{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:5VF54HMMPPRFERHIM3KV5OYTW5","short_pith_number":"pith:5VF54HMM","canonical_record":{"source":{"id":"1608.01492","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-04T10:50:01Z","cross_cats_sorted":[],"title_canon_sha256":"72d7e6bcbc0089a50243fd6cddb22fb1b390567d925ce01fb34f653f5a4bfbc6","abstract_canon_sha256":"a9b6ca0f2d12eff7ca668fe2a072303cdf8b4f96dbb79c45b60b4698f68bde5c"},"schema_version":"1.0"},"canonical_sha256":"ed4bde1d8c7be25244e866d55ebb13b75a963bd90d97e07060637daa823c2948","source":{"kind":"arxiv","id":"1608.01492","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.01492","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"arxiv_version","alias_value":"1608.01492v1","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.01492","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"pith_short_12","alias_value":"5VF54HMMPPRF","created_at":"2026-05-18T12:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"5VF54HMMPPRFERHI","created_at":"2026-05-18T12:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"5VF54HMM","created_at":"2026-05-18T12:30:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:5VF54HMMPPRFERHIM3KV5OYTW5","target":"record","payload":{"canonical_record":{"source":{"id":"1608.01492","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-04T10:50:01Z","cross_cats_sorted":[],"title_canon_sha256":"72d7e6bcbc0089a50243fd6cddb22fb1b390567d925ce01fb34f653f5a4bfbc6","abstract_canon_sha256":"a9b6ca0f2d12eff7ca668fe2a072303cdf8b4f96dbb79c45b60b4698f68bde5c"},"schema_version":"1.0"},"canonical_sha256":"ed4bde1d8c7be25244e866d55ebb13b75a963bd90d97e07060637daa823c2948","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:09:52.319126Z","signature_b64":"1xXPE7UWu84jVx5vauY0JP4lj7bwoY0GoDEEH47MuoAIkxr1mpNqU8L6Ee1I1D96j1yZ65KAbCqCx57oBHZFBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed4bde1d8c7be25244e866d55ebb13b75a963bd90d97e07060637daa823c2948","last_reissued_at":"2026-05-18T01:09:52.318479Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:09:52.318479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1608.01492","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:09:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M4rSE6go9cYG/H/JjBBVlPWUyFupLLK41jjHlmJiopgYEu8oB5SABOuP6RMg2Q2QI+yp4w1bsotmeCcOX1XRDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T05:24:38.050233Z"},"content_sha256":"4e599d6d5219584444c0aee11d7e79ac44665533e40a8fd9b3ccdd3f1d016874","schema_version":"1.0","event_id":"sha256:4e599d6d5219584444c0aee11d7e79ac44665533e40a8fd9b3ccdd3f1d016874"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:5VF54HMMPPRFERHIM3KV5OYTW5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Personal Information Leakage During Password Recovery of Internet Services","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dov Shirtz, Eyal Shemer, Mordechai Guri, Yuval Elovici","submitted_at":"2016-08-04T10:50:01Z","abstract_excerpt":"In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.01492","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:09:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J2FsFas3HIKr3q9FWEsK7sqkmVTJknPzCuSkrPqVXbg7JQLMlDZXdIIObGmxInE56WKamqfz8us9LoBfwy70Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T05:24:38.051008Z"},"content_sha256":"0691d8e4ec0ec53aebafaaa1a1ea476cb30d877a4f86b776660bb136c75afbcb","schema_version":"1.0","event_id":"sha256:0691d8e4ec0ec53aebafaaa1a1ea476cb30d877a4f86b776660bb136c75afbcb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5VF54HMMPPRFERHIM3KV5OYTW5/bundle.json","state_url":"https://pith.science/pith/5VF54HMMPPRFERHIM3KV5OYTW5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5VF54HMMPPRFERHIM3KV5OYTW5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T05:24:38Z","links":{"resolver":"https://pith.science/pith/5VF54HMMPPRFERHIM3KV5OYTW5","bundle":"https://pith.science/pith