a single log line in proton mail bridge wrote sha256(vaultkey) to a world-readable file, and that digest is the AES key for vault.enc
a short note on ASLR, KASLR, and how x86 prefetch timing can leak valid kernel address ranges through a side channel
CVE-2026-93676 in xdg-dbus-proxy let a sandboxed app monitor broadcast signals it was never supposed to see
