arXiv subjects

Nuno Santos

Publications and source records attributed to Nuno Santos.

At least 19 recordsLinked to original sources

arXiv2026

Policy-Compliant Cloud Storage Systems

Privacy regulations such as the General Data Protection Regulation (GDPR) impose strict requirements on how personal data is stored, processed, and audited. While key-value stores (KVS) are widely used in latency-sensitive applications, their simple data model and untrusted cloud deployment environments make GDPR compliance particularly challenging. Existing approaches require invasive code modifications, impose high performance overheads, or overlook the integrity of compliance mechanisms themselves. This paper presents GDPRuler, a trusted middleware system that enables verifiable GDPR compliance for KVS on untrusted clouds without modifying their codebase. GDPRuler deploys a trusted GDPR monitor inside a Confidential Virtual Machine (CVM), which enforces GDPR policies, manages compliance metadata, and maintains tamper-evident audit logs. A declarative policy language translates core GDPR obligations into enforceable runtime rules. To ensure efficiency, GDPRuler encodes metadata compactly within KV records, builds dedicated metadata indexes for GDPR-specific queries, and logs only compliance-relevant events in a space-efficient format. We implement GDPRuler as a transparent proxy for unmodified Redis and RocksDB deployments. Evaluation with YCSB and GDPR-inspired workloads shows that GDPRuler enforces core compliance guarantees with low overheads: GDPRuler achieves ~61% of native KVS throughput with the CVM environment contributing 28%-32% of it, metadata storage overhead remains below 20%, and GDPR queries benefit from 13-182x speedup through metadata indexing. By embedding verifiable policy enforcement into a trusted middleware layer, GDPRuler offers a practical path toward GDPR-compliant KVS on untrusted cloud infrastructures.

cs.CR↗

arXiv2026

A seeing measurement device for the PoET solar telescope

Atmospheric seeing arises from stochastic fluctuations in the refractive index of the Earth's atmosphere, producing random variations in the apparent direction of incoming light from astronomical sources. Scintillation refers to the associated intensity fluctuations induced by these refractive index inhomogeneities. A quantitative relationship between seeing and scintillation was established in 1993, enabling daytime seeing measurements by exploiting the Sun as an extended, bright source and using non-telescopic instrumentation. PoET, the Paranal solar ESPRESSO Telescope, will feed the Echelle SPectrograph for Rocky Exoplanets and Stable Spectroscopic Observations, ESPRESSO, at the European Southern Observatory (ESO) Very Large Telescope (VLT). By using the Sun as a proxy for solar-type stars, PoET will facilitate detailed investigations of the physical processes that drive stellar noise in ultra-high-precision radial-velocity measurements for exoplanet studies. The instrument is capable of targeting any region on the solar disk and acquiring spatially resolved spectra over areas ranging from 1 to 55 arcseconds. Accurate characterization of daytime atmospheric seeing is therefore essential for selecting the optimal observing aperture and ensuring the scientific performance of PoET. To support this requirement, we have developed and implemented a dedicated solar seeing monitor for daytime deployment at Paranal, Chile, where PoET will operate. In this work, we describe the instrument design and present the results from commissioning and initial on-sky validation.

astro-ph.IM↗

arXiv2026

Reinforcing Prestige: Journal Citation Biases in Astronomy

Citations are essential for recognizing scientific contributions, yet citation behavior is shaped by more than just relevance or quality. We analyzed approximately 255,000 refereed astronomy articles published between 2000 and 2025 to investigate how journals are cited relative to their publication volume and authorship context. We find that multidisciplinary journals receive disproportionately more citations, up to nine times higher than their share of articles, while field-specific journals are cited less frequently in proportion to their output. Citations to a journal also increase significantly when authors publish within it, a bias particularly pronounced in multidisciplinary journals. Although this effect has declined over the past decade, it remains notable. These patterns likely arise from a combination of topical clustering, institutional/individual publishing habits, and strategic referencing to align with editorial expectations. Our findings reveal persistent structural biases in scientific visibility and suggest that citation-based metrics should be used with greater awareness of the publishing context they reflect. We encourage authors, reviewers, and editors to remain mindful of these dynamics and strive for fairness and inclusivity when selecting references.

cs.DL↗

arXiv2026

Evidence of political bias in search engines and language models before major elections