/5VF54HMMPPRFERHIM3KV5OYTW5/bundle.json","state":"https://pith.science/pith/5VF54HMMPPRFERHIM3KV5OYTW5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5VF54HMMPPRFERHIM3KV5OYTW5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:5VF54HMMPPRFERHIM3KV5OYTW5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a9b6ca0f2d12eff7ca668fe2a072303cdf8b4f96dbb79c45b60b4698f68bde5c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-04T10:50:01Z","title_canon_sha256":"72d7e6bcbc0089a50243fd6cddb22fb1b390567d925ce01fb34f653f5a4bfbc6"},"schema_version":"1.0","source":{"id":"1608.01492","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.01492","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"arxiv_version","alias_value":"1608.01492v1","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.01492","created_at":"2026-05-18T01:09:52Z"},{"alias_kind":"pith_short_12","alias_value":"5VF54HMMPPRF","created_at":"2026-05-18T12:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"5VF54HMMPPRFERHI","created_at":"2026-05-18T12:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"5VF54HMM","created_at":"2026-05-18T12:30:01Z"}],"graph_snapshots":[{"event_id":"sha256:0691d8e4ec0ec53aebafaaa1a1ea476cb30d877a4f86b776660bb136c75afbcb","target":"graph","created_at":"2026-05-18T01:09:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this paper we examine the standard password recovery process of large Internet services such as Gmail, Facebook, and Twitter. Although most of these services try to maintain user privacy, with regard to registration information and other personal information provided by the user, we demonstrate that personal information can still be obtained by unauthorized individuals or attackers. This information includes the full (or partial) email address, phone number, friends list, address, etc. We examine different scenarios and demonstrate how the details revealed in the password recovery process c","authors_text":"Dov Shirtz, Eyal Shemer, Mordechai Guri, Yuval Elovici","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-04T10:50:01Z","title":"Personal Information Leakage During Password Recovery of Internet Services"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.01492","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4e599d6d5219584444c0aee11d7e79ac44665533e40a8fd9b3ccdd3f1d016874","target":"record","created_at":"2026-05-18T01:09:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a9b6ca0f2d12eff7ca668fe2a072303cdf8b4f96dbb79c45b60b4698f68bde5c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-04T10:50:01Z","title_canon_sha256":"72d7e6bcbc0089a50243fd6cddb22fb1b390567d925ce01fb34f653f5a4bfbc6"},"schema_version":"1.0","source":{"id":"1608.01492","kind":"arxiv","version":1}},"canonical_sha256":"ed4bde1d8c7be25244e866d55ebb13b75a963bd90d97e07060637daa823c2948","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed4bde1d8c7be25244e866d55ebb13b75a963bd90d97e07060637daa823c2948","first_computed_at":"2026-05-18T01:09:52.318479Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:09:52.318479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1xXPE7UWu84jVx5vauY0JP4lj7bwoY0GoDEEH47MuoAIkxr1mpNqU8L6Ee1I1D96j1yZ65KAbCqCx57oBHZFBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T01:09:52.319126Z","signed_message":"canonical_sha256_bytes"},"source_id":"1608.01492","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4e599d6d5219584444c0aee11d7e79ac44665533e40a8fd9b3ccdd3f1d016874","sha256:0691d8e4ec0ec53aebafaaa1a1ea476cb30d877a4f86b776660bb136c75afbcb"],"state_sha256":"5415ffccd134d54605b2bd99167b09611406a59b1843409f7c8320eaeb763df2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ooUnbWtKMt4hwpa5tGQavBQkUq34y2+jk0H8aObh/y7a23g8uKjaMUf/4qYzlz5Qvkhjgm8PLiOZXZGXri5bCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T05:24:38.054438Z","bundle_sha256":"60b04f8e52fad45489c8b4e344c5abee4bdd151094047f935005113c6ad69351"}}