{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:7S5UBAINYE4PHAS5COLLD2MP6M","short_pith_number":"pith:7S5UBAIN","canonical_record":{"source":{"id":"1502.07373","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-02-25T21:25:49Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"86770c43a3b3d3fc2ccca9dbd3abbc7b84a6bf3936c6568f2f578a5209bb58b1","abstract_canon_sha256":"0748c0a9f9041f2445455a616c243e6b1de9e261660f6550be397433f9123485"},"schema_version":"1.0"},"canonical_sha256":"fcbb40810dc138f3825d1396b1e98ff323b123a421588c28f186cc7e280748a8","source":{"kind":"arxiv","id":"1502.07373","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1502.07373","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"arxiv_version","alias_value":"1502.07373v2","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1502.07373","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"pith_short_12","alias_value":"7S5UBAINYE4P","created_at":"2026-05-18T12:29:10Z"},{"alias_kind":"pith_short_16","alias_value":"7S5UBAINYE4PHAS5","created_at":"2026-05-18T12:29:10Z"},{"alias_kind":"pith_short_8","alias_value":"7S5UBAIN","created_at":"2026-05-18T12:29:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:7S5UBAINYE4PHAS5COLLD2MP6M","target":"record","payload":{"canonical_record":{"source":{"id":"1502.07373","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-02-25T21:25:49Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"86770c43a3b3d3fc2ccca9dbd3abbc7b84a6bf3936c6568f2f578a5209bb58b1","abstract_canon_sha256":"0748c0a9f9041f2445455a616c243e6b1de9e261660f6550be397433f9123485"},"schema_version":"1.0"},"canonical_sha256":"fcbb40810dc138f3825d1396b1e98ff323b123a421588c28f186cc7e280748a8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:25:55.410905Z","signature_b64":"JtMUS/nKjcI6G49+CNiCJ2WfTtxOSBUcHdIHYGX3NSzhhg1Z/jhF2rPPGL/6mweTHOhnCvB+YWIBTk1ehrRCCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fcbb40810dc138f3825d1396b1e98ff323b123a421588c28f186cc7e280748a8","last_reissued_at":"2026-05-18T02:25:55.410515Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:25:55.410515Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1502.07373","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:25:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8F+H7o01Ezhvrl2Qc7e1Feeo0bDwNfORzy3NvtNNGiCLKQ5UJWCsfBU51y/zwhrhYDsLonOWORy41FeA8QLpDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T22:31:31.718851Z"},"content_sha256":"d06a23d820f11e572a2d2cf06799be74d515a20d4ef06682468c8e5d0c94a5b1","schema_version":"1.0","event_id":"sha256:d06a23d820f11e572a2d2cf06799be74d515a20d4ef06682468c8e5d0c94a5b1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:7S5UBAINYE4PHAS5COLLD2MP6M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Spy in the Sandbox -- Practical Cache Attacks in Javascript","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Angelos D. Keromytis, Simha Sethumadhavan, Vasileios P. Kemerlis, Yossef Oren","submitted_at":"2015-02-25T21:25:49Z","abstract_excerpt":"We present the first micro-architectural side-channel attack which runs entirely in the browser. In contrast to other works in this genre, this attack does not require the attacker to install any software on the victim's machine -- to facilitate the attack, the victim needs only to browse to an untrusted webpage with attacker-controlled content. This makes the attack model highly scalable and extremely relevant and practical to today's web, especially since most desktop browsers currently accessing the Internet are vulnerable to this attack. Our attack, which is an extension of the last-level "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1502.07373","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:25:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FEZHiN4MBM+oMAoMltKZeUjvrNut85nd9VZQbNUlh75CVsPl/D+YardMYyijWG2G5zJYh04U8ImEHTnOng39Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-08T22:31:31.719192Z"},"content_sha256":"f651e957905d9b5753e94b683b6cc09b65c59a279ea55123c407ee25bd22f39d","schema_version":"1.0","event_id":"sha256:f651e957905d9b5753e94b683b6cc09b65c59a279ea55123c407ee25bd22f39d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7S5UBAINYE4PHAS5COLLD2MP6M/bundle.json","state_url":"https://pith.science/