{"as_of":"2026-08-17T01:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2032019bbd45dc3d2edc38013fcd927988e59f50a52f1ea4b65df4167a3268e0","coverage":[{"denominator":73,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":73,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T14:57:30.708841Z","state":"measured"},{"denominator":73,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":73,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.02204/citation-record","integrity":"/paper/1908.02204/integrity","json":"/paper/1908.02204/citation-record.json","paper":"/paper/1908.02204"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.476091Z","title":"[Online]","venue":null,"work_id":"096de17d-f719-48ab-860c-f3cac2aa421b","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.263412Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:7fdfb8f25deab5075c0d5eeecf6d15f594fa30693442cf64366f92b95cb7b8a8","observation_id":"c882f027-328f-4a5d-bdcf-6b95e5824490","resolution":{"observed_at":"2026-08-14T14:57:32.482931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.444763Z","title":"[Online]","venue":null,"work_id":"cbf2bc0f-9943-44d0-8856-75ca02f4edd3","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.270516Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:142bac84b07007cdb1c0f0753ccce60524362c31135a4c6952c6bcdff326e33f","observation_id":"aea44bbd-9742-46f6-98d1-7eb236043104","resolution":{"observed_at":"2026-08-14T14:57:32.453715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.419491Z","title":"[Online]","venue":null,"work_id":"96434580-3364-44fb-add5-a60e46148529","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.278208Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:4452ff3e13d0ec834bbe852e0eea7b594c00bd7d0b895c62b23cfef651b46b6d","observation_id":"c876a95e-e489-4516-9672-5d1208edf145","resolution":{"observed_at":"2026-08-14T14:57:32.428096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.380591Z","title":"[Online]","venue":null,"work_id":"661df547-acee-49d2-a1aa-3ae9bcd7b68b","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.284665Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:29202fbff6bdcbfaad399bf207fa50bc909f080127f50f8ad3eb0f25cb7074eb","observation_id":"420a0dc1-cd28-49a8-a6bc-9b26f5782356","resolution":{"observed_at":"2026-08-14T14:57:32.389107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.353526Z","title":"[Online]","venue":null,"work_id":"531127c0-2c46-4fea-acdc-edb5e3351d9c","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.291163Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:3484eeca1b162ffa034ac1da978e07619a3d115fac2a7f977c5aa8f7b51ce452","observation_id":"acb303f7-a1aa-4c1f-b79f-62fb402f8585","resolution":{"observed_at":"2026-08-14T14:57:32.360835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.331423Z","title":"[Online]","venue":null,"work_id":"d9584eec-90d7-4dba-8dc4-a92be6b9a8e5","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.297273Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:110e66119cb85f6414e256302460865eb62885291dfca7fb44b939f1e4186ee3","observation_id":"fc324e5a-4001-493f-9121-d1d857c33a89","resolution":{"observed_at":"2026-08-14T14:57:32.337869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.307233Z","title":"[Online]","venue":null,"work_id":"c9b16003-db33-4cde-bf16-ea5afe57e5f6","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.303789Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:94a7e810b7f7d36b89946caeb96c7ef4f4c3d6cb3968a262c5308e28572c9d34","observation_id":"192374cb-d64a-4a70-8fbc-248ba94c5932","resolution":{"observed_at":"2026-08-14T14:57:32.314228Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.287713Z","title":"[Online]","venue":null,"work_id":"a1fd2b4b-c739-4ab1-a184-6dea756c6d09","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.310137Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:192a828808646b3c5b06579f18b754fb6c1c4bb0df8e803ad5a784b484761582","observation_id":"d925c16f-3e2b-4c4d-96fa-84194987c7bc","resolution":{"observed_at":"2026-08-14T14:57:32.293668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.266131Z","title":"[Online]","venue":null,"work_id":"f8722646-e7bc-4b7f-8e24-84c92c05084a","year":2014},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.316185Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:be9b22f340c395de060098661e2e1563ec0d69e903e5fbb69631c5d787df30c5","observation_id":"3964160c-bdf1-43e4-abf9-1e75245492af