{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5Y7KMKB2BBQ7CRTMQIXTJOBUZG","short_pith_number":"pith:5Y7KMKB2","canonical_record":{"source":{"id":"2306.09708","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T09:21:51Z","cross_cats_sorted":[],"title_canon_sha256":"3ab78fb278ffea64df3de9a2626e71f4cb5afd25717227ba141b84d03fb46d01","abstract_canon_sha256":"5102872b7bc7da483bb2699248f29dc706bd00e65668ea0c2a3b8d2c533d7bc3"},"schema_version":"1.0"},"canonical_sha256":"ee3ea6283a0861f1466c822f34b834c997695482f5af32989086b172f9c47dc1","source":{"kind":"arxiv","id":"2306.09708","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09708","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09708v3","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09708","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_12","alias_value":"5Y7KMKB2BBQ7","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_16","alias_value":"5Y7KMKB2BBQ7CRTM","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_8","alias_value":"5Y7KMKB2","created_at":"2026-07-05T06:52:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5Y7KMKB2BBQ7CRTMQIXTJOBUZG","target":"record","payload":{"canonical_record":{"source":{"id":"2306.09708","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T09:21:51Z","cross_cats_sorted":[],"title_canon_sha256":"3ab78fb278ffea64df3de9a2626e71f4cb5afd25717227ba141b84d03fb46d01","abstract_canon_sha256":"5102872b7bc7da483bb2699248f29dc706bd00e65668ea0c2a3b8d2c533d7bc3"},"schema_version":"1.0"},"canonical_sha256":"ee3ea6283a0861f1466c822f34b834c997695482f5af32989086b172f9c47dc1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:52:04.977892Z","signature_b64":"d96tdDjUJx2AurIRXkM9AKCndxlxry6B2yguR/rv5KVbmznml82pkUZmaD5ofgXGOgPGiEqiAPqcYzvR5rkeAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee3ea6283a0861f1466c822f34b834c997695482f5af32989086b172f9c47dc1","last_reissued_at":"2026-07-05T06:52:04.977497Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:52:04.977497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.09708","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TGG8pxzvp2wiKr6EaUzNE9xNDIRUQduB2AK8hhkO/5VQeNstuXOkLRJho9Tz4Hnh3ljlUWsOKkYoHEnGmp2PDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T12:22:53.885972Z"},"content_sha256":"ede5cdfdc6975381ca5e610eae6bb7abcc930e57b9cc8b323a74337bc8da3375","schema_version":"1.0","event_id":"sha256:ede5cdfdc6975381ca5e610eae6bb7abcc930e57b9cc8b323a74337bc8da3375"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5Y7KMKB2BBQ7CRTMQIXTJOBUZG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"\"We've Disabled MFA for You\": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Krause, Lucy Simko, Nicolas Huaman, Sabrina Amft, Sandra H\\\"oltervennhoff, Sascha Fahl, Yasemin Acar","submitted_at":"2023-06-16T09:21:51Z","abstract_excerpt":"Multi-Factor Authentication is intended to strengthen the security of password-based authentication by adding another factor, such as hardware tokens or one-time passwords using mobile apps. However, this increased authentication security comes with potential drawbacks that can lead to account and asset loss. If users lose access to their additional authentication factors for any reason, they will be locked out of their accounts. Consequently, services that provide Multi-Factor Authentication should deploy procedures to allow their users to recover from losing access to their additional factor"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09708","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.09708/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:52:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"w1yPvmlNicDsNM90F0MWp9zRhkr3aQfuhHHEJ5eaHRLFSQJ+PfKY6Vz8HZuSr+Gqdpak+LvkltNATYZJwomjBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T12:22:53.886817Z"},"content_sha256":"54c1213ef91bd9b5b674e6c8cdc885a2067a67110b5f091acf9af401b455893e","schema_version":"1.0","event_id":"sha256:54c1213ef91bd9b5b674e6c8cdc885a2067a67110b5f091acf9af401b455893e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/bundle.json","state_url":"https://pith.science/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