{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:4QXL5NPAQTRJH3ZWCIBPUCOYVW","short_pith_number":"pith:4QXL5NPA","canonical_record":{"source":{"id":"1604.02734","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-04-10T21:01:58Z","cross_cats_sorted":[],"title_canon_sha256":"dc15c0137fb10277533d49d73d8ed59b8dbf5d352b01fb12ee28e3ed72ba537f","abstract_canon_sha256":"f1e806f83d21f346c7a8a977bb545126787d6fe2420e2bddb9f702bf43bcffb0"},"schema_version":"1.0"},"canonical_sha256":"e42ebeb5e084e293ef361202fa09d8adb890d6b601daed46f1beb12a37f86792","source":{"kind":"arxiv","id":"1604.02734","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1604.02734","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"arxiv_version","alias_value":"1604.02734v1","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1604.02734","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"pith_short_12","alias_value":"4QXL5NPAQTRJ","created_at":"2026-05-18T12:29:58Z"},{"alias_kind":"pith_short_16","alias_value":"4QXL5NPAQTRJH3ZW","created_at":"2026-05-18T12:29:58Z"},{"alias_kind":"pith_short_8","alias_value":"4QXL5NPA","created_at":"2026-05-18T12:29:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:4QXL5NPAQTRJH3ZWCIBPUCOYVW","target":"record","payload":{"canonical_record":{"source":{"id":"1604.02734","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-04-10T21:01:58Z","cross_cats_sorted":[],"title_canon_sha256":"dc15c0137fb10277533d49d73d8ed59b8dbf5d352b01fb12ee28e3ed72ba537f","abstract_canon_sha256":"f1e806f83d21f346c7a8a977bb545126787d6fe2420e2bddb9f702bf43bcffb0"},"schema_version":"1.0"},"canonical_sha256":"e42ebeb5e084e293ef361202fa09d8adb890d6b601daed46f1beb12a37f86792","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:17:22.264753Z","signature_b64":"NuIqI7EPzQROaQ5cP8pkkYbS3r7Sg0nIkFssbTiq5jyBKY1cHIkkP5svuhdtbnJiyyRzerzBKDrfK576Q4ZkAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e42ebeb5e084e293ef361202fa09d8adb890d6b601daed46f1beb12a37f86792","last_reissued_at":"2026-05-18T01:17:22.264223Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:17:22.264223Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1604.02734","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:17:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7brZ8xgeFnexN5R1ffm/3duV1LhLrt3mJ4diJ4r5Sh299yrbuqWIlQnUPU94LXA7/1OrsrC6wNINDBCRm88JDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T18:49:40.603520Z"},"content_sha256":"685113c006670a6f85b0f09eec6dc7848c149da98ba56217c1f1a6e602410524","schema_version":"1.0","event_id":"sha256:685113c006670a6f85b0f09eec6dc7848c149da98ba56217c1f1a6e602410524"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:4QXL5NPAQTRJH3ZWCIBPUCOYVW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Gone in Six Characters: Short URLs Considered Harmful for Cloud Services","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Martin Georgiev, Vitaly Shmatikov","submitted_at":"2016-04-10T21:01:58Z","abstract_excerpt":"Modern cloud services are designed to encourage and support collaboration. To help users share links to online documents, maps, etc., several services, including cloud storage providers such as Microsoft OneDrive and mapping services such as Google Maps, directly integrate URL shorteners that convert long, unwieldy URLs into short URLs, consisting of a domain such as 1drv.ms or goo.gl and a short token.\n  In this paper, we demonstrate that the space of 5- and 6-character tokens included in short URLs is so small that it can be scanned using brute-force search. Therefore, all online resources