","resolution":{"observed_at":"2026-08-14T14:57:32.272711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.246001Z","title":"[Online]","venue":null,"work_id":"732120ab-dfed-4d47-bfc5-80d548a836c0","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.321496Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:166d5ea92d7213d2036385ffef24f65930e26c1f2d46877d71e251b802c60a02","observation_id":"0b587e9c-fa0d-43f1-9c64-8bd8e9c1fce9","resolution":{"observed_at":"2026-08-14T14:57:32.252495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.221555Z","title":"[Online]","venue":null,"work_id":"97c52ec6-a1d3-4c75-a778-b58f390113ba","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.327736Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:c3115794c24bdc57b650a85af9442dd3dc8c7ce49cfcd4b1c4fd172d5755e2fa","observation_id":"a9c9dc24-a254-40f3-88ee-9ec272200a0f","resolution":{"observed_at":"2026-08-14T14:57:32.229974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.200433Z","title":"[Online]","venue":null,"work_id":"a1c6ce13-1633-4795-bd39-646857b749c3","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.334701Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:4f93957d31df69cccc35dfda6408490f9d598a0a319b0b0de3d107afd1dfb727","observation_id":"2e9766b2-65ea-4314-82c8-e934b3cae3e8","resolution":{"observed_at":"2026-08-14T14:57:32.207511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.175056Z","title":"[Online]","venue":null,"work_id":"19e96b17-46fc-48b2-a7b7-9e5ec9805ec6","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.341624Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:d45662577eb2dd28397598592d79752118a66fd69eeb6b4c84ae1f68b4f1d701","observation_id":"6000e4da-b32a-4f8d-85af-01e5068401eb","resolution":{"observed_at":"2026-08-14T14:57:32.184568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.153099Z","title":"Web- based attacks to discover and control local iot devices,","venue":null,"work_id":"7698728f-8cca-43be-91dc-c0ab22af473c","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.348337Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:bd6917a15f7d7caa77865c8f9e6e1c8b30d68a72abd7f15da870681823122d37","observation_id":"e7c33f35-ecbf-415a-934f-f65e6edfb4f1","resolution":{"observed_at":"2026-08-14T14:57:32.160697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.132832Z","title":"The top 500 sites on the web","venue":null,"work_id":"d5fc3fbe-ce28-47e4-91a6-7b01e4611fcc","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.354376Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:2b6c5fece0ed88dfa368686c07d307888cc0545495a999d3a70372134b428cde","observation_id":"1973695d-b381-4933-a3ab-4491cdae6caa","resolution":{"observed_at":"2026-08-14T14:57:32.139558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.110273Z","title":"Formal analysis of saml 2.0 web browser single sign-on: Breaking the saml-based single sign-on for google apps,","venue":null,"work_id":"81173295-7252-4f9f-a33c-ccc3c43770d0","year":2008},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.360575Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:cd5a806589b931813362897d317aff4225286a4b3e0fc0a848ffdd9cb481fa6e","observation_id":"070daf8d-2da4-4f69-9adf-a919fbe3ec72","resolution":{"observed_at":"2026-08-14T14:57:32.117733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.090356Z","title":"Discovering concrete attacks on website authorization by formal analysis,","venue":null,"work_id":"e6d1e752-1120-4d88-bb04-693f10ee90d7","year":2012},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.366219Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:01b9b03f5c204d3c1d6688af62dcd8e0566e863e9cc78e5019aa278b7ea94d6c","observation_id":"c2c1b14d-86fd-475e-8c74-c2cbdbc273bc","resolution":{"observed_at":"2026-08-14T14:57:32.096639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.068146Z","title":"The web origin concept,","venue":null,"work_id":"21f65619-f50c-4f51-ba5c-e6a1ce9c4b3e","year":2010},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.372120Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:ab4a9a6f90584ff60d022c242979e3965c50f828cdc97ec11ce0c2912d9db77c","observation_id":"621d5453-7f82-4b5b-84f4-b94d3aca899a","resolution":{"observed_at":"2026-08-14T14:57:32.076361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.045487Z","title":"Http state management mechanism,","venue":null,"work_id":"f6608175-04ab-43b4-9641-af26aa55c70a","year":2011},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.377995Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:6569a0668a624f42c73267b5f75e06232c4f71ad51a33ff052e408e0c5724c50","observation_id":"39f97414-4fb3-41e9-9ddf-99027a959c3d","resolution":{"observed_at":"2026-08-14T14:57:32.053358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.027020Z","title":"Robust defenses for cross-site request forgery,","venue":null,"work_id":"d3936f5b-1ca1-449f-916c-da108f916395","year":2008},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.384832Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:037a1c2472a833abeecaa065a809fd17bb02164d7368a2460dd751585774f1f3","observation_id":"5230cec4-ef1f-4b07-997b-7cc948cc719e","resolution":{"observed_at":"2026-08-14T14:57:32.032998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:32.006579Z","title":"Exposing private information by timing web applications,","venue":null,"work_id":"b573f346-cc74-4824-8cd5-bf6f8962cd9c","year":2007},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.391290Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:ffd6f2b63c622d321e79686a1224885578ec4e8e52424908da514fd50ec1e267","observation_id":"0a2ade7b-39c3-4fc8-a3ca-f319b9812246","resolution":{"observed_at":"2026-08-14T14:57:32.013549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.975741Z","title":"Cardwell","venue":null,"work_id":"6688fdb7-3990-4638-ba6b-2ba8186e3e17","year":2011},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.397549Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:138a5abf4bf303f87c51771c2cbb5e60d5b15c88199aa194f4cc59ff7c4fca1f","observation_id":"b4b873e9-b00e-41ea-992c-517ead05985e","resolution":{"observed_at":"2026-08-14T14:57:31.984042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.956348Z","title":"Css visited pages disclosure,","venue":null,"work_id":"f794bcfd-d1c1-4be9-a37d-a72dc6890144","year":2002},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.404870Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:e4dbb70192beeaba211788f2e5135b23004294d4c29ea3ba663f4dc05d6493e6","observation_id":"ff1caf9a-2e14-4a29-b5df-7be7236bd3be","resolution":{"observed_at":"2026-08-14T14:57:31.962149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.937000Z","title":null,"venue":null,"work_id":"4a624e76-7036-453f-a231-b02de6658e64","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.411342Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:c8f23103bb225afca9e7dacba110fc50cfd1a437da255640e0be76723c216176","observation_id":"1d66250d-797f-4beb-ade3-9e70cd5334c4","resolution":{"observed_at":"2026-08-14T14:57:31.942796Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.916812Z","title":"Lightweight server support for browser-based csrf protection,","venue":null,"work_id":"babb62ef-c084-43a1-a170-e848cde6c77f","year":2013},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.416475Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:5c6eb549f7e81caba60185d35642bc0b0e2b6d76686121a13c3b283c27b9efb8","observation_id":"d42da233-38a0-4c20-9912-3ecaa70883c3","resolution":{"observed_at":"2026-08-14T14:57:31.922955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.894970Z","title":null,"venue":null,"work_id":"79a005a2-42f4-4fb5-bf46-2458e47418ef","year":2008},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.422143Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:d46bec247d827680030d0af0bd854eab9bb3fc8ef933e8938c619f1a9ba25731","observation_id":"52f7cb87-a415-4c34-af65-8a692250ca9d","resolution":{"observed_at":"2026-08-14T14:57:31.902274Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.875954Z","title":"(2009) Cross-domain search timing","venue":null,"work_id":"4fd2470e-3091-4ade-86d3-e55b010f08a1","year":2009},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.429288Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:fc78c5bafc09a94e672f7f78e40b9d389f96b2bab83ee4d4213281919942e10a","observation_id":"38c37038-d382-42df-be35-fc6231eb4640","resolution":{"observed_at":"2026-08-14T14:57:31.881866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.857449Z","title":"Timing attacks on web privacy,","venue":null,"work_id":"5efbfa8a-a4f1-4c5e-8400-62580aa2fd28","year":2000},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.437668Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:f0d0e86b0fbe3c20f730a5cb0d6b679b483743d13f32c06cf29f1fd9b131ed46","observation_id":"62f2e1a4-b3f9-4ec0-940b-2e95293f5b8b","resolution":{"observed_at":"2026-08-14T14:57:31.863196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.834977Z","title":"Who