The 20 most recently published documents
Abstract
In this paper, we shed light on shared hosting services’ security and trust implications and measure their attack surfaces. To do so, we analyzed 30 shared hosters and found that all of them might leak relevant information, which could be abused unnoticed. An adversary could use this attack surface to covertly extract data from various third parties registered with a shared hoster. Furthermore, we found that most hosters suffer from vulnerabilities that can be used by an internal attacker (i.e., someone using the service) to compromise other hosted services or the entire system.
Abstract
For years, researchers have been analyzing mobile Android apps to investigate diverse properties such as software engineering practices, business models, security, privacy, or usability, as well as differences between marketplaces. While similar studies on iOS have been limited, recent work has started to analyze and compare Android apps with those for iOS. To obtain the most representative analysis results across platforms, the ideal approach is to compare their characteristics and behavior for the same set of apps, e. g., to study a set of apps for iOS and their respective counterparts for Android. Previous work has only attempted to identify and evaluate such cross-platform apps to a limited degree, mostly comparing sets of apps independently drawn from app stores, manually matching small sets of apps, or relying on brittle matches based on app and developer names. This results in (1) comparing apps whose behavior and properties significantly differ, (2) limited scalability, and (3) the risk of matching only a small fraction of apps.
In this work, we propose a novel approach to create an extensive dataset of cross-platform apps for the iOS and Android ecosystems. We describe an analysis pipeline for discovering, retrieving, and matching apps from the Apple App Store and Google Play Store that we used to create a set of 3,322 cross-platform apps out of 10,000 popular apps for iOS and Android, respectively. We evaluate existing and new approaches for cross-platform app matching against a set of reference pairs that we obtained from Google's data migration service. We identify a combination of seven features from app store metadata and the apps themselves to match iOS and Android apps with high confidence (95.82 %). Compared to previous attempts that identified 14 % of apps as cross-platform, we are able to match 34 % of apps in our dataset. To foster future research in the cross-platform analysis of mobile apps, we make our pipeline available to the community.
Abstract
This paper challenges the conventional assumption in cybersecurity that users act as rational actors. Despite numerous technical solutions, awareness campaigns, and organizational strategies aimed at bolstering cybersecurity, these often overlook the prevalence of non-rational user behavior. Our study, involving a survey of 208 participants, empirically demonstrates this aspect. We found that a significant portion of users (55.3%) would accept a substantial risk (35%) to click on a potentially malicious link or attachment. This propensity increases to 61% when users are led to believe there is a 65% chance of facing no adverse consequences. To address this irrationality, we explored the efficacy of nudging mechanisms within email systems. Our qualitative user study revealed that incorporating a simple colored nudge in the email intably enhance the ability of users to discern malicious emails, improving decision-making accuracy by an average of 10%.
Blood vessel formation relies on biochemical and mechanical signals, particularly during sprouting angiogenesis when endothelial tip cells (TCs) guide sprouting through filopodia formation. The contribution of BMP receptors in defining tip-cell characteristics is poorly understood. Our study combines genetic, biochemical, and molecular methods together with 3D traction force microscopy, which reveals an essential role of BMPR2 for actin-driven filopodia formation and mechanical properties of endothelial cells (ECs). Targeting of Bmpr2 reduced sprouting angiogenesis in zebrafish and BMPR2-deficient human ECs formed fewer filopodia, affecting cell migration and actomyosin localization. Spheroid assays revealed a reduced sprouting of BMPR2-deficient ECs in fibrin gels. Even more strikingly, in mosaic spheroids, BMPR2-deficient ECs failed to acquire tip-cell positions. Yet, 3D traction force microscopy revealed that these distinct cell behaviors of BMPR2-deficient tip cells cannot be explained by differences in force-induced matrix deformations, even though these cells adopted distinct cone-shaped morphologies. Notably, BMPR2 positively regulates local CDC42 activity at the plasma membrane to promote filopodia formation. Our findings reveal that BMPR2 functions as a nexus integrating biochemical and biomechanical processes crucial for TCs during angiogenesis.
