{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4OPBLXB7QA6YO7SDQ6IYDFMV7W","short_pith_number":"pith:4OPBLXB7","canonical_record":{"source":{"id":"2408.09032","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-16T22:03:06Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"2642ed953485c81b4482c1dfbe4de42dc6e8d8b31d86077009407cf6ec368e33","abstract_canon_sha256":"e0c1daa2099862686a62542446cfdcfa08ba7d02b4e08f890a65375dbc760207"},"schema_version":"1.0"},"canonical_sha256":"e39e15dc3f803d877e438791819595fd80d8001ddfb82ad310666ef339999169","source":{"kind":"arxiv","id":"2408.09032","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.09032","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"arxiv_version","alias_value":"2408.09032v1","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.09032","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_12","alias_value":"4OPBLXB7QA6Y","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_16","alias_value":"4OPBLXB7QA6YO7SD","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_8","alias_value":"4OPBLXB7","created_at":"2026-07-05T08:56:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4OPBLXB7QA6YO7SDQ6IYDFMV7W","target":"record","payload":{"canonical_record":{"source":{"id":"2408.09032","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-16T22:03:06Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"2642ed953485c81b4482c1dfbe4de42dc6e8d8b31d86077009407cf6ec368e33","abstract_canon_sha256":"e0c1daa2099862686a62542446cfdcfa08ba7d02b4e08f890a65375dbc760207"},"schema_version":"1.0"},"canonical_sha256":"e39e15dc3f803d877e438791819595fd80d8001ddfb82ad310666ef339999169","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:56:27.021670Z","signature_b64":"gCEvSPxhSmdhhWPjVUaRx2rWU3n1P1MSH6OtmQyrFkmeW1BekxkzH0xhMpbH6MZkCczsNaAwbQcDytDO8DnwAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e39e15dc3f803d877e438791819595fd80d8001ddfb82ad310666ef339999169","last_reissued_at":"2026-07-05T08:56:27.021313Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:56:27.021313Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.09032","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NUWDflO7TqjiD2lyAFaCszhfWw10uIS/fZszHQNYllK9FC8hbx+ehrSbBRZvY6vJIKh/KHGPfao/vPMrpE29Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:36:52.362144Z"},"content_sha256":"3bf23dbdb2fc30e29c63618a7bdb98881420922cbc2d91a377b8d0d29ceae7fa","schema_version":"1.0","event_id":"sha256:3bf23dbdb2fc30e29c63618a7bdb98881420922cbc2d91a377b8d0d29ceae7fa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4OPBLXB7QA6YO7SDQ6IYDFMV7W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Developer-Centric Study Exploring Mobile Application Security Practices and Challenges","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Ana Catarina Ara\\'ujo, Anthony Peruma, Jake Imanaka, Rick Kazman, Timothy Huo","submitted_at":"2024-08-16T22:03:06Z","abstract_excerpt":"Mobile applications (apps) have become an essential part of everyday life, offering convenient access to services such as banking, healthcare, and shopping. With these apps handling sensitive personal and financial data, ensuring their security is paramount. While previous research has explored mobile app developer practices, there is limited knowledge about the common practices and challenges that developers face in securing their apps. Our study addresses this need through a global survey of 137 experienced mobile app developers, providing a developer-centric view of mobile app security. Our"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.09032","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.09032/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o5cBJLXU/7L0OxhJyisVg+4G/oXNuPGpNOx7PH+BqmGWd9BtxGdMTM7oX6fFp/oHriOMGcZ3ddYECIGcQF+NAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:36:52.362664Z"},"content_sha256":"21d568b022a3eb9d144799d5c6311bcc40f8cc1b9f98f7f9b90e85caf9f70e78","schema_version":"1.0","event_id":"sha256:21d568b022a3eb9d144799d5c6311bcc40f8cc1b9f98f7f9b90e85caf9f70e78"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/bundle.json","state_url":"https://pith.science/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T04:36:52Z","links":{"resolver":"https://pith.science/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W","bundle":"https://pith.science/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/bundle.json","state":"https://pith.science/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4OPBLXB7QA6YO7SDQ6IYDFMV7W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4OPBLXB7QA6YO7SDQ6IYDFMV7W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e0c1daa2099862686a62542446cfdcfa08ba7d02b4e08f890a65375dbc760207","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-16T22:03:06Z","title_canon_sha256":"2642ed953485c81b4482c1dfbe4de42dc6e8d8b31d86077009407cf6ec368e33"},"schema_version":"1.0","source":{"id":"2408.09032","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.09032","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"arxiv_version","alias_value":"2408.09032v1","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.09032","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_12","alias_value":"4OPBLXB7QA6Y","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_16","alias_value":"4OPBLXB7QA6YO7SD","created_at":"2026-07-05T08:56:27Z"},{"alias_kind":"pith_short_8","alias_value":"4OPBLXB7","created_at":"2026-07-05T08:56:27Z"}],"graph_snapshots":[{"event_id":"sha256:21d568b022a3eb9d144799d5c6311bcc40f8cc1b9f98f7f9b90e85caf9f70e78","target":"graph","created_at":"2026-07-05T08:56:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.09032/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mobile applications (apps) have become an essential part of everyday life, offering convenient access to services such as banking, healthcare, and shopping. With these apps handling sensitive personal and financial data, ensuring their security is paramount. While previous research has explored mobile app developer practices, there is limited knowledge about the common practices and challenges that developers face in securing their apps. Our study addresses this need through a global survey of 137 experienced mobile app developers, providing a developer-centric view of mobile app security. Our","authors_text":"Ana Catarina Ara\\'ujo, Anthony Peruma, Jake Imanaka, Rick Kazman, Timothy Huo","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-16T22:03:06Z","title":"A Developer-Centric Study Exploring Mobile Application Security Practices and Challenges"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.09032","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3bf23dbdb2fc30e29c63618a7bdb98881420922cbc2d91a377b8d0d29ceae7fa","target":"record","created_at":"2026-07-05T08:56:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e0c1daa2099862686a62542446cfdcfa08ba7d02b4e08f890a65375dbc760207","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-08-16T22:03:06Z","title_canon_sha256":"2642ed953485c81b4482c1dfbe4de42dc6e8d8b31d86077009407cf6ec368e33"},"schema_version":"1.0","source":{"id":"2408.09032","kind":"arxiv","version":1}},"canonical_sha256":"e39e15dc3f803d877e438791819595fd80d8001ddfb82ad310666ef339999169","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e39e15dc3f803d877e438791819595fd80d8001ddfb82ad310666ef339999169","first_computed_at":"2026-07-05T08:56:27.021313Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:56:27.021313Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gCEvSPxhSmdhhWPjVUaRx2rWU3n1P1MSH6OtmQyrFkmeW1BekxkzH0xhMpbH6MZkCczsNaAwbQcDytDO8DnwAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:56:27.021670Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.09032","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3bf23dbdb2fc30e29c63618a7bdb98881420922cbc2d91a377b8d0d29ceae7fa","sha256:21d568b022a3eb9d144799d5c6311bcc40f8cc1b9f98f7f9b90e85caf9f70e78"],"state_sha256":"b1edf12b17b6307138e58bd07baaf29239c07e70f6296c68c1c1936b13f25121"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rskFN4VEnkZG5NdShMXcDZ+qL2cRn73Ctn+VAHpskvUWZ38nSlN13+dh+TirkbEj5o01miDG1DNrQuvdmzcfAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T04:36:52.367049Z","bundle_sha256":"d2c073779268fd6f21cc5f4b17f84402286d22c7eb84a7600bb82c88c1402dd0"}}