left open the cookie jar? a comprehensive evaluation of third-party cookie policies,","venue":null,"work_id":"e2e8da33-1991-4fb5-99b1-125c0b38adf3","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.446282Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:fbe3031c1261c17576e689fe1d612c0e7c137b36cc6d53346108ac73e200acc8","observation_id":"dfa2cd83-5b1e-4b4a-9d12-b559f9148450","resolution":{"observed_at":"2026-08-14T14:57:31.841956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.817053Z","title":"Http authentication: Basic and digest access authentication,","venue":null,"work_id":"b3f8d7ee-ec35-470a-889e-b564eabf8230","year":1999},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.453485Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:2584d9ee922911153548bf07d481d4382e32e42579ed94927409be5781090097","observation_id":"0da20240-24f7-4cb0-9228-e1e863321144","resolution":{"observed_at":"2026-08-14T14:57:31.822706Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.799055Z","title":"Cross-site search attacks,","venue":null,"work_id":"ff5fe0f2-4357-40bb-94bc-534134331bc0","year":2015},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.459450Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:6c7b43e84efee6ed457e9d7c211c02b853a0b641acd89eb52080ee973f17ef21","observation_id":"63ad2a9a-529f-45cb-88ba-4bb5d9c97439","resolution":{"observed_at":"2026-08-14T14:57:31.805036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.775734Z","title":"Grossman","venue":null,"work_id":"3b284f0b-8182-424b-9117-c21b5da57b0b","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.466033Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:9068deb0f42fb2b02505b77994d27ad653dcef72f8f041db54d4b82e10a76680","observation_id":"df18c010-3413-4101-adc4-479757d41a4c","resolution":{"observed_at":"2026-08-14T14:57:31.781347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.757370Z","title":"(2006) I know if you’re logged-in, anywhere","venue":null,"work_id":"aa343529-6b85-46ec-9ef1-84600efd8ca1","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.471930Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:25b94bde327bb5d9d91e996bb9e97bf2ffb4f75fe016a1e74d852482a0bcfa0e","observation_id":"dbf9602b-a680-48b8-866d-971490b5dc02","resolution":{"observed_at":"2026-08-14T14:57:31.763588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.739998Z","title":"(2008) Login Detection, whose problem is it? [Online]","venue":null,"work_id":"61ae8774-8f71-4d40-9a37-7a785c924aba","year":2008},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.478067Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:bc530044a5391545db3b3e10e16e429aaaaa3d338db5017ba4bf3c08c9978826","observation_id":"d1bdb019-9cbf-48ce-a006-e97956bd4e07","resolution":{"observed_at":"2026-08-14T14:57:31.745631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:30.483793Z","title":"(2012) I Know What Websites You Are Logged-In To (Login-Detection via CSRF)","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.483793Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:b59a1d2b380991e69d0f8da832a2883447820fd5069cca554799fd0d8d742ef3","observation_id":"1bfabc87-bf0e-4e36-b77a-d70714837f1f","resolution":{"observed_at":"2026-08-14T14:57:30.483793Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"b/2015041","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:30.846053Z","title":"Grossman and R","venue":null,"work_id":"ea59d4ce-4456-4316-b720-ba0eee3aeba7","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.489725Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:ec2c36069cb895e3b8563647666b093c162724313e2b32cb6556cc641c96e568","observation_id":"55a55a61-3afe-4c7f-a9f0-c6320d107bb3","resolution":{"observed_at":"2026-08-14T14:57:30.858908Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.720240Z","title":"Privacy breach by exploiting postmessage in html5: Identification, evaluation, and countermeasure,","venue":null,"work_id":"94eaa73f-ab57-4bc9-a02b-9b25050a53f2","year":2016},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.495193Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:2216572ec23d858c019d3fa616cf42f999d8ab6d55ae468a2b392e23004f485d","observation_id":"c024e4fb-9b09-48f1-8d2f-b48765c78c58","resolution":{"observed_at":"2026-08-14T14:57:31.726474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.700837Z","title":"To