The study introduces flexible and scalable manufacturing approach for electrodes utilizing boron-doped silicon as conductive support for iridium nanoparticles, addressing the challenges of cost and scarcity associated with noble catalysts for oxygen evolution reaction (OER). Colloidal Ir nanoparticles are synthesized via pulsed-laser ablation (≈4–7 nm) and decorated on B-doped Si (≈100 nm) through electrostatic adsorption. Titanium substrates are ultrasonically sprayed with Si:B – Ir and Ir nanoparticles with very low iridium loading of 12 wt.%. Crystalline Ir phases (Ir(111), Ir(200)) are observed and known to enhance the OER mechanism. Additionally, atom probe tomography confirms that the Si support particles contained 0.03-0.5 at.% of boron throughout the entire particle, while electrical permittivity and through-plane measurements reveal a positive impact of B-doped Si on the electrical conductivity of the nanocatalysts and of the ultralow-loaded catalyst coated Ti substrates (0.12 mgIr cm−2), respectively. Rotating disk electrode results show pronounced oxidation peaks for decorated Ir nanoparticles. The Si:B-Ir 4 nm catalyst exhibits the highest turnover frequency (2.62 s−1) and a competitive electrochemical surface area (25 m2 gIr−1) compared to Si:B-Ir 7 nm (0.96 s−1; 37.5 m2 gIr−1) and Ir black (0.24 s−1; 5 m2 gIr−1). The overall analysis of the parameters highlights a performant catalytic efficiency, through balancing activity and reaction kinetics effectively.
Abstract
Considering the significant health risks posed by hard chrome plating during its application, thermally sprayed Cr3C2-NiCr cermet coatings represent a suitable alternative. Incorporating hexagonal boron nitride (hBN) as a dry lubricant into the feedstock powder can further enhance wear resistance and thermal conductivity, crucial for preventing premature failure caused by inadequate lubrication. In this study, the mass fraction of hBN was varied between 0 and 15 wt.% to assess its influence on the tribological performance of the coatings using pin-on-disk tests. The coating’s hardness was measured via the Vickers method, and its cracking tendency at the coating/substrate interface was evaluated. Scanning electron microscopy (SEM) and X-ray diffraction (XRD) were employed to analyze the microstructure and phase composition, while thermal diffusivity was determined using the laser flash method. The findings revealed that the inclusion of hBN, at concentrations of up to 10 wt.%, leads to an improvement in thermal diffusivity and a reduction in the coefficient of friction. However, exceeding this threshold leads to a decrease in hardness and increased crack formation tendency, highlighting the trade-off between frictional and mechanical properties.
Abstract
The feed-in of electricity from renewable energies, such as wind or solar power, fluctuates based on weather conditions. This unpredictability due to volatile feed-in can lead to sudden changes in energy generation so that solutions ensuring grid stability need to be implemented. The cooling sector offers the opportunity to create flexibilities for such balancing, with this study focusing on the thermal flexibilities that can be provided by cooling applications. Various cooling-demand profiles are investigated with respect to their load profile and their impact on flexibility is analysed. In addition to the cooling demand, scenarios of different storage dimensions are considered. As a result, it shows that an increasing base-load level and increasing operating-load duration have a negative effect on flexibility, while an increasing full-load duration is beneficial for flexibility. Storage size also has a strong impact as higher storage capacity and storage performance indicate higher flexibility, whereas above a certain size they only provide little added value.
Abstract
This research focuses on the significant role of Corporate Social Responsibility (CSR) in shaping employees’ behavior towards the reduction of food waste in the hospitality industry that has been under scrutiny for its environmental impact. The study aimed at understanding how CSR, coupled with employees’ moral attitudes, admiration for their organization, and climate change awareness influences sustainable practices by realizing the complex interplay between company initiatives and personal psychology. The participants were staff members who worked in several hotels in China where there were active CSR programs. Using established scales, we collected 422 valid responses over three waves to strengthen our data collection process. Empirically, it was found that CSR directly influenced food-waste-reduction behavior. Additionally, it was discovered that this relationship was mediated by moral attitudes and employee admiration as well as moderated by awareness of climate change. The findings have substantial theoretical implications regarding the interaction between emotional and cognitive factors within the CSR framework to influence behavior among employees. This paves the way for creating well-rounded strategies that appeal to staff and encourage sustainability in the hotel business. While focused on China’s hospitality industry, this research creates room for future studies in other places around the world using various methods. The conclusions drawn underline the critical role of CSR in promoting environmental sustainability in the hospitality industry, providing a pathway for organizations to engage employees in meaningful and impactful sustainability initiatives.