Search engines (SEs) and large language models (LLMs) are central to political information access, yet their algorithmic decisions and potential underlying biases remain underexplored. We developed a standardized, privacy-preserving, bot-and-proxy methodology to audit four SEs and two LLMs before the 2024 European Parliament and US presidential elections. We collected answers to approximately 4,360 queries related to elections in five EU countries and 15 US counties, identified political entities and topics in those answers, and mapped them to ideological positions (EU) or issue associations (US). In Europe, SE results disproportionately mentioned far-right entities beyond levels expected from polls, past elections, or media salience. In the US, Google strongly favored topics more important to Republican voters, while other search engines favored issues more relevant to Democrats. LLMs responses were more balanced, although there is evidence of overrepresentation of far-right (and Green) entities. These results show evidence of bias and open important discussions on how even small skews in widely used platforms may influence democratic processes, calling for systematic audits of their outputs.

cs.CY↗

arXiv2025

Trusted AI Agents in the Cloud

AI agents powered by large language models are increasingly deployed as cloud services that autonomously access sensitive data, invoke external tools, and interact with other agents. However, these agents run within a complex multi-party ecosystem, where untrusted components can lead to data leakage, tampering, or unintended behavior. Existing Confidential Virtual Machines (CVMs) provide only per binary protection and offer no guarantees for cross-principal trust, accelerator-level isolation, or supervised agent behavior. We present Omega, a system that enables trusted AI agents by enforcing end-to-end isolation, establishing verifiable trust across all contributing principals, and supervising every external interaction with accountable provenance. Omega builds on Confidential VMs and Confidential GPUs to create a Trusted Agent Platform that hosts many agents within a single CVM using nested isolation. It also provides efficient multi-agent orchestration with cross-principal trust establishment via differential attestation, and a policy specification and enforcement framework that governs data access, tool usage, and inter-agent communication for data protection and regulatory compliance. Implemented on AMD SEV-SNP and NVIDIA H100, Omega fully secures agent state across CVM-GPU, and achieves high performance while enabling high-density, policy-compliant multi-agent deployments at cloud scale.

cs.CR↗

arXiv2025

Chromaticity of stellar activity in radial velocities : Anti-correlated families of lines on the M dwarf EV Lac with SPIRou and SOPHIE

Context. In the search for exoplanets using radial velocities (RV), stellar activity has become one of the main limiting factors for detectability. Fortunately, activity-induced RV signals are wavelength-dependent or chromatic, unlike planetary signals. This study exploits the broad spectral coverage provided by the combined use of SOPHIE and SPIRou velocimeters to investigate the chromatic nature of the activity signal of the highly active M dwarf EV Lac. Aims. We aim to understand the origin of the strong wavelength dependence (chromaticity) observed in the RV signal of EV Lac by selecting spectral lines based on physical properties. In particular, we explore the impact of starspots by defining the contrast effect at the level of individual lines. The Zeeman effect is also considered in this study. Methods. SPIRou and SOPHIE spectra were reduced using the line-by-line (LBL) method. We performed custom RV calculations, using groups of spectral lines selected for their sensitivity to either the spot-to-photosphere contrast or the Zeeman effect. The sensi- tivity of each line to the spot is defined using a two-temperature model based on PHOENIX spectra, while Landé factors were used to quantify Zeeman sensitivity. Results. We find that the spectral lines are distributed in two distinct families of contrasts, producing anti-correlated RV signals. This leads to a partial cancellation of the total RV signal, especially at longer wavelengths and provides a natural explanation for the strong chromaticity observed in EV Lac. This sign-reversal effect is demonstrated here, for the first time, on empirical data. Building on this discovery, we propose a new approach to constraining spot temperatures and to mitigating stellar activity. This will open up promising avenues for improving activity corrections and enhancing the detection of exoplanets around active M dwarfs.

astro-ph.SR↗

arXiv2025

On the Feasibility of Fully AI-automated Vishing Attacks

A vishing attack is a form of social engineering where attackers use phone calls to deceive individuals into disclosing sensitive information, such as personal data, financial information, or security credentials. Attackers exploit the perceived urgency and authenticity of voice communication to manipulate victims, often posing as legitimate entities like banks or tech support. Vishing is a particularly serious threat as it bypasses security controls designed to protect information. In this work, we study the potential for vishing attacks to escalate with the advent of AI. In theory, AI-powered software bots may have the ability to automate these attacks by initiating conversations with potential victims via phone calls and deceiving them into disclosing sensitive information. To validate this thesis, we introduce ViKing, an AI-powered vishing system developed using publicly available AI technology. It relies on a Large Language Model (LLM) as its core cognitive processor to steer conversations with victims, complemented by a pipeline of speech-to-text and text-to-speech modules that facilitate audio-text conversion in phone calls. Through a controlled social experiment involving 240 participants, we discovered that ViKing has successfully persuaded many participants to reveal sensitive information, even those who had been explicitly warned about the risk of vishing campaigns. Interactions with ViKing's bots were generally considered realistic. From these findings, we conclude that tools like ViKing may already be accessible to potential malicious actors, while also serving as an invaluable resource for cyber awareness programs.