t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1604.02734","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:17:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vKoIhnoofNCRYsaJIDntqx5SHcrc4Xf+AfRpplXAeXZW/xkmO9n9QqoH64SM1gK+mE6AQWwZImtvR9m6P2mEAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T18:49:40.604187Z"},"content_sha256":"41f51fd32aa797682ade5a0815448ccc7b0c8b1f4af20f2b9a277c95ae1467e6","schema_version":"1.0","event_id":"sha256:41f51fd32aa797682ade5a0815448ccc7b0c8b1f4af20f2b9a277c95ae1467e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/bundle.json","state_url":"https://pith.science/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-08T18:49:40Z","links":{"resolver":"https://pith.science/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW","bundle":"https://pith.science/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/bundle.json","state":"https://pith.science/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4QXL5NPAQTRJH3ZWCIBPUCOYVW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:4QXL5NPAQTRJH3ZWCIBPUCOYVW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f1e806f83d21f346c7a8a977bb545126787d6fe2420e2bddb9f702bf43bcffb0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-04-10T21:01:58Z","title_canon_sha256":"dc15c0137fb10277533d49d73d8ed59b8dbf5d352b01fb12ee28e3ed72ba537f"},"schema_version":"1.0","source":{"id":"1604.02734","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1604.02734","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"arxiv_version","alias_value":"1604.02734v1","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1604.02734","created_at":"2026-05-18T01:17:22Z"},{"alias_kind":"pith_short_12","alias_value":"4QXL5NPAQTRJ","created_at":"2026-05-18T12:29:58Z"},{"alias_kind":"pith_short_16","alias_value":"4QXL5NPAQTRJH3ZW","created_at":"2026-05-18T12:29:58Z"},{"alias_kind":"pith_short_8","alias_value":"4QXL5NPA","created_at":"2026-05-18T12:29:58Z"}],"graph_snapshots":[{"event_id":"sha256:41f51fd32aa797682ade5a0815448ccc7b0c8b1f4af20f2b9a277c95ae1467e6","target":"graph","created_at":"2026-05-18T01:17:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Modern cloud services are designed to encourage and support collaboration. To help users share links to online documents, maps, etc., several services, including cloud storage providers such as Microsoft OneDrive and mapping services such as Google Maps, directly integrate URL shorteners that convert long, unwieldy URLs into short URLs, consisting of a domain such as 1drv.ms or goo.gl and a short token.\n  In this paper, we demonstrate that the space of 5- and 6-character tokens included in short URLs is so small that it can be scanned using brute-force search. Therefore, all online resources t","authors_text":"Martin Georgiev, Vitaly Shmatikov","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-04-10T21:01:58Z","title":"Gone in Six Characters: Short URLs Considered Harmful for Cloud Services"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1604.02734","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:685113c006670a6f85b0f09eec6dc7848c149da98ba56217c1f1a6e602410524","target":"record","created_at":"2026-05-18T01:17:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f1e806f83d21f346c7a8a977bb545126787d6fe2420e2bddb9f702bf43bcffb0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-04-10T21:01:58Z","title_canon_sha256":"dc15c0137fb10277533d49d73d8ed59b8dbf5d352b01fb12ee28e3ed72ba537f"},"schema_version":"1.0","source":{"id":"1604.02734","kind":"arxiv","version":1}},"canonical_sha256":"e42ebeb5e084e293ef361202fa09d8adb890d6b601daed46f1beb12a37f86792","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e42ebeb5e084e293ef361202fa09d8adb890d6b601daed46f1beb12a37f86792","first_computed_at":"2026-05-18T01:17:22.264223Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:17:22.264223Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NuIqI7EPzQROaQ5cP8pkkYbS3r7Sg0nIkFssbTiq5jyBKY1cHIkkP5svuhdtbnJiyyRzerzBKDrfK576Q4ZkAw==","signature_status":"signed_v1","signed_at":"2026-05-18T01:17:22.264753Z","signed_message":"canonical_sha256_bytes"},"source_id":"1604.02734","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:685113c006670a6f85b0f09eec6dc7848c149da98ba56217c1f1a6e602410524","sha256:41f51fd32aa797682ade5a0815448ccc7b0c8b1f4af20f2b9a277c95ae1467e6"],"state_sha256":"9746b874bff4cce43c1ccc8ae14f042426103eb7ff7b76330e0dcd67b7c1ffcf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CJhlPpxB4+f8gUohKQVRLWAPlZmp2D2I5jk5ccghL6gHMaipIY8AKv2bmHaxreJRtVSq4XTdW6EbehuOHv1nCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-08T18:49:40.607808Z","bundle_sha256":"2215d448788cfac068422be81ca5c5e1f2d2425842964b7d91b863dc5216c827"}}