{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:4BNTLOH7X3LYG4EGS4LWNBSFQI","short_pith_number":"pith:4BNTLOH7","canonical_record":{"source":{"id":"2109.13722","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T13:40:32Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"0633276f8c1a97e4581c85253e107d6a06612a407976c9742181485b1132b614","abstract_canon_sha256":"54e5feeec00380118b20b9805cf157d66fb40e5985babe6836acd731dbe1fe2c"},"schema_version":"1.0"},"canonical_sha256":"e05b35b8ffbed78370869717668645822654305a9d40bf4d8a1511e0a411577c","source":{"kind":"arxiv","id":"2109.13722","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13722","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13722v4","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13722","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_12","alias_value":"4BNTLOH7X3LY","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_16","alias_value":"4BNTLOH7X3LYG4EG","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_8","alias_value":"4BNTLOH7","created_at":"2026-07-05T05:26:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:4BNTLOH7X3LYG4EGS4LWNBSFQI","target":"record","payload":{"canonical_record":{"source":{"id":"2109.13722","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T13:40:32Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"0633276f8c1a97e4581c85253e107d6a06612a407976c9742181485b1132b614","abstract_canon_sha256":"54e5feeec00380118b20b9805cf157d66fb40e5985babe6836acd731dbe1fe2c"},"schema_version":"1.0"},"canonical_sha256":"e05b35b8ffbed78370869717668645822654305a9d40bf4d8a1511e0a411577c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:26:02.531797Z","signature_b64":"henL7Qh1IBswu790YFfu8jA+l+sPIRuaJ6Uas5B2cxIOcUK0gxTctFxwfupFYtqCSzjM7AEvXpkNeQPXUyvODw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e05b35b8ffbed78370869717668645822654305a9d40bf4d8a1511e0a411577c","last_reissued_at":"2026-07-05T05:26:02.531366Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:26:02.531366Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.13722","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:26:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"skTTV9MzS4HRFfyhgedsuuePDxTJ2s/l8tw2jLXzE+aJ8crCQct7vdMTOtmLxkZHFTYilhI2LYN0cCnvNFReDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:17:35.323145Z"},"content_sha256":"340cfb016a21b79343536f8d592415f7deaa40c63694f39a0b12b73541dc0c43","schema_version":"1.0","event_id":"sha256:340cfb016a21b79343536f8d592415f7deaa40c63694f39a0b12b73541dc0c43"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:4BNTLOH7X3LYG4EGS4LWNBSFQI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are iPhones Really Better for Privacy? Comparative Study of iOS and Android Apps","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Anastasia Shuba, Konrad Kollnig, Max Van Kleek, Nigel Shadbolt, Reuben Binns","submitted_at":"2021-09-28T13:40:32Z","abstract_excerpt":"While many studies have looked at privacy properties of the Android and Google Play app ecosystem, comparatively much less is known about iOS and the Apple App Store, the most widely used ecosystem in the US. At the same time, there is increasing competition around privacy between these smartphone operating system providers. In this paper, we present a study of 24k Android and iOS apps from 2020 along several dimensions relating to user privacy. We find that third-party tracking and the sharing of unique user identifiers was widespread in apps from both ecosystems, even in apps aimed at childr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13722","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.13722/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:26:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZNwh5/g7d9Q1xtS3PqqWF/zDwr5IaAH0moCys0sT0RKfIMIKK6LJhwf5cDDxfsCqUIRQxg5vv220pNGq0+jzCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:17:35.323744Z"},"content_sha256":"3912ac0cc8ab986b583600df4d79738ef0cd46e45add3d02084a8103ae33386e","schema_version":"1.0","event_id":"sha256:3912ac0cc8ab986b583600df4d79738ef0cd46e45add3d02084a8103ae33386e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/bundle.json","state_url":"https://pith.science/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T20:17:35Z","links":{"resolver":"https://pith.science/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI","bundle":"https://pith.science/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/bundle.json","state":"https://pith.science/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4BNTLOH7X3LYG4EGS4LWNBSFQI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4BNTLOH7X3LYG4EGS4LWNBSFQI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"54e5feeec00380118b20b9805cf157d66fb40e5985babe6836acd731dbe1fe2c","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T13:40:32Z","title_canon_sha256":"0633276f8c1a97e4581c85253e107d6a06612a407976c9742181485b1132b614"},"schema_version":"1.0","source":{"id":"2109.13722","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.13722","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"arxiv_version","alias_value":"2109.13722v4","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.13722","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_12","alias_value":"4BNTLOH7X3LY","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_16","alias_value":"4BNTLOH7X3LYG4EG","created_at":"2026-07-05T05:26:02Z"},{"alias_kind":"pith_short_8","alias_value":"4BNTLOH7","created_at":"2026-07-05T05:26:02Z"}],"graph_snapshots":[{"event_id":"sha256:3912ac0cc8ab986b583600df4d79738ef0cd46e45add3d02084a8103ae33386e","target":"graph","created_at":"2026-07-05T05:26:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.13722/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"While many studies have looked at privacy properties of the Android and Google Play app ecosystem, comparatively much less is known about iOS and the Apple App Store, the most widely used ecosystem in the US. At the same time, there is increasing competition around privacy between these smartphone operating system providers. In this paper, we present a study of 24k Android and iOS apps from 2020 along several dimensions relating to user privacy. We find that third-party tracking and the sharing of unique user identifiers was widespread in apps from both ecosystems, even in apps aimed at childr","authors_text":"Anastasia Shuba, Konrad Kollnig, Max Van Kleek, Nigel Shadbolt, Reuben Binns","cross_cats":["cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T13:40:32Z","title":"Are iPhones Really Better for Privacy? Comparative Study of iOS and Android Apps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.13722","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:340cfb016a21b79343536f8d592415f7deaa40c63694f39a0b12b73541dc0c43","target":"record","created_at":"2026-07-05T05:26:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"54e5feeec00380118b20b9805cf157d66fb40e5985babe6836acd731dbe1fe2c","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-28T13:40:32Z","title_canon_sha256":"0633276f8c1a97e4581c85253e107d6a06612a407976c9742181485b1132b614"},"schema_version":"1.0","source":{"id":"2109.13722","kind":"arxiv","version":4}},"canonical_sha256":"e05b35b8ffbed78370869717668645822654305a9d40bf4d8a1511e0a411577c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e05b35b8ffbed78370869717668645822654305a9d40bf4d8a1511e0a411577c","first_computed_at":"2026-07-05T05:26:02.531366Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:26:02.531366Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"henL7Qh1IBswu790YFfu8jA+l+sPIRuaJ6Uas5B2cxIOcUK0gxTctFxwfupFYtqCSzjM7AEvXpkNeQPXUyvODw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:26:02.531797Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.13722","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:340cfb016a21b79343536f8d592415f7deaa40c63694f39a0b12b73541dc0c43","sha256:3912ac0cc8ab986b583600df4d79738ef0cd46e45add3d02084a8103ae33386e"],"state_sha256":"87bca769c27b75d27128aefe5d7b414c7f8771ef5eec92504508318cdb70a5b3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wLfDPP4gLpQYm9A4y0efoKRzn/YC8wRelQn1JNsRdkUgQzr3qxCYBK891P4LRDW69BhIkYVGkB3mpOIEe/35Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T20:17:35.326636Z","bundle_sha256":"9e46960dc0a86fe54f9436e7f29f62a5a044ee316f5f2c51e14a17769c7b1e5b"}}