I see your wonky authentication bypass and raise you a local privilege escalation that is 100% reliable on every distro that's shipped a 3.3-3.8 kernel (last 18 months or so)
http://thread.gmane.org/gmane.linux.network/260061
bad times :/
http://thread.gmane.org/gmane.linux.network/260061
bad times :/
On the other hand my system here still crashes if I type file:/// with one big letter.