{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:57IQQXUFV6AQW4TFGEGQWQSZX3","short_pith_number":"pith:57IQQXUF","canonical_record":{"source":{"id":"1712.03327","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-12-09T01:37:34Z","cross_cats_sorted":[],"title_canon_sha256":"d0561c9673b34e8f4502c5d3392a72dca92305cade475817676d3633e4043646","abstract_canon_sha256":"34421e9370e6d3e24db37b7ba396251c7ce01f7dda914a534888789d9b7aa6da"},"schema_version":"1.0"},"canonical_sha256":"efd1085e85af810b7265310d0b4259befad5fa22d6a8228807cdf6346bebb8d2","source":{"kind":"arxiv","id":"1712.03327","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1712.03327","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"arxiv_version","alias_value":"1712.03327v3","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1712.03327","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_12","alias_value":"57IQQXUFV6AQ","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_16","alias_value":"57IQQXUFV6AQW4TF","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_8","alias_value":"57IQQXUF","created_at":"2026-07-05T00:18:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:57IQQXUFV6AQW4TFGEGQWQSZX3","target":"record","payload":{"canonical_record":{"source":{"id":"1712.03327","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-12-09T01:37:34Z","cross_cats_sorted":[],"title_canon_sha256":"d0561c9673b34e8f4502c5d3392a72dca92305cade475817676d3633e4043646","abstract_canon_sha256":"34421e9370e6d3e24db37b7ba396251c7ce01f7dda914a534888789d9b7aa6da"},"schema_version":"1.0"},"canonical_sha256":"efd1085e85af810b7265310d0b4259befad5fa22d6a8228807cdf6346bebb8d2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:18:48.622839Z","signature_b64":"EqXyfy2O9vO4rqtXMsGnLyjOgvwmcAYy9DM7uw4MBDNNyv32e2SuWSXHn0tjDmGOZU74lXZU9U2amNrVoG1eCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"efd1085e85af810b7265310d0b4259befad5fa22d6a8228807cdf6346bebb8d2","last_reissued_at":"2026-07-05T00:18:48.622407Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:18:48.622407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1712.03327","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:18:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ylALgAgonCWVBmA8/xlv68GJ06P5Miz29FiEUjXcnUqcxXflWXaBV3UXYYv9teDgzvIrLtocgo4LhQkUc/zBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T21:53:50.558969Z"},"content_sha256":"fab8fa5a81911ab27ca854709e7b5f16bd513b12911c2cbb33a0f8b4459d95ca","schema_version":"1.0","event_id":"sha256:fab8fa5a81911ab27ca854709e7b5f16bd513b12911c2cbb33a0f8b4459d95ca"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:57IQQXUFV6AQW4TFGEGQWQSZX3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Insecurity of Home Digital Voice Assistants -- Amazon Alexa as a Case Study","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alex X. Liu, Chi-Yu Li, Guan-Hua Tu, Kamran Ali, Tian Xie, Xinyu Lei","submitted_at":"2017-12-09T01:37:34Z","abstract_excerpt":"Home Digital Voice Assistants (HDVAs) are getting popular in recent years. Users can control smart devices and get living assistance through those HDVAs (e.g., Amazon Alexa, Google Home) using voice. In this work, we study the insecurity of HDVA service by using Amazon Alexa as a case study. We disclose three security vulnerabilities which root in the insecure access control of Alexa services. We then exploit them to devise two proof-of-concept attacks, home burglary and fake order, where the adversary can remotely command the victim's Alexa device to open a door or place an order from Amazon."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1712.03327","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1712.03327/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:18:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T8qvBhaKJ29b3Tuw4JiY0hZ7qfMNLlVQysI51d1owkgn3YNu14zWCWeObCIYe0PzXvhpZYoO0qlkB7WQVPV7Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T21:53:50.559837Z"},"content_sha256":"87036c68bdc914ff5376ab2983ef8a26a6065377b63979c7215d9bf91da81e4f","schema_version":"1.0","event_id":"sha256:87036c68bdc914ff5376ab2983ef8a26a6065377b63979c7215d9bf91da81e4f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