pith/7S5UBAINYE4PHAS5COLLD2MP6M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7S5UBAINYE4PHAS5COLLD2MP6M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-08T22:31:31Z","links":{"resolver":"https://pith.science/pith/7S5UBAINYE4PHAS5COLLD2MP6M","bundle":"https://pith.science/pith/7S5UBAINYE4PHAS5COLLD2MP6M/bundle.json","state":"https://pith.science/pith/7S5UBAINYE4PHAS5COLLD2MP6M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7S5UBAINYE4PHAS5COLLD2MP6M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:7S5UBAINYE4PHAS5COLLD2MP6M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0748c0a9f9041f2445455a616c243e6b1de9e261660f6550be397433f9123485","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-02-25T21:25:49Z","title_canon_sha256":"86770c43a3b3d3fc2ccca9dbd3abbc7b84a6bf3936c6568f2f578a5209bb58b1"},"schema_version":"1.0","source":{"id":"1502.07373","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1502.07373","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"arxiv_version","alias_value":"1502.07373v2","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1502.07373","created_at":"2026-05-18T02:25:55Z"},{"alias_kind":"pith_short_12","alias_value":"7S5UBAINYE4P","created_at":"2026-05-18T12:29:10Z"},{"alias_kind":"pith_short_16","alias_value":"7S5UBAINYE4PHAS5","created_at":"2026-05-18T12:29:10Z"},{"alias_kind":"pith_short_8","alias_value":"7S5UBAIN","created_at":"2026-05-18T12:29:10Z"}],"graph_snapshots":[{"event_id":"sha256:f651e957905d9b5753e94b683b6cc09b65c59a279ea55123c407ee25bd22f39d","target":"graph","created_at":"2026-05-18T02:25:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We present the first micro-architectural side-channel attack which runs entirely in the browser. In contrast to other works in this genre, this attack does not require the attacker to install any software on the victim's machine -- to facilitate the attack, the victim needs only to browse to an untrusted webpage with attacker-controlled content. This makes the attack model highly scalable and extremely relevant and practical to today's web, especially since most desktop browsers currently accessing the Internet are vulnerable to this attack. Our attack, which is an extension of the last-level ","authors_text":"Angelos D. Keromytis, Simha Sethumadhavan, Vasileios P. Kemerlis, Yossef Oren","cross_cats":["cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-02-25T21:25:49Z","title":"The Spy in the Sandbox -- Practical Cache Attacks in Javascript"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1502.07373","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d06a23d820f11e572a2d2cf06799be74d515a20d4ef06682468c8e5d0c94a5b1","target":"record","created_at":"2026-05-18T02:25:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0748c0a9f9041f2445455a616c243e6b1de9e261660f6550be397433f9123485","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-02-25T21:25:49Z","title_canon_sha256":"86770c43a3b3d3fc2ccca9dbd3abbc7b84a6bf3936c6568f2f578a5209bb58b1"},"schema_version":"1.0","source":{"id":"1502.07373","kind":"arxiv","version":2}},"canonical_sha256":"fcbb40810dc138f3825d1396b1e98ff323b123a421588c28f186cc7e280748a8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fcbb40810dc138f3825d1396b1e98ff323b123a421588c28f186cc7e280748a8","first_computed_at":"2026-05-18T02:25:55.410515Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:25:55.410515Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JtMUS/nKjcI6G49+CNiCJ2WfTtxOSBUcHdIHYGX3NSzhhg1Z/jhF2rPPGL/6mweTHOhnCvB+YWIBTk1ehrRCCQ==","signature_status":"signed_v1","signed_at":"2026-05-18T02:25:55.410905Z","signed_message":"canonical_sha256_bytes"},"source_id":"1502.07373","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d06a23d820f11e572a2d2cf06799be74d515a20d4ef06682468c8e5d0c94a5b1","sha256:f651e957905d9b5753e94b683b6cc09b65c59a279ea55123c407ee25bd22f39d"],"state_sha256":"c854d9add2cdbc1c2ddb45650ecc5894c3693d75bc70e47864123ac08d97d0a4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J6pNyekCGQ+p+HJyUmsuLDBeI83pTvu1onLIkmI1Hiu/dsCXRoU0XGsfMi5qYipF3dJ1yspHSbokHDKpcppmAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-08T22:31:31.721065Z","bundle_sha256":"9a149722e9b683f99e0f9188e871e1ec74b8c432fbe1d36ab246e9b96bb11578"}}