T12:22:53Z","links":{"resolver":"https://pith.science/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG","bundle":"https://pith.science/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/bundle.json","state":"https://pith.science/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5Y7KMKB2BBQ7CRTMQIXTJOBUZG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5Y7KMKB2BBQ7CRTMQIXTJOBUZG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5102872b7bc7da483bb2699248f29dc706bd00e65668ea0c2a3b8d2c533d7bc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T09:21:51Z","title_canon_sha256":"3ab78fb278ffea64df3de9a2626e71f4cb5afd25717227ba141b84d03fb46d01"},"schema_version":"1.0","source":{"id":"2306.09708","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.09708","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"arxiv_version","alias_value":"2306.09708v3","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.09708","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_12","alias_value":"5Y7KMKB2BBQ7","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_16","alias_value":"5Y7KMKB2BBQ7CRTM","created_at":"2026-07-05T06:52:04Z"},{"alias_kind":"pith_short_8","alias_value":"5Y7KMKB2","created_at":"2026-07-05T06:52:04Z"}],"graph_snapshots":[{"event_id":"sha256:54c1213ef91bd9b5b674e6c8cdc885a2067a67110b5f091acf9af401b455893e","target":"graph","created_at":"2026-07-05T06:52:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.09708/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-Factor Authentication is intended to strengthen the security of password-based authentication by adding another factor, such as hardware tokens or one-time passwords using mobile apps. However, this increased authentication security comes with potential drawbacks that can lead to account and asset loss. If users lose access to their additional authentication factors for any reason, they will be locked out of their accounts. Consequently, services that provide Multi-Factor Authentication should deploy procedures to allow their users to recover from losing access to their additional factor","authors_text":"Alexander Krause, Lucy Simko, Nicolas Huaman, Sabrina Amft, Sandra H\\\"oltervennhoff, Sascha Fahl, Yasemin Acar","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T09:21:51Z","title":"\"We've Disabled MFA for You\": An Evaluation of the Security and Usability of Multi-Factor Authentication Recovery Deployments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.09708","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ede5cdfdc6975381ca5e610eae6bb7abcc930e57b9cc8b323a74337bc8da3375","target":"record","created_at":"2026-07-05T06:52:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5102872b7bc7da483bb2699248f29dc706bd00e65668ea0c2a3b8d2c533d7bc3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-16T09:21:51Z","title_canon_sha256":"3ab78fb278ffea64df3de9a2626e71f4cb5afd25717227ba141b84d03fb46d01"},"schema_version":"1.0","source":{"id":"2306.09708","kind":"arxiv","version":3}},"canonical_sha256":"ee3ea6283a0861f1466c822f34b834c997695482f5af32989086b172f9c47dc1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee3ea6283a0861f1466c822f34b834c997695482f5af32989086b172f9c47dc1","first_computed_at":"2026-07-05T06:52:04.977497Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:52:04.977497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d96tdDjUJx2AurIRXkM9AKCndxlxry6B2yguR/rv5KVbmznml82pkUZmaD5ofgXGOgPGiEqiAPqcYzvR5rkeAg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:52:04.977892Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.09708","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ede5cdfdc6975381ca5e610eae6bb7abcc930e57b9cc8b323a74337bc8da3375","sha256:54c1213ef91bd9b5b674e6c8cdc885a2067a67110b5f091acf9af401b455893e"],"state_sha256":"f95632fbb91956e721e7862a5cde9249573d502dadab9371a694931281715b7e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/oFHJV9zypvLHmO+y7/IVLUyCm4GIbN6I4GcYLmpRkz69NLWhh7PtaxJDrexlqaAF1j8afXGRfXL9oG+OoB/BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T12:22:53.892421Z","bundle_sha256":"3a802a2bc65d1f9661cf1e0c44b8dbf8303a78f580f489fac2d681743f04078f"}}