/bundle.json","state_url":"https://pith.science/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T21:53:50Z","links":{"resolver":"https://pith.science/pith/57IQQXUFV6AQW4TFGEGQWQSZX3","bundle":"https://pith.science/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/bundle.json","state":"https://pith.science/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/57IQQXUFV6AQW4TFGEGQWQSZX3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:57IQQXUFV6AQW4TFGEGQWQSZX3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"34421e9370e6d3e24db37b7ba396251c7ce01f7dda914a534888789d9b7aa6da","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-12-09T01:37:34Z","title_canon_sha256":"d0561c9673b34e8f4502c5d3392a72dca92305cade475817676d3633e4043646"},"schema_version":"1.0","source":{"id":"1712.03327","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1712.03327","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"arxiv_version","alias_value":"1712.03327v3","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1712.03327","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_12","alias_value":"57IQQXUFV6AQ","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_16","alias_value":"57IQQXUFV6AQW4TF","created_at":"2026-07-05T00:18:48Z"},{"alias_kind":"pith_short_8","alias_value":"57IQQXUF","created_at":"2026-07-05T00:18:48Z"}],"graph_snapshots":[{"event_id":"sha256:87036c68bdc914ff5376ab2983ef8a26a6065377b63979c7215d9bf91da81e4f","target":"graph","created_at":"2026-07-05T00:18:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1712.03327/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Home Digital Voice Assistants (HDVAs) are getting popular in recent years. Users can control smart devices and get living assistance through those HDVAs (e.g., Amazon Alexa, Google Home) using voice. In this work, we study the insecurity of HDVA service by using Amazon Alexa as a case study. We disclose three security vulnerabilities which root in the insecure access control of Alexa services. We then exploit them to devise two proof-of-concept attacks, home burglary and fake order, where the adversary can remotely command the victim's Alexa device to open a door or place an order from Amazon.","authors_text":"Alex X. Liu, Chi-Yu Li, Guan-Hua Tu, Kamran Ali, Tian Xie, Xinyu Lei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-12-09T01:37:34Z","title":"The Insecurity of Home Digital Voice Assistants -- Amazon Alexa as a Case Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1712.03327","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fab8fa5a81911ab27ca854709e7b5f16bd513b12911c2cbb33a0f8b4459d95ca","target":"record","created_at":"2026-07-05T00:18:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"34421e9370e6d3e24db37b7ba396251c7ce01f7dda914a534888789d9b7aa6da","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-12-09T01:37:34Z","title_canon_sha256":"d0561c9673b34e8f4502c5d3392a72dca92305cade475817676d3633e4043646"},"schema_version":"1.0","source":{"id":"1712.03327","kind":"arxiv","version":3}},"canonical_sha256":"efd1085e85af810b7265310d0b4259befad5fa22d6a8228807cdf6346bebb8d2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"efd1085e85af810b7265310d0b4259befad5fa22d6a8228807cdf6346bebb8d2","first_computed_at":"2026-07-05T00:18:48.622407Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:18:48.622407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EqXyfy2O9vO4rqtXMsGnLyjOgvwmcAYy9DM7uw4MBDNNyv32e2SuWSXHn0tjDmGOZU74lXZU9U2amNrVoG1eCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:18:48.622839Z","signed_message":"canonical_sha256_bytes"},"source_id":"1712.03327","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fab8fa5a81911ab27ca854709e7b5f16bd513b12911c2cbb33a0f8b4459d95ca","sha256:87036c68bdc914ff5376ab2983ef8a26a6065377b63979c7215d9bf91da81e4f"],"state_sha256":"177ce5c4e134121156fdb634c87befb06426e7918e06c34be7486b13a7a069e3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cK1z49iLQbLxdKA6/Bf0fAPY0wwfbDG8TyOmgpDwZc7yA98Lb6ceF3tilF6msyG5hwAED/O+ck6iGDKHnY2LBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T21:53:50.565869Z","bundle_sha256":"6d4f9e33ad1ccbdeb347238269532bd839c0761017d4a5544f4694df3fa083f5"}}