extend or not to extend: on the uniqueness of browser extensions and web logins,","venue":null,"work_id":"681f0862-1dff-4faa-888a-bad8e41be08e","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.500428Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:21108c46f6eedc5a27ff842f899fb69f767c8fc5e7f6001dcf8c083e98fbf396","observation_id":"3927104d-a862-4f59-879f-ae62c0b9d8c6","resolution":{"observed_at":"2026-08-14T14:57:31.706343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.683477Z","title":null,"venue":null,"work_id":"68b75e59-d280-42a0-84a5-38880fc2edae","year":2016},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.507923Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:440eea93e390ca9d880ca0cbdcecc457b2904e2c949a42e429e4d886a15c0dfb","observation_id":"54eafd0f-2655-43c0-92ce-33c7256c24b3","resolution":{"observed_at":"2026-08-14T14:57:31.689232Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.663029Z","title":null,"venue":null,"work_id":"a3747de0-1ce8-45c4-8aad-feabd7dd2694","year":2013},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.513968Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:dd3edf09675e4104922dcdd1894bec9d6e8a3f5ef7a42c02e230826147724407","observation_id":"295b017e-0dbc-49c0-b79b-5470df8bfa14","resolution":{"observed_at":"2026-08-14T14:57:31.670148Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.638690Z","title":"(2014) Using Content-Security-Policy for Evil","venue":null,"work_id":"11169a79-bb3a-4ce0-a345-435fc26bb5c6","year":2014},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.520005Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:e5dc1a4eba25ac4cbbed675c0d3e12b5e08bccba7f33693bd88ebb5c65657809","observation_id":"2102a8e6-b550-4970-b096-2bb4d0fd0b7c","resolution":{"observed_at":"2026-08-14T14:57:31.644026Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.614347Z","title":"Protecting browser state from web privacy attacks,","venue":null,"work_id":"3065b7a6-c077-46c7-9541-c4494a213ca6","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.525894Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:dacf75edd1c023385e34be25afaf4fc9f4f63bcb56363f8442f73972467de527","observation_id":"1947b97f-8b3e-4db9-a74c-645531b89308","resolution":{"observed_at":"2026-08-14T14:57:31.624658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.597107Z","title":"How do we Stop Spilling the Beans Across Origins,","venue":null,"work_id":"b9f63fc2-b692-43ba-9d84-cdb6864bb2a5","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.531226Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:a74e94612140c04874b4678b25a6f3894a8022c619583c6dbfb1497f4d15684d","observation_id":"9b7c07be-93db-44f6-ac09-ea0990783bad","resolution":{"observed_at":"2026-08-14T14:57:31.602118Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.580815Z","title":"Advances in record-linkage methodology as applied to matching the 1985 census of tampa, florida,","venue":null,"work_id":"d1d059f0-fd05-4f43-8ff0-51c68b054c54","year":1985},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.536763Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:52398d37c52ce9def7c5ed74f5b83398ca08bda9d90513da39c142dd103d2e22","observation_id":"b0d17f49-0a2d-4d1d-9663-0b29ccb24eac","resolution":{"observed_at":"2026-08-14T14:57:31.586153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.561556Z","title":"RequestRodeo: Client side protection against session riding,","venue":null,"work_id":"99fa94a4-6145-4736-bacc-f674d5045ce7","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.541603Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:e028772e4ca302064b54c886d70acd5e9656a740b52364b197b4e22cb46c3feb","observation_id":"5ad73c05-12d9-4cc6-b240-519eb7b446a9","resolution":{"observed_at":"2026-08-14T14:57:31.568425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.541125Z","title":"Khodayari","venue":null,"work_id":"390d3059-4d8d-43c9-89a9-218a9d8125ae","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.546544Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:bf0f92e28d23176fe3342f0d01e4d1a23bcaaa78c82c00a221515ae21579bde2","observation_id":"1cbcf593-28e3-4683-96c0-e720e1a52a1e","resolution":{"observed_at":"2026-08-14T14:57:31.548210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.518553Z","title":"Identifying cross-origin resource status using application