMC readout using a tailored {\mu}MUX based readout system

Magnetic microcalorimeters (MMCs) are cryogenic, energy-dispersive single-particle detectors providing excellent energy resolution, intrinsically fast signal rise time, quantum efficiency close to 100\%, large dynamic range as well as almost ideal linear response. One of the remaining challenges to be overcome to ultimately allow for the utilization of large-scale MMC based detector arrays with thousands to millions of individual pixels is the realization of a SQUID based multiplexing technique particularly tailored for MMC readout. Within this context, we report on the first truly multiplexed readout of an MMC based detector array using a frequency-division multiplexing approach realized by a custom microwave SQUID multiplexer based readout system.Comment: Conference: ASC2022 (accepted for publication in IEEE Transactions on Applied Superconductivity

Treatment of refractory epilepsy with natalizumab in a patient with multiple sclerosis. Case report

Background. Multiple sclerosis (MS) is considered an autoimmune disease of the central nervous system and therapeutic inhibition of leukocyte migration with natalizumab, an anti-alpha4 integrin antibody, is highly effective in patients with MS. Recent studies performed in experimental animal models with relevance to human disease suggested a key role for blood-brain barrier damage and leukocyte trafficking mechanisms also in the pathogenesis of epilepsy. In addition, vascular alterations and increased leukocyte accumulation into the brain were recently documented in patients with refractory epilepsy independently on the disease etiology. Case report. Here we describe the clinical course of a 24-year-old patient with MS in whom abrupt tonic-clonic generalized seizures manifested at disease onset. Although MS had a more favorable course, treatment with glatiramer acetate and antiepileptic drugs for 7 years had no control on seizure generation and the patient developed severe refractory epilepsy. Interestingly, generalized seizures preceded new MS relapses suggesting that seizure activity may contribute to MS worsening creating a positive feedback loop between the two disease conditions. Notably, treatment with natalizumab for 12 months improved MS condition and led to a dramatic reduction of seizures. Conclusion. Our case report suggests that inhibition of leukocyte adhesion may represent a new potential therapeutic approach in epilepsy and complement the traditional therapy with anti-epileptic drugs

Challenges in QCD matter physics - The Compressed Baryonic Matter experiment at FAIR

Substantial experimental and theoretical efforts worldwide are devoted to explore the phase diagram of strongly interacting matter. At LHC and top RHIC energies, QCD matter is studied at very high temperatures and nearly vanishing net-baryon densities. There is evidence that a Quark-Gluon-Plasma (QGP) was created at experiments at RHIC and LHC. The transition from the QGP back to the hadron gas is found to be a smooth cross over. For larger net-baryon densities and lower temperatures, it is expected that the QCD phase diagram exhibits a rich structure, such as a first-order phase transition between hadronic and partonic matter which terminates in a critical point, or exotic phases like quarkyonic matter. The discovery of these landmarks would be a breakthrough in our understanding of the strong interaction and is therefore in the focus of various high-energy heavy-ion research programs. The Compressed Baryonic Matter (CBM) experiment at FAIR will play a unique role in the exploration of the QCD phase diagram in the region of high net-baryon densities, because it is designed to run at unprecedented interaction rates. High-rate operation is the key prerequisite for high-precision measurements of multi-differential observables and of rare diagnostic probes which are sensitive to the dense phase of the nuclear fireball. The goal of the CBM experiment at SIS100 (sqrt(s_NN) = 2.7 - 4.9 GeV) is to discover fundamental properties of QCD matter: the phase structure at large baryon-chemical potentials (mu_B > 500 MeV), effects of chiral symmetry, and the equation-of-state at high density as it is expected to occur in the core of neutron stars. In this article, we review the motivation for and the physics programme of CBM, including activities before the start of data taking in 2022, in the context of the worldwide efforts to explore high-density QCD matter.Comment: 15 pages, 11 figures. Published in European Physical Journal

Optimasi Portofolio Resiko Menggunakan Model Markowitz MVO Dikaitkan dengan Keterbatasan Manusia dalam Memprediksi Masa Depan dalam Perspektif Al-Qur`an

Risk portfolio on modern finance has become increasingly technical, requiring the use of sophisticated mathematical tools in both research and practice. Since companies cannot insure themselves completely against risk, as human incompetence in predicting the future precisely that written in Al-Quran surah Luqman verse 34, they have to manage it to yield an optimal portfolio. The objective here is to minimize the variance among all portfolios, or alternatively, to maximize expected return among all portfolios that has at least a certain expected return. Furthermore, this study focuses on optimizing risk portfolio so called Markowitz MVO (Mean-Variance Optimization). Some theoretical frameworks for analysis are arithmetic mean, geometric mean, variance, covariance, linear programming, and quadratic programming. Moreover, finding a minimum variance portfolio produces a convex quadratic programming, that is minimizing the objective function ðð¥with constraintsð ð 𥠥 ðandð´ð¥ = ð. The outcome of this research is the solution of optimal risk portofolio in some investments that could be finished smoothly using MATLAB R2007b software together with its graphic analysis

Search for heavy resonances decaying to two Higgs bosons in final states containing four b quarks

A search is presented for narrow heavy resonances X decaying into pairs of Higgs bosons (H) in proton-proton collisions collected by the CMS experiment at the LHC at root s = 8 TeV. The data correspond to an integrated luminosity of 19.7 fb(-1). The search considers HH resonances with masses between 1 and 3 TeV, having final states of two b quark pairs. Each Higgs boson is produced with large momentum, and the hadronization products of the pair of b quarks can usually be reconstructed as single large jets. The background from multijet and t (t) over bar events is significantly reduced by applying requirements related to the flavor of the jet, its mass, and its substructure. The signal would be identified as a peak on top of the dijet invariant mass spectrum of the remaining background events. No evidence is observed for such a signal. Upper limits obtained at 95 confidence level for the product of the production cross section and branching fraction sigma(gg -> X) B(X -> HH -> b (b) over barb (b) over bar) range from 10 to 1.5 fb for the mass of X from 1.15 to 2.0 TeV, significantly extending previous searches. For a warped extra dimension theory with amass scale Lambda(R) = 1 TeV, the data exclude radion scalar masses between 1.15 and 1.55 TeV

Search for supersymmetry in events with one lepton and multiple jets in proton-proton collisions at root s=13 TeV

Peer reviewe

Measurement of the top quark mass using charged particles in pp collisions at root s=8 TeV

Peer reviewe