cs.CR↗

arXiv2025

Vertical structure of an exoplanet's atmospheric jet stream

Ultra-hot Jupiters, an extreme class of planets not found in our solar system, provide a unique window into atmospheric processes. The extreme temperature contrasts between their day- and night-sides pose a fundamental climate puzzle: how is energy distributed? To address this, we must observe the 3D structure of these atmospheres, particularly their vertical circulation patterns, which can serve as a testbed for advanced Global Circulation Models (GCM) [e.g. 1]. Here, we show a dramatic shift in atmospheric circulation in an ultra-hot Jupiter: a unilateral flow from the hot star-facing side to the cooler space-facing side of the planet sits below an equatorial super-rotational jet stream. By resolving the vertical structure of atmospheric dynamics, we move beyond integrated global snapshots of the atmosphere, enabling more accurate identification of flow patterns and allowing for a more nuanced comparison to models. Global circulation models based on first principles struggle to replicate the observed circulation pattern [3], underscoring a critical gap between theoretical understanding of atmospheric flows and observational evidence. This work serves as a testbed to develop more comprehensive models applicable beyond our Solar System as we prepare for the next generation of giant telescopes.

astro-ph.EP↗

arXiv2025

The NCORES Program: Precise planetary masses, null results, and insight into the planet mass distribution near the radius gap

NCORES was a large observing program on the ESO HARPS spectrograph, dedicated to measuring the masses of Neptune-like and smaller transiting planets discovered by the TESS satellite using the radial velocity technique. This paper presents an overview of the programme, its scientific goals and published results, covering 35 planets in 18 planetary systems. We present spectrally derived stellar characterisation and mass constraints for five additional TOIs where radial velocity observations found only marginally significant signals (TOI-510.01, $M_p=1.08^{+0.58}_{-0.55}M_\oplus$), or found no signal (TOIs 271.01, 641.01, 697.01 and 745.01). A newly detected non-transiting radial velocity candidate is presented orbiting TOI-510 on a 10.0d orbit, with a minimum mass of $4.82^{+1.29}_{-1.26}M_\oplus$, although uncertainties on the system architecture and true orbital period remain. Combining the NCORES sample with archival known planets we investigate the distribution of planet masses and compositions around and below the radius gap, finding that the population of planets below the gap is consistent with a rocky composition and ranges up to a sharp cut-off at $10M_\oplus$. We compare the observed distribution to models of pebble- and planetesimal-driven formation and evolution, finding good broad agreement with both models while highlighting interesting areas of potential discrepancy. Increased numbers of precisely measured planet masses in this parameter space are required to distinguish between pebble and planetesimal accretion.

astro-ph.EP↗

arXiv2025

Digital Gatekeeping: An Audit of Search Engine Results shows tailoring of queries on the Israel-Palestine Conflict

Search engines, often viewed as reliable gateways to information, tailor search results using customization algorithms based on user preferences, location, and more. While this can be useful for routine queries, it raises concerns when the topics are sensitive or contentious, possibly limiting exposure to diverse viewpoints and increasing polarization. To examine the extent of this tailoring, we focused on the Israel-Palestine conflict and developed a privacy-protecting tool to audit the behavior of three search engines: DuckDuckGo, Google and Yahoo. Our study focused on two main questions: (1) How do search results for the same query about the conflict vary among different users? and (2) Are these results influenced by the user's location and browsing history? Our findings revealed significant customization based on location and browsing preferences, unlike previous studies that found only mild personalization for general topics. Moreover, queries related to the conflict were more customized than unrelated queries, and the results were not neutral concerning the conflict's portrayal.

cs.CY↗

arXiv2025

From Prompt Injections to SQL Injection Attacks: How Protected is Your LLM-Integrated Web Application?