cache,","venue":null,"work_id":"60fdad2c-de99-43af-8257-024afe74b92d","year":2015},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.551166Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:b0bd27085d8db580e3f4c0891b8c4d33acd21791cfd5c7010ca712e335884710","observation_id":"bc362edd-fb97-4ff8-9281-d12c00eaa6cd","resolution":{"observed_at":"2026-08-14T14:57:31.524631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.496464Z","title":"The state of the cross-domain nation,","venue":null,"work_id":"09c6f7e3-8948-4499-99ae-eb9b7727147f","year":2011},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.557147Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:15958d66809705f5170b241e4cc53765b92047b49f355c5f427c410aa9991187","observation_id":"54bc79f8-853b-48b7-b1ac-461ce6d35000","resolution":{"observed_at":"2026-08-14T14:57:31.503525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.475454Z","title":"25 million flows later: large-scale detection of dom-based xss,","venue":null,"work_id":"9dbee9cb-54ad-4d86-af4f-87fd184db562","year":2013},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.563432Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:49d1ccd087ff40abd90b9abe16d6e45152191c739eebb4c4d1ce50adab28a024","observation_id":"ead14376-1ff2-46dc-b95b-6b16df685119","resolution":{"observed_at":"2026-08-14T14:57:31.481490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.458047Z","title":"The unexpected dangers of dynamic javascript,","venue":null,"work_id":"f2edf575-bce1-4378-9b4e-ac610737be95","year":2015},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.569583Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:9bda7fa0945b6bee10cb2cbebdbb11d8400ed0b9e7bcf4466e6230caedddd6a7","observation_id":"b5fecfd3-b974-49b1-bb2e-ffdc73b13afb","resolution":{"observed_at":"2026-08-14T14:57:31.463896Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.436295Z","title":null,"venue":null,"work_id":"c87035db-5cc8-4f79-b1c6-b6062e8966c8","year":2016},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.574887Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:bb32338f36209178bbb3f39fb525f556e27980f5b7ce659eb04a71f47285f585","observation_id":"94d44c17-827a-4363-8e25-5df369dd5fe6","resolution":{"observed_at":"2026-08-14T14:57:31.442592Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.417889Z","title":null,"venue":null,"work_id":"f43f25c3-5f16-414b-96f8-c90dee23b4a4","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.580656Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:8eb82a4ab20ccad373d8d5208cb0227ff367c4398c35aa675c913f02b569e48f","observation_id":"37dbb163-c55f-406b-9032-5778e77aa33a","resolution":{"observed_at":"2026-08-14T14:57:31.424148Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.396961Z","title":"Why Johnny Can’t Browse in Peace: On the Uniqueness of Web Browsing History Patterns,","venue":null,"work_id":"2fa5200f-84a7-4eb6-8721-68ceb2530398","year":2012},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.585971Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:27e7c38c15129c7740aad376e5536d55b370ca2abdbc947fb947826d7add0852","observation_id":"25c7f05f-fa97-4259-babc-9007cf382244","resolution":{"observed_at":"2026-08-14T14:57:31.403380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.373554Z","title":"The Design and Implementation of the Tor Browser [DRAFT],","venue":null,"work_id":"1d92f99e-764a-47f6-b22f-a561e183971d","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.591110Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:e61459b785c11f914d42b536bbf7559ea7d6ffd4e6b656326bea29b664de4705","observation_id":"ceb90d6d-a521-4ea6-9399-12c47c0999bd","resolution":{"observed_at":"2026-08-14T14:57:31.379182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.355395Z","title":"(2019) Mapping communication between facebook accounts using a browser-based side channel attack","venue":null,"work_id":"9f78dd8b-f6cb-45f8-8b3c-51170d226709","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.597307Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:ccc7558bbdebb8a2829e263b0c691745a64cc5577421b1bc13cd99a7cd8bbe52","observation_id":"f73169f6-88be-4bae-b97a-95752ce9d749","resolution":{"observed_at":"2026-08-14T14:57:31.361768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.336172Z","title":"Bakingtimer: Privacy analysis of server-side request processing