{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:7WYO2PSWWL7Q77CNDH6KW3TA6V","short_pith_number":"pith:7WYO2PSW","canonical_record":{"source":{"id":"1707.00405","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-03T05:35:31Z","cross_cats_sorted":[],"title_canon_sha256":"cc8f9e9fd3c181c5f9f0477af38d3c3c1584c9a593bb1c61752584bd64b8803f","abstract_canon_sha256":"df6890869461c75c7d956b5b10a34de65562c5d4237a06695e3e6c9b2f524d43"},"schema_version":"1.0"},"canonical_sha256":"fdb0ed3e56b2ff0ffc4d19fcab6e60f5458cdc7d1904d412db4671fc5347c4c8","source":{"kind":"arxiv","id":"1707.00405","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1707.00405","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"arxiv_version","alias_value":"1707.00405v1","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1707.00405","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"pith_short_12","alias_value":"7WYO2PSWWL7Q","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_16","alias_value":"7WYO2PSWWL7Q77CN","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_8","alias_value":"7WYO2PSW","created_at":"2026-05-18T12:31:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:7WYO2PSWWL7Q77CNDH6KW3TA6V","target":"record","payload":{"canonical_record":{"source":{"id":"1707.00405","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-03T05:35:31Z","cross_cats_sorted":[],"title_canon_sha256":"cc8f9e9fd3c181c5f9f0477af38d3c3c1584c9a593bb1c61752584bd64b8803f","abstract_canon_sha256":"df6890869461c75c7d956b5b10a34de65562c5d4237a06695e3e6c9b2f524d43"},"schema_version":"1.0"},"canonical_sha256":"fdb0ed3e56b2ff0ffc4d19fcab6e60f5458cdc7d1904d412db4671fc5347c4c8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:41:03.484692Z","signature_b64":"r/C3Ei4GnST6qkCC1q0HRfv6vhr8mclw9vWArVblevaluJ3C4lzMyYSYw83khZc4xG0x046L/6CZZDfvDZ7ZAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fdb0ed3e56b2ff0ffc4d19fcab6e60f5458cdc7d1904d412db4671fc5347c4c8","last_reissued_at":"2026-05-18T00:41:03.483915Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:41:03.483915Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1707.00405","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uh48KTKSePlBBmtKW5DYaROOBy4Q4pec9RF6G9BHCRZZxpxXDtIxD727uJzKm8xbbie5cd/7akSSM5dBxg1fBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T13:46:41.700979Z"},"content_sha256":"bbdbff6fb6cafb06525cb1bff66b981fece5a15117c05c5c3a14b5b557ee07d2","schema_version":"1.0","event_id":"sha256:bbdbff6fb6cafb06525cb1bff66b981fece5a15117c05c5c3a14b5b557ee07d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:7WYO2PSWWL7Q77CNDH6KW3TA6V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Decoupled-IFTTT: Constraining Privilege in Trigger-Action Platforms for the Internet of Things","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amir Rahmati, Atul Prakash, Earlence Fernandes, Jaeyeon Jung","submitted_at":"2017-07-03T05:35:31Z","abstract_excerpt":"Trigger-Action platforms are an emerging class of web-based systems that enable users to create automation rules (or recipes) of the form, \"If there is a smoke alarm, then turn off my oven.\" These platforms stitch together various online services including Internet of Things devices, social networks, and productivity tools by obtaining OAuth tokens on behalf of users. Unfortunately, these platforms also introduce a long-term security risk: If they are compromised, the attacker can misuse the OAuth tokens belonging to millions of users to arbitrarily manipulate their devices and data. In this