{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:4QOTVRRHYQWXVOER6QXOESAZTE","short_pith_number":"pith:4QOTVRRH","canonical_record":{"source":{"id":"1908.02205","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:13:14Z","cross_cats_sorted":[],"title_canon_sha256":"6e62af78a971e3cd65fe36be841a0666205cc5212ab428f916350abc9eb930f2","abstract_canon_sha256":"46851c2b0ece08ea01ac8f9acae35c5cc967fe134c3da26e126f802f67d3ab0e"},"schema_version":"1.0"},"canonical_sha256":"e41d3ac627c42d7ab891f42ee248199924c6a643441fd08e4aa57d9adc2dd948","source":{"kind":"arxiv","id":"1908.02205","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.02205","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"arxiv_version","alias_value":"1908.02205v1","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.02205","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_12","alias_value":"4QOTVRRHYQWX","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_16","alias_value":"4QOTVRRHYQWXVOER","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_8","alias_value":"4QOTVRRH","created_at":"2026-07-05T03:54:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:4QOTVRRHYQWXVOER6QXOESAZTE","target":"record","payload":{"canonical_record":{"source":{"id":"1908.02205","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:13:14Z","cross_cats_sorted":[],"title_canon_sha256":"6e62af78a971e3cd65fe36be841a0666205cc5212ab428f916350abc9eb930f2","abstract_canon_sha256":"46851c2b0ece08ea01ac8f9acae35c5cc967fe134c3da26e126f802f67d3ab0e"},"schema_version":"1.0"},"canonical_sha256":"e41d3ac627c42d7ab891f42ee248199924c6a643441fd08e4aa57d9adc2dd948","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:54:16.333501Z","signature_b64":"5KLgam/ZPEZZc+JTFsLstChW3cpIp7ukSEF4fXXZYvwyF16HkDhAeFx0WhEnXN8m0bqH+bxdY1D3tb+5h+7xDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e41d3ac627c42d7ab891f42ee248199924c6a643441fd08e4aa57d9adc2dd948","last_reissued_at":"2026-07-05T03:54:16.333061Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:54:16.333061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.02205","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LBZOg1HcCohVWeqA2uJyKLJEKiL5qFw87JoeS5vWJK3xtOMK3SYwP819/GbV9chp/EDY4UMIa3yx7QrVMaUIBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:31:47.604774Z"},"content_sha256":"2fef33d93d3b910872a121380616c31d9743c4d8c8139560a6f182c5d6af5ad7","schema_version":"1.0","event_id":"sha256:2fef33d93d3b910872a121380616c31d9743c4d8c8139560a6f182c5d6af5ad7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:4QOTVRRHYQWXVOER6QXOESAZTE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"After You, Please: Browser Extensions Order Attacks and Countermeasures","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gerardo Schneider, Juan Tapiador, Pablo Picazo-Sanchez","submitted_at":"2019-08-06T15:13:14Z","abstract_excerpt":"Browser extensions are small applications executed in the browser context that provide additional capabilities and enrich the user experience while surfing the web. The acceptance of extensions in current browsers is unquestionable. For instance, Chrome's official extension repository has more than 63,000 extensions, with some of them having more than 10M users. When installed, extensions are pushed into an internal queue within the browser. The order in which each extension executes depends on a number of factors, including their relative installation times. In this paper, we demonstrate how "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.02205","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.02205/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:54:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gKMFyw4yPrYnMCwnhPhH8D5k3kelByZ/9kAqWV4pKBRaaTM4Ax6kX/QZvr6AJK66Ec7IHp6MfzvYwCouAZ5ZCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:31:47.605528Z"},"content_sha256":"fc9a016a7f38c7002ecc51f46d48b5cd1773ff8ae4adf5d8e9b5de33e3129ec2","schema_version":"1.0","event_id":"sha256:fc9a016a7f38c7002ecc51f46d48b5cd1773ff8ae4adf5d8e9b5de33e3129ec2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4QOTVRRHYQWXVOER6QXOESAZTE/bundle.json","state_url":"https://pith.science/pith/4QOTVRRHYQWXVOER6QXOESAZTE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4QOTVRRHYQWXVOER6QXOESAZTE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T11:31:47Z","links":{"resolver":"https://pith.science/pith/4QOTVRRHYQWXVOER6QXOESAZTE","bundle":"https://pith.science/pith/4QOTVRRHYQWXVOER6QXOESAZTE/bundle.json","state":"https://pith.science/pith/4QOTVRRHYQWXVOER6QXOESAZTE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4QOTVRRHYQWXVOER6QXOESAZTE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:4QOTVRRHYQWXVOER6QXOESAZTE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"46851c2b0ece08ea01ac8f9acae35c5cc967fe134c3da26e126f802f67d3ab0e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:13:14Z","title_canon_sha256":"6e62af78a971e3cd65fe36be841a0666205cc5212ab428f916350abc9eb930f2"},"schema_version":"1.0","source":{"id":"1908.02205","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.02205","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"arxiv_version","alias_value":"1908.02205v1","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.02205","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_12","alias_value":"4QOTVRRHYQWX","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_16","alias_value":"4QOTVRRHYQWXVOER","created_at":"2026-07-05T03:54:16Z"},{"alias_kind":"pith_short_8","alias_value":"4QOTVRRH","created_at":"2026-07-05T03:54:16Z"}],"graph_snapshots":[{"event_id":"sha256:fc9a016a7f38c7002ecc51f46d48b5cd1773ff8ae4adf5d8e9b5de33e3129ec2","target":"graph","created_at":"2026-07-05T03:54:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.02205/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Browser extensions are small applications executed in the browser context that provide additional capabilities and enrich the user experience while surfing the web. The acceptance of extensions in current browsers is unquestionable. For instance, Chrome's official extension repository has more than 63,000 extensions, with some of them having more than 10M users. When installed, extensions are pushed into an internal queue within the browser. The order in which each extension executes depends on a number of factors, including their relative installation times. In this paper, we demonstrate how ","authors_text":"Gerardo Schneider, Juan Tapiador, Pablo Picazo-Sanchez","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:13:14Z","title":"After You, Please: Browser Extensions Order Attacks and Countermeasures"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.02205","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fef33d93d3b910872a121380616c31d9743c4d8c8139560a6f182c5d6af5ad7","target":"record","created_at":"2026-07-05T03:54:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"46851c2b0ece08ea01ac8f9acae35c5cc967fe134c3da26e126f802f67d3ab0e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:13:14Z","title_canon_sha256":"6e62af78a971e3cd65fe36be841a0666205cc5212ab428f916350abc9eb930f2"},"schema_version":"1.0","source":{"id":"1908.02205","kind":"arxiv","version":1}},"canonical_sha256":"e41d3ac627c42d7ab891f42ee248199924c6a643441fd08e4aa57d9adc2dd948","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e41d3ac627c42d7ab891f42ee248199924c6a643441fd08e4aa57d9adc2dd948","first_computed_at":"2026-07-05T03:54:16.333061Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:54:16.333061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5KLgam/ZPEZZc+JTFsLstChW3cpIp7ukSEF4fXXZYvwyF16HkDhAeFx0WhEnXN8m0bqH+bxdY1D3tb+5h+7xDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:54:16.333501Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.02205","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fef33d93d3b910872a121380616c31d9743c4d8c8139560a6f182c5d6af5ad7","sha256:fc9a016a7f38c7002ecc51f46d48b5cd1773ff8ae4adf5d8e9b5de33e3129ec2"],"state_sha256":"c1e272fbc0727bcc9adea6f4c7e103527c4653762e2ccd9ddadab125a7d2247c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IVh+oxAb3Sjqkq7kKEafMPrbcDaNx12qbvLgtoiCuguv9Pz6eHY1cd2asW9NcsQ3gwCTbHNMA8YEJ87J8n+SAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T11:31:47.613653Z","bundle_sha256":"3eeb228d1dc11fa7eaa373080c4280aedaa1dea87c1940b291de8022b1126fbf"}}