time,","venue":null,"work_id":"1ca245aa-27a6-4427-aa17-88bd72a789d6","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.603856Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:2818f411876e2014164c952950c41b279e5bb4e17179703bfbd18a34ae8a346e","observation_id":"bfbcb821-ef0d-4de4-bcbc-6616f5eea084","resolution":{"observed_at":"2026-08-14T14:57:31.342049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.316368Z","title":"Same-origin policy: Eval- uation in modern browsers,","venue":null,"work_id":"becf7dd3-c4fd-48f3-86a7-0eee17c0e50d","year":2017},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.609740Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:a237984001ec314a6b93bc2b589ceb3ffe0d569c0f6f4c8e6bf4e5e767d3df2e","observation_id":"dd861322-19aa-461e-9b2f-9bce7dd063e7","resolution":{"observed_at":"2026-08-14T14:57:31.322658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.296259Z","title":"Preventing cross-site attacks using same-site cookies,","venue":null,"work_id":"cd71c968-6126-4ac0-91f9-0b886bcf2614","year":null},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.616008Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:3a1fd5e7a8babaf2ba1104a1140341404f7dfec5f64eb377510cd8f96a666628","observation_id":"6fad0d7f-d871-484e-8770-34038785d6f9","resolution":{"observed_at":"2026-08-14T14:57:31.303200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.250306Z","title":null,"venue":null,"work_id":"7759a33a-f632-45c5-ac46-9d79341ae3e4","year":2006},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.626245Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:7eaf038b9a87091bc0bd3d45e71b8c48fd8c6a60acfe7eb274166a5efa285fd5","observation_id":"180f6c04-3516-4e43-87f1-337cc4d1bf47","resolution":{"observed_at":"2026-08-14T14:57:31.257610Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.223290Z","title":"Browser history re:visited,","venue":null,"work_id":"8991d68c-1633-4d24-9a56-577355a5dac0","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.631385Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:5c97e36f686a3020aff34ff452be08d891989b6d60f10608f361c1c122ee2aa7","observation_id":"6a144bd1-27de-46f5-a73d-48530e423492","resolution":{"observed_at":"2026-08-14T14:57:31.230501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.198996Z","title":"Leaky images: Targeted privacy attacks in the web,","venue":null,"work_id":"37945b69-fb1c-411d-bfb4-939579311599","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.637053Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:1409650cd93b105c5dac5ed6d1c189081f39e1507e5b03a26f82417b5db7dc1f","observation_id":"5f37c79d-fd3b-4264-8e6c-c3dc87224162","resolution":{"observed_at":"2026-08-14T14:57:31.208928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.177093Z","title":"How the web tangled itself: Uncovering the history of client-side web (in)security,","venue":null,"work_id":"aef11257-27bf-42e6-9277-f190280010ca","year":2017},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.642914Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:236ffacafebc7124483a470f114fda11d047cef7056cb40e283f346873b400e4","observation_id":"5f63f9f4-0ee3-422c-8fd7-740bc36e48b1","resolution":{"observed_at":"2026-08-14T14:57:31.183275Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.156843Z","title":"Identifier based XSSI attacks,","venue":null,"work_id":"b4f1c12a-0074-45ed-b49f-695e8cbb4ad1","year":2015},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.648006Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:8838f75816fa72de30688f05517fafff62742578a31f910cd857ceda1fd24fcf","observation_id":"c2781b1b-6597-4646-ac61-6cc60dab5177","resolution":{"observed_at":"2026-08-14T14:57:31.163975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.137687Z","title":"The clock is still ticking: Timing attacks in the modern web,","venue":null,"work_id":"d0c9c5f1-12d6-4f69-a836-a1eedb37e8bb","year":2015},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.654160Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:958c3ba23e7ce3f6f4015cc1f763bdea7ea64b546975bc247b3f601c5e18cd7a","observation_id":"0936603d-463d-4552-b1f8-7385bbf9f8f4","resolution":{"observed_at":"2026-08-14T14:57:31.144683Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.118376Z","title":"Vela Nava, L","venue":null,"work_id":"774d1df2-1817-4a72-9ffe-bc57f8a00944","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.661683Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:88c17f9210e72c529fafd12c2d3106a3c28133013ba6327917a7c30de241f656","observation_id":"6bd884b1-d6aa-4b72-8ae9-93bec5b73e7f","resolution":{"observed_at":"2026-08-14T14:57:31.124765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.099122Z","title":"Signing