{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:3TGTVOG5XLT6UXXY5235PXTIL3","short_pith_number":"pith:3TGTVOG5","canonical_record":{"source":{"id":"1706.09165","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-28T08:19:43Z","cross_cats_sorted":[],"title_canon_sha256":"44c78345e416cd9c58ae304aac05bf1cda48d28dd075608861c3ed198abfd180","abstract_canon_sha256":"1f062080988318e1c2869f580695df0a42ec6fd4fe8c072b5c7d9482858531c3"},"schema_version":"1.0"},"canonical_sha256":"dccd3ab8ddbae7ea5ef8eeb7d7de685ed2b763f857a0792e0d944d49ad118398","source":{"kind":"arxiv","id":"1706.09165","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.09165","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"arxiv_version","alias_value":"1706.09165v1","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.09165","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"pith_short_12","alias_value":"3TGTVOG5XLT6","created_at":"2026-05-18T12:30:58Z"},{"alias_kind":"pith_short_16","alias_value":"3TGTVOG5XLT6UXXY","created_at":"2026-05-18T12:30:58Z"},{"alias_kind":"pith_short_8","alias_value":"3TGTVOG5","created_at":"2026-05-18T12:30:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:3TGTVOG5XLT6UXXY5235PXTIL3","target":"record","payload":{"canonical_record":{"source":{"id":"1706.09165","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-28T08:19:43Z","cross_cats_sorted":[],"title_canon_sha256":"44c78345e416cd9c58ae304aac05bf1cda48d28dd075608861c3ed198abfd180","abstract_canon_sha256":"1f062080988318e1c2869f580695df0a42ec6fd4fe8c072b5c7d9482858531c3"},"schema_version":"1.0"},"canonical_sha256":"dccd3ab8ddbae7ea5ef8eeb7d7de685ed2b763f857a0792e0d944d49ad118398","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:41:19.579504Z","signature_b64":"f0qbnyDuBQNRIuaP3LUz33oKFqlphFHvmLq6CMTRjTs4x01p4mG5B6INBlvu5DrdDJVPk7NAGpFE98dOxYKADA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dccd3ab8ddbae7ea5ef8eeb7d7de685ed2b763f857a0792e0d944d49ad118398","last_reissued_at":"2026-05-18T00:41:19.578668Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:41:19.578668Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1706.09165","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nI6yX38bskrj4/KJLENcuMU5/jasnIvvY7W0myx018700Ve1w/NTsYeynaQ0Wmt8x/BHhyOaOcoDdjwOLWPJDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-22T10:36:54.012859Z"},"content_sha256":"a2867302fd869e281a25f699d0ee8f30a3762ab1aa1719634200258d77ec4db0","schema_version":"1.0","event_id":"sha256:a2867302fd869e281a25f699d0ee8f30a3762ab1aa1719634200258d77ec4db0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:3TGTVOG5XLT6UXXY5235PXTIL3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Breaking Fitness Records without Moving: Reverse Engineering and Spoofing Fitbit","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ahmad-Reza Sadeghi, Hossein Fereidooni, Jiska Classen, Markus Miettinen, Matthias Hollick, Mauro Conti, Paul Patras, Tom Spink","submitted_at":"2017-06-28T08:19:43Z","abstract_excerpt":"Tens of millions of wearable fitness trackers are shipped yearly to consumers who routinely collect information about their exercising patterns. Smartphones push this health-related data to vendors' cloud platforms, enabling users to analyze summary statistics on-line and adjust their habits. Third-parties including health insurance providers now offer discounts and financial rewards in exchange for such private information and evidence of healthy lifestyles. Given the associated monetary value, the authenticity and correctness of the activity data collected becomes imperative. In this paper, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.09165","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zq9w066ddyLg5jG8dLZN8ftHnvY7t1LGBxSlXK4RjeXNb6QNFsPUcbAVbdfHFtzqeP2k9nA1vwQEuyFHoGQdBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-22T10:36:54.013512Z"},"content_sha256":"d6e367db0474d0de546a66b298aa1de97ad623e5d8c6d25d43e1972385e8e4be","schema_version":"1.0","event_id":"sha256:d6e367db0474d0de546a66b298aa1de97ad623e5d8c6d25d43e1972385e8e4be"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3TGTVOG5XLT6UXXY5235PXTIL3/bundle.json","state_url":"https://pith.science/pith/3TGTVOG5XLT6UXXY5235PXTIL3