Large Language Models (LLMs) have found widespread applications in various domains, including web applications, where they facilitate human interaction via chatbots with natural language interfaces. Internally, aided by an LLM-integration middleware such as Langchain, user prompts are translated into SQL queries used by the LLM to provide meaningful responses to users. However, unsanitized user prompts can lead to SQL injection attacks, potentially compromising the security of the database. Despite the growing interest in prompt injection vulnerabilities targeting LLMs, the specific risks of generating SQL injection attacks through prompt injections have not been extensively studied. In this paper, we present a comprehensive examination of prompt-to-SQL (P$_2$SQL) injections targeting web applications based on the Langchain framework. Using Langchain as our case study, we characterize P$_2$SQL injections, exploring their variants and impact on application security through multiple concrete examples. Furthermore, we evaluate 7 state-of-the-art LLMs, demonstrating the pervasiveness of P$_2$SQL attacks across language models. Our findings indicate that LLM-integrated applications based on Langchain are highly susceptible to P$_2$SQL injection attacks, warranting the adoption of robust defenses. To counter these attacks, we propose four effective defense techniques that can be integrated as extensions to the Langchain framework. We validate the defenses through an experimental evaluation with a real-world use case application.

cs.CR↗

arXiv2024

The PLATO Mission

PLATO (PLAnetary Transits and Oscillations of stars) is ESA's M3 mission designed to detect and characterise extrasolar planets and perform asteroseismic monitoring of a large number of stars. PLATO will detect small planets (down to <2 R_(Earth)) around bright stars (<11 mag), including terrestrial planets in the habitable zone of solar-like stars. With the complement of radial velocity observations from the ground, planets will be characterised for their radius, mass, and age with high accuracy (5 %, 10 %, 10 % for an Earth-Sun combination respectively). PLATO will provide us with a large-scale catalogue of well-characterised small planets up to intermediate orbital periods, relevant for a meaningful comparison to planet formation theories and to better understand planet evolution. It will make possible comparative exoplanetology to place our Solar System planets in a broader context. In parallel, PLATO will study (host) stars using asteroseismology, allowing us to determine the stellar properties with high accuracy, substantially enhancing our knowledge of stellar structure and evolution. The payload instrument consists of 26 cameras with 12cm aperture each. For at least four years, the mission will perform high-precision photometric measurements. Here we review the science objectives, present PLATO's target samples and fields, provide an overview of expected core science performance as well as a description of the instrument and the mission profile at the beginning of the serial production of the flight cameras. PLATO is scheduled for a launch date end 2026. This overview therefore provides a summary of the mission to the community in preparation of the upcoming operational phases.

astro-ph.IM↗

arXiv2024

Effective dose equivalent estimation for humans on Mars

Exposure to cosmic radiation is a major concern in space exploration. On the Martian surface, a complex radiation field is present, formed by a constant influx of galactic cosmic radiation and the secondary particles produced by their interaction with the planet's atmosphere and regolith. In this work, a Martian environment model was developed using MCNP6 following the guidelines of the 1st Mars Space Radiation Modeling Workshop. The accuracy of the model was tested by comparing particle spectra and dose rate results with other model results and measurements from the Radiation Assessment Detector (RAD) onboard the Curiosity rover, taken between November 15, 2015, and January 15, 2016. The ICRP's voxel-type computational phantoms were then implemented into the code. Organ dose and effective dose equivalent were assessed for the same time period. The viability of a mission on the surface of Mars for extended periods of time under the assumed conditions was here investigated.

physics.space-ph↗

arXiv2024

NIRPS first light and early science: breaking the 1 m/s RV precision barrier at infrared wavelengths

The Near-InfraRed Planet Searcher or NIRPS is a precision radial velocity spectrograph developed through collaborative efforts among laboratories in Switzerland, Canada, Brazil, France, Portugal and Spain. NIRPS extends to the 0.98-1.8 $μ$m domain of the pioneering HARPS instrument at the La Silla 3.6-m telescope in Chile and it has achieved unparalleled precision, measuring stellar radial velocities in the infrared with accuracy better than 1 m/s. NIRPS can be used either stand-alone or simultaneously with HARPS. Commissioned in late 2022 and early 2023, NIRPS embarked on a 5-year Guaranteed Time Observation (GTO) program in April 2023, spanning 720 observing nights. This program focuses on planetary systems around M dwarfs, encompassing both the immediate solar vicinity and transit follow-ups, alongside transit and emission spectroscopy observations. We highlight NIRPS's current performances and the insights gained during its deployment at the telescope. The lessons learned and successes achieved contribute to the ongoing advancement of precision radial velocity measurements and high spectral fidelity, further solidifying NIRPS' role in the forefront of the field of exoplanets.

astro-ph.IM↗

arXiv2024

How habitable are M-dwarf Exoplanets? Modeling surface conditions and exploring the role of melanins in the survival of Aspergillus niger spores under exoplanet-like radiation