w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1707.00405","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g/GajU/H/SPYhuPtG8e+5wMAedjhckCZuNJcQMXhJ+6TQVGvBk5XgEjSUecHeQ2SlP4ZhXVYpM+G/GI3DcCQBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T13:46:41.701335Z"},"content_sha256":"9f08aea4d0499c83d73437272d3d9e3ffd115abbaf206f75dd04dce2070dfc7c","schema_version":"1.0","event_id":"sha256:9f08aea4d0499c83d73437272d3d9e3ffd115abbaf206f75dd04dce2070dfc7c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/bundle.json","state_url":"https://pith.science/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-04T13:46:41Z","links":{"resolver":"https://pith.science/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V","bundle":"https://pith.science/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/bundle.json","state":"https://pith.science/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7WYO2PSWWL7Q77CNDH6KW3TA6V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:7WYO2PSWWL7Q77CNDH6KW3TA6V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df6890869461c75c7d956b5b10a34de65562c5d4237a06695e3e6c9b2f524d43","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-03T05:35:31Z","title_canon_sha256":"cc8f9e9fd3c181c5f9f0477af38d3c3c1584c9a593bb1c61752584bd64b8803f"},"schema_version":"1.0","source":{"id":"1707.00405","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1707.00405","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"arxiv_version","alias_value":"1707.00405v1","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1707.00405","created_at":"2026-05-18T00:41:03Z"},{"alias_kind":"pith_short_12","alias_value":"7WYO2PSWWL7Q","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_16","alias_value":"7WYO2PSWWL7Q77CN","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_8","alias_value":"7WYO2PSW","created_at":"2026-05-18T12:31:05Z"}],"graph_snapshots":[{"event_id":"sha256:9f08aea4d0499c83d73437272d3d9e3ffd115abbaf206f75dd04dce2070dfc7c","target":"graph","created_at":"2026-05-18T00:41:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Trigger-Action platforms are an emerging class of web-based systems that enable users to create automation rules (or recipes) of the form, \"If there is a smoke alarm, then turn off my oven.\" These platforms stitch together various online services including Internet of Things devices, social networks, and productivity tools by obtaining OAuth tokens on behalf of users. Unfortunately, these platforms also introduce a long-term security risk: If they are compromised, the attacker can misuse the OAuth tokens belonging to millions of users to arbitrarily manipulate their devices and data. In this w","authors_text":"Amir Rahmati, Atul Prakash, Earlence Fernandes, Jaeyeon Jung","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-03T05:35:31Z","title":"Decoupled-IFTTT: Constraining Privilege in Trigger-Action Platforms for the Internet of Things"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1707.00405","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bbdbff6fb6cafb06525cb1bff66b981fece5a15117c05c5c3a14b5b557ee07d2","target":"record","created_at":"2026-05-18T00:41:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df6890869461c75c7d956b5b10a34de65562c5d4237a06695e3e6c9b2f524d43","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-03T05:35:31Z","title_canon_sha256":"cc8f9e9fd3c181c5f9f0477af38d3c3c1584c9a593bb1c61752584bd64b8803f"},"schema_version":"1.0","source":{"id":"1707.00405","kind":"arxiv","version":1}},"canonical_sha256":"fdb0ed3e56b2ff0ffc4d19fcab6e60f5458cdc7d1904d412db4671fc5347c4c8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fdb0ed3e56b2ff0ffc4d19fcab6e60f5458cdc7d1904d412db4671fc5347c4c8","first_computed_at":"2026-05-18T00:41:03.483915Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:41:03.483915Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"r/C3Ei4GnST6qkCC1q0HRfv6vhr8mclw9vWArVblevaluJ3C4lzMyYSYw83khZc4xG0x046L/6CZZDfvDZ7ZAQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:41:03.484692Z","signed_message":"canonical_sha256_bytes"},"source_id":"1707.00405","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bbdbff6fb6cafb06525cb1bff66b981fece5a15117c05c5c3a14b5b557ee07d2","sha256:9f08aea4d0499c83d73437272d3d9e3ffd115abbaf206f75dd04dce2070dfc7c"],"state_sha256":"ee4ffa58abf28451b234a5fbb6efb52a11a8a5e3360a8682439bdec435f23b85"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sYKYFVyB3kIhfeg17EZ+XQxueFTkVzp1arwzg24sV9jFMbXv2e3Ljibgf1wvlzb8wkgmRm+2Fit0gu0LmyjnBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-04T13:46:41.703427Z","bundle_sha256":"1a11d5f3d81389ab36a60873b45f43ac943fb0f13b2ebdcda9ab81b0961263cf"}}