Abstract
Seed treatment is a powerful technique for adding beneficial ingredients to plants during the seed preparation process. Biopolymers as drying agents and delivery systems in seed treatments were investigated for their biocompatibility with blastospores of the nematophagous fungus Pochonia chlamydosporia. To produce a novel seed treatment for the cover crop Phacelia tanacetifolia, xanthan gum TG and gellan gum were the most promising biopolymers in combination with potato starch and bentonite. The seed treatment process as well as the drying process were specially designed to be scalable, which make it suitable for applying the developed seed treatment in agriculture. Application of gellan gum in seed treatments led to 6.3% ± 1.6% of vital blastospores per seed compared to 3.8% ± 0.3% of vital blastospores when applying xanthan gum. Storage tests for seed treatments with 0.5% gellan gum indicated a higher stability at 4 °C compared to storage at 21 °C. After 42 days of storage at 4 °C, 54.1% ± 15.1% of the applied blastospores were viable compared to 0.3% ± 0.8% at 21 °C. This novel seed treatment application with P. chlamydosporia blastospores includes the seed treatment procedure, drying process, and storage tests and can easily be upscaled for application in agriculture.
Abstract:
Virtual Machine Introspection (VMI) is a powerful technology used to detect and analyze malicious software inside Virtual Machines (VMs) from outside. Asynchronously accessing the VM ’s memory can be insufficient for efficiently monitoring what is happening inside of a VM. Active VMI introduces breakpoints to intercept VM execution at relevant points. Especially for frequently visited breakpoints, and even more so for production systems, it is crucial to keep their performance overhead as low as possible. In this paper, we provide a systematization of existing VMI breakpoint implementation variants, propose workloads to quantify the different performance penalties of breakpoints, and implement them in the benchmarking application bpbench. We used this benchmark to measure that, on an Intel Core i5 7300U, SmartVMI’s breakpoints take around 81 μs to handle, and keeping the breakpoint invisible costs an additional 21 μs per read access. The availability of bpbench facilitates the comparison of disparate breakpoint mechanisms and their performance optimization with immediate feedback.
Fake News, PR-Skandal, Mainstream-Presse – diese Schlagworte kennzeichnen vor allem eines: den Vertrauensverlust der Öffentlichkeit in die Berichterstattung von Medien und Unternehmen. In einem nahezu unentwirrbaren Kommunikationsdschungel aus Medien, Internetportalen und sozialen Plattformen wird es nicht nur für Laien immer schwieriger, verlässliche und unseriöse Kommunikation voneinander zu unterscheiden.
So steigt die Anzahl derer, die professioneller Kommunikation mit Misstrauen begegnen und in ihr vor allem Einflussnahme oder gar Manipulation sehen. Aus den Augen gerät dabei oft, dass Deutschland über eines der freiheitlichsten und vielfältigsten Mediensysteme der Welt verfügt.
Das Buch diskutiert die Grenzen zwischen Manipulation und Kommunikation on- wie offline und zeigt, wie man schlampige und seriöse Meinungsmacher unterscheidet, welche Rolle Fakten spielen und wie Medien und Unternehmen dazu beitragen können, dass Glaubwürdigkeit in der medialen Debatte wieder einen Stellenwert bekommt.
Focusing on the implementation of the Smart Specialisation Strategy (S3), the chapter examines the development of cluster policies in the Ruhr Metropolis as a post-industrial region. The chapter traces the historical development of the Ruhr Area from its industrial peak in the 20th century to its slow transformation into a post-industrial landscape characterised by high urban density, new knowledge-based clusters and a persistent structural lack of effective regional cooperation. The analysis shows the conceptual shift from traditional cluster policies to the S3 approach, introduced by the European Union in 2014. The Smart Specialisation Strategy calls for a focus on comparative regional strengths and the involvement of a wide range of stakeholders in the identification of clusters for sustainable economic growth. The chapter also discusses the challenges and milestones in developing a coherent and effective Smart Specialisation Strategy, emphasising the need for inter-municipal cooperation and a new multi-level approach to regional governance. Using the case of the Ruhr Metropolis, the chapter highlights the opportunities and constraints of S3 policies to revitalise post-industrial regions by promoting innovation and adapting to global economic trends in cluster development, thus showing a way forward for other regions with similar structural challenges.
Abstract
Filter lists are used by various users, tools, and researchers to identify tracking technologies on the Web. These lists are created and maintained by dedicated communities. Aside from popular blocking lists (e.g., EasyList), the communities create region-specific blocklists that account for trackers and ads that are only common in these regions. The lists aim to keep the size of a general blocklist minimal while protecting users against region-specific trackers.
In this paper, we perform a large-scale Web measurement study
to understand how different region-specific filter lists (e.g., a blocklist specifically designed for French users) protect users when visiting websites. We define three privacy scenarios to understand when and how users benefit from these regional lists and what effect they have in practice. The results show that although the lists differ significantly, the number of rules they contain is unrelated to the number of blocked requests. We find that the lists’ overall efficacy varies notably. Filter lists also do not meet the expectation that they increase user protection in the regions for which they were designed. Finally, we show that the majority of the rules on the lists were not used in our experiment and that only a fraction of the rules would provide comparable protection for users.