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3TGTVOG5XLT6UXXY5235PXTIL3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-22T10:36:54Z","links":{"resolver":"https://pith.science/pith/3TGTVOG5XLT6UXXY5235PXTIL3","bundle":"https://pith.science/pith/3TGTVOG5XLT6UXXY5235PXTIL3/bundle.json","state":"https://pith.science/pith/3TGTVOG5XLT6UXXY5235PXTIL3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3TGTVOG5XLT6UXXY5235PXTIL3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:3TGTVOG5XLT6UXXY5235PXTIL3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f062080988318e1c2869f580695df0a42ec6fd4fe8c072b5c7d9482858531c3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-28T08:19:43Z","title_canon_sha256":"44c78345e416cd9c58ae304aac05bf1cda48d28dd075608861c3ed198abfd180"},"schema_version":"1.0","source":{"id":"1706.09165","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.09165","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"arxiv_version","alias_value":"1706.09165v1","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.09165","created_at":"2026-05-18T00:41:19Z"},{"alias_kind":"pith_short_12","alias_value":"3TGTVOG5XLT6","created_at":"2026-05-18T12:30:58Z"},{"alias_kind":"pith_short_16","alias_value":"3TGTVOG5XLT6UXXY","created_at":"2026-05-18T12:30:58Z"},{"alias_kind":"pith_short_8","alias_value":"3TGTVOG5","created_at":"2026-05-18T12:30:58Z"}],"graph_snapshots":[{"event_id":"sha256:d6e367db0474d0de546a66b298aa1de97ad623e5d8c6d25d43e1972385e8e4be","target":"graph","created_at":"2026-05-18T00:41:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Tens of millions of wearable fitness trackers are shipped yearly to consumers who routinely collect information about their exercising patterns. Smartphones push this health-related data to vendors' cloud platforms, enabling users to analyze summary statistics on-line and adjust their habits. Third-parties including health insurance providers now offer discounts and financial rewards in exchange for such private information and evidence of healthy lifestyles. Given the associated monetary value, the authenticity and correctness of the activity data collected becomes imperative. In this paper, ","authors_text":"Ahmad-Reza Sadeghi, Hossein Fereidooni, Jiska Classen, Markus Miettinen, Matthias Hollick, Mauro Conti, Paul Patras, Tom Spink","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-28T08:19:43Z","title":"Breaking Fitness Records without Moving: Reverse Engineering and Spoofing Fitbit"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.09165","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a2867302fd869e281a25f699d0ee8f30a3762ab1aa1719634200258d77ec4db0","target":"record","created_at":"2026-05-18T00:41:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f062080988318e1c2869f580695df0a42ec6fd4fe8c072b5c7d9482858531c3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-28T08:19:43Z","title_canon_sha256":"44c78345e416cd9c58ae304aac05bf1cda48d28dd075608861c3ed198abfd180"},"schema_version":"1.0","source":{"id":"1706.09165","kind":"arxiv","version":1}},"canonical_sha256":"dccd3ab8ddbae7ea5ef8eeb7d7de685ed2b763f857a0792e0d944d49ad118398","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dccd3ab8ddbae7ea5ef8eeb7d7de685ed2b763f857a0792e0d944d49ad118398","first_computed_at":"2026-05-18T00:41:19.578668Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:41:19.578668Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"f0qbnyDuBQNRIuaP3LUz33oKFqlphFHvmLq6CMTRjTs4x01p4mG5B6INBlvu5DrdDJVPk7NAGpFE98dOxYKADA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:41:19.579504Z","signed_message":"canonical_sha256_bytes"},"source_id":"1706.09165","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a2867302fd869e281a25f699d0ee8f30a3762ab1aa1719634200258d77ec4db0","sha256:d6e367db0474d0de546a66b298aa1de97ad623e5d8c6d25d43e1972385e8e4be"],"state_sha256":"3df704e78c2a6bc0619b12ef78c5e995d5b19156a9c62a80a5bf2761dac7ea06"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u4EDIO9RN+SA85DxoQvYrPLySgQjzFSxsyVcHRdENmYieDx4g8QyH206de1P3iCnwqi7JqFniC8MrowU6DKZDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-22T10:36:54.016467Z","bundle_sha256":"b32196548f3b532d7a755507d3ac5fe9d041cb25215ee5540bfbef2c9e6d15dd"}}