Exoplanet habitability remains a challenging field due to the large distances separating Earth from other stars. Using insights from biology and astrophysics, we studied the habitability of M-dwarf exoplanets by modeling their surface temperature and flare UV and X-ray doses using the Martian atmosphere as a shielding model. Analyzing the Proxima Centauri and TRAPPIST-1 systems, our models suggest that Proxima b and TRAPPIST-1 e are likeliest to have temperatures compatible with surface liquid water, as well as tolerable radiation environments. Results of the modeling were used as a basis for microbiology experiments to assess spore survival of the melanin-rich fungus Aspergillus niger to exoplanet-like radiation (UV-C and X-rays). Results showed that A. niger spores can endure superflare events on M-dwarf planets when shielded by a Mars-like atmosphere or by a thin layer of soil or water. Melanin-deficient spores suspended in a melanin-rich solution showed higher survival rates and germination efficiency when compared to melanin-free solutions. Overall, the models developed in this work establish a framework for microbiological research in habitability studies. Finally, we showed that A. niger spores can survive harsh radiation conditions of simulated exoplanets, also emphasizing the importance of multifunctional molecules like melanins in radiation shielding beyond Earth.

astro-ph.EP↗

arXiv2024

ESPRESSO on VLT: An Instrument for Exoplanet Research

ESPRESSO (Echelle SPectrograph for Rocky Exoplanets and Stable Spectroscopic Observations) is a VLT ultra-stable high resolution spectrograph installed at ESO's Paranal Observatory in Chile at the end of 2017 and that started regular operations in October 2018. The spectrograph is located at the VLT Combined-Coudé Laboratory and is able to operate with one or (simultaneously) four 8.2m Unit Telescopes (UTs) through four optical Coudé trains. Combining efficiency and extreme spectroscopic precision, ESPRESSO has demonstrated to gain about two magnitudes with respect to its predecessor HARPS. ESPRESSO has improved the instrumental radial-velocity precision getting close to the aimed 10 cm/s level, thus opening the possibility to explore new frontiers in the search for Earth-mass exoplanets in the habitable zone of quiet, nearby G to M-dwarfs. ESPRESSO will be certainly an important development step towards high-precision ultra-stable spectrographs on the next generation of giant telescopes such as the ELT.

astro-ph.IM↗

arXiv2023

Stability and detectability of exomoons orbiting HIP 41378 f, a temperate Jovian planet with an anomalously low apparent density

Moons orbiting exoplanets ("exomoons") may hold clues about planet formation, migration, and habitability. In this work, we investigate the plausibility of exomoons orbiting the temperate ($T_\text{eq}=294$ K) giant ($R = 9.2$ R$_\oplus$) planet HIP 41378 f, which has been shown to have a low apparent bulk density of $0.09\,\text{g}\,\text{cm}^{-3}$ and a flat near-infrared transmission spectrum, hinting that it may possess circumplanetary rings. Given this planet's long orbital period ($P\approx1.5$ yr), it has been suggested that it may also host a large exomoon. Here, we analyze the orbital stability of a hypothetical exomoon with a satellite-to-planet mass ratio of 0.0123 orbiting HIP 41378 f. Combining a new software package, astroQTpy, with REBOUND and EqTide, we conduct a series of N-body and tidal migration simulations, demonstrating that satellites up to this size are largely stable against dynamical escape and collisions. We simulate the expected transit signal from this hypothetical exomoon and show that current transit observations likely cannot constrain the presence of exomoons orbiting HIP 41378 f, though future observations may be capable of detecting exomoons in other systems. Finally, we model the combined transmission spectrum of HIP 41378 f and a hypothetical moon with a low-metallicity atmosphere, and show that the total effective spectrum would be contaminated at the $\sim$10 ppm level. Our work not only demonstrates the feasibility of exomoons orbiting HIP 41378 f, but also shows that large exomoons may be a source of uncertainty in future high-precision measurements of exoplanet systems.

astro-ph.EP↗

arXiv2023

Study of JavaScript Static Analysis Tools for Vulnerability Detection in Node.js Packages

With the emergence of the Node.js ecosystem, JavaScript has become a widely-used programming language for implementing server-side web applications. In this paper, we present the first empirical study of static code analysis tools for detecting vulnerabilities in Node.js code. To conduct a comprehensive tool evaluation, we created the largest known curated dataset of Node.js code vulnerabilities. We characterized and annotated a set of 957 vulnerabilities by analyzing information contained in npm advisory reports. We tested nine different tools and found that many important vulnerabilities appearing in the OWASP Top-10 are not detected by any tool. The three best performing tools combined only detect up to 57.6% of all vulnerabilities in the dataset, but at a very low precision of 0.11%. Our curated dataset offers a new benchmark to help characterize existing Node.js code vulnerabilities and foster the development of better vulnerability detection tools for Node.js code.

cs.CR↗