This study contributes to the literature by analysing the joint association of managerial overconfidence, certainty, narcissism, and the Big Five personality traits with debt ratios in the institutional setting of the German two-tier system. Moreover, it provides insights into how corporate governance quality moderates the effects of personality. The analysis relied on the chief executive officers’ (CEOs’) speeches at annual general meetings (AGMs) that were voluntarily disseminated, a novel data source. Managers’ personality traits were measured using software-aided content analysis, and their impact on the debt ratio was analysed using panel regressions. Consistent with previous studies, the debt ratios of German issuers are significantly and positively related to the proxies of managerial certainty and narcissism. However, their model inclusion contributes only marginally to explanatory power. Conversely, the coefficients of the proxies for the Big Five personality traits remained statistically non-significant. Moreover, a significantly negative relationship between debt ratios and the interaction term between a proxy for corporate governance quality and managerial certainty is observed that corresponds to the risk-mitigating impact of corporate governance.
Motorisches Lernen
(2024)
In diesem Kapitel geben wir einen Überblick über unterschiedliche Forschungstraditionen im Bereich des motorischen Lernens, indem wir motorisches Lernen auf unterschiedlichen Zeitskalen betrachten: Sensomotorische Adaptation beschreibt motorisches Lernen auf der kürzesten Zeitskala. Fertigkeitserwerb bezieht sich auf den länger andauernden Erwerb eines neuen Bewegungsablaufs. Fitness oder evolutionäres motorisches Lernen thematisiert angeborene Verhaltensweisen, die sich im Laufe der Stammesgeschichte als nützlich erwiesen haben, und wird der Vollständigkeit halber am Ende des Kapitels kurz umrissen.
Senior police officers' tactical gaze control and visual attention improve with an individual video-based police firearms training. To validate the efficacy of said intervention training, a previous experiment was systematically replicated with a sample of N = 52 second-year police cadets. Participants were randomly assigned to the intervention training that focused on situational awareness, tactical gaze control, and visual attention, or an active control training that addressed traditional marksmanship skills. In a pre- and post-test, they had to engage in dynamic shoot/don't shoot video scenarios in an indoor firing range. Overall, the previous findings were replicated: Baseline levels of performance were elevated, yet the intervention group significantly improved their response time and time until the first hit. False positive decision-making cannot be reported at all; false negatives were marginal in the pre-test and eliminated after training. Further, the outcomes of the previous sample of senior officers and the present sample of cadets are compared and lead to the conclusion that the presented approach is a valuable extension of current training standards for both senior police officers and police cadets.
Action-imagery-practice refers to the repetitive use of action imagery to improve subsequent performance leading to partially different representation types than action-execution-practice (AEP). This study explored the representation types in kinesthetic action-imagery-practice (K-AIP) and visual action-imagery-practice (V-AIP) in a serial reaction time task using the crossed hand transfer paradigm. 169 participants (age M ± SD = 25.2 ± 3.9) were randomly assigned to AEP, K-AIP, V-AIP, or control-practice (CP), practicing with uncrossed hands on ten consecutive days. Tests involved the same sequence, a mirror sequence, a shifted sequence, and a shifted mirror sequence, each with uncrossed and crossed hands. With crossed hands, sequence-specific transfer effects indicated only little evidence for effector-independent representations in late stages of learning in AEP and V-AIP. Performance in the same sequence with uncrossed hands indicated the acquisition of stimulus-response location associated effector-dependent sequence-specific representations in AEP, K-AIP and V-AIP, but not in CP. These visual-spatial effector-dependent representations were stronger after AEP than after AIP. Overall, no important differences between both AIP groups were observed, and both groups reported similar focus on kinesthesis and vision, suggesting that irrespective of the instructions, rather than focusing on one single modality, AIP always involves a combination of both modalities - vision and kinesthesis - that promote motor learning.
Abstract
Earthquakes, fire, and floods often cause structural collapses of buildings. However, the inspection of such damaged buildings poses a high risk for emergency forces or is even impossible. We present three recently selected missions of the Robotics Task Force of the German Rescue Robotics Center (DRZ), where both ground and aerial robots were used to explore destroyed buildings. We describe and reflect the missions as well as the lessons learned that have resulted from them. To make robots from research laboratories fit for real operations, realistic outdoor and indoor test environments were set up at the DRZ and used for tests in regular exercises by researchers and emergency forces. On the basis of this experience, the robots and their control software were significantly improved. Furthermore, expert teams of
researchers and first responders were formed, each with realistic assessments of the operational and practical suitability of robotic systems.