me onto your accounts through facebook and google: a traffic-guided security study of com- mercially deployed single-sign-on web services,","venue":null,"work_id":"a2d4e24f-8674-4874-9f8e-054deb949044","year":2012},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.671210Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:2b197cbaae77eb7b46cd00a37f668b1f030b996ad0eac7805497abd57f5076cd","observation_id":"427a6c64-7477-4b87-b791-363445dc2f70","resolution":{"observed_at":"2026-08-14T14:57:31.105933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.079076Z","title":"Same-site cookies,","venue":null,"work_id":"7680bc47-e002-467d-80f0-0f445fbda735","year":2016},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.680004Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:fe8fd7979a201323409d60d47406919474e511f5c1fcaec48997871900753933","observation_id":"5f5a2e7f-3ebe-4476-9047-abce63cf8e24","resolution":{"observed_at":"2026-08-14T14:57:31.085898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.052558Z","title":"Fetch metadata request headers,","venue":null,"work_id":"59c18db1-800e-4807-afe4-e0d1b1106743","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.685709Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:ba2a6725c498b9dea35dc7b2d61dd416a31f5e76fcdb474cff75f2020a4744f5","observation_id":"0a6b7e16-4215-40ec-80b1-5e2add8e4843","resolution":{"observed_at":"2026-08-14T14:57:31.060441Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.029832Z","title":"Incrementally better cookies,","venue":null,"work_id":"8b3893ba-0979-4e95-8a33-35f7f97e62fe","year":2019},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.690807Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:042bc05bc28df53c80c780305460c23111173f408878432edaaeaed157e9c8b1","observation_id":"1cd3ef68-4804-401e-ac04-3c433517f917","resolution":{"observed_at":"2026-08-14T14:57:31.036418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.002699Z","title":"A practical attack to de-anonymize social network users,","venue":null,"work_id":"cdcce0ae-6f27-48e9-99f4-edc36d4062a6","year":2010},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.696740Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:5fab0909d4ccfcba202e64299a851383788da77c3129934773d48bf16da44c79","observation_id":"4dc43e54-46b5-4b1f-8c5d-3219554be49c","resolution":{"observed_at":"2026-08-14T14:57:31.010820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:30.979540Z","title":"Yoneuchi","venue":null,"work_id":"3cf34180-0997-42e6-b724-c3297adf7707","year":2018},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.702571Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:f5735a3fbb34fb82e1b22ef9f6e72c885ca3f5d45e27e9df3067d7c354d84183","observation_id":"b353b992-2daf-40a3-8caa-60d961f4dd81","resolution":{"observed_at":"2026-08-14T14:57:30.985187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:30.957127Z","title":"Zalewski","venue":null,"work_id":"dcdb1396-4e11-425a-b597-adb46c4b33cf","year":2008},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.708841Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:b18c806cd5ef0514eb7b1588306c98dbae3067eef1f08f003ee14e2c16a088fb","observation_id":"1284642d-07d6-4a0f-8d79-954090cabffa","resolution":{"observed_at":"2026-08-14T14:57:30.963818Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T14:57:31.273560Z","title":"Available: https://blogs.dropbox.com/tech/2017/03/pre venting-cross-site-attacks-using-same-site-cookies/","venue":null,"work_id":"37ca564b-c9e7-49d2-8a24-6cb184ee46e7","year":2017},"citing_paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-14T14:57:30.621014Z"},"links":{"citing_paper":"/paper/1908.02204"},"observation_digest":"sha256:13fe9dc090cbe21f2a7e55538d3d4c4ca22d20c51039e691c46c48b3ee777754","observation_id":"c4483230-fa6e-4487-b477-a348799051ba","resolution":{"observed_at":"2026-08-14T14:57:31.280857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.02204","last_updated":"2020-01-31T15:41:14Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T18:51:02.650440Z","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks"},"reference_resolution":{"displayed":73,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":1,"verified_fuzzy":64},"total_outbound_references":73},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 73 of 73 outbound references and 0 inbound Pith citation observations for arXiv:1908.02204."}