{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:BZQ7UHKGNGQPCNXJKIJKP54M76","short_pith_number":"pith:BZQ7UHKG","canonical_record":{"source":{"id":"1810.00464","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-30T20:47:22Z","cross_cats_sorted":[],"title_canon_sha256":"0d8a9cc86eae658dd0c0760113114773a5ae3cb9505373084c6f7230b93abd23","abstract_canon_sha256":"04bef5addfdf93dfc5662275067226bcfff7adc5ffe391994fa8ba61e659ff82"},"schema_version":"1.0"},"canonical_sha256":"0e61fa1d4669a0f136e95212a7f78cff815f17111e717092da626a32dc2e15d7","source":{"kind":"arxiv","id":"1810.00464","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.00464","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"arxiv_version","alias_value":"1810.00464v1","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.00464","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"pith_short_12","alias_value":"BZQ7UHKGNGQP","created_at":"2026-05-18T12:32:16Z"},{"alias_kind":"pith_short_16","alias_value":"BZQ7UHKGNGQPCNXJ","created_at":"2026-05-18T12:32:16Z"},{"alias_kind":"pith_short_8","alias_value":"BZQ7UHKG","created_at":"2026-05-18T12:32:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:BZQ7UHKGNGQPCNXJKIJKP54M76","target":"record","payload":{"canonical_record":{"source":{"id":"1810.00464","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-30T20:47:22Z","cross_cats_sorted":[],"title_canon_sha256":"0d8a9cc86eae658dd0c0760113114773a5ae3cb9505373084c6f7230b93abd23","abstract_canon_sha256":"04bef5addfdf93dfc5662275067226bcfff7adc5ffe391994fa8ba61e659ff82"},"schema_version":"1.0"},"canonical_sha256":"0e61fa1d4669a0f136e95212a7f78cff815f17111e717092da626a32dc2e15d7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:04:26.096276Z","signature_b64":"4mMVXPLN7Wd75NFZh5CK/XHJlqa/yVVJ+CIwsOlCg9G4JkyvNH3/yUgPuiO3B0NHjEEAEgPy0m5c8KtObGjRCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0e61fa1d4669a0f136e95212a7f78cff815f17111e717092da626a32dc2e15d7","last_reissued_at":"2026-05-18T00:04:26.095808Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:04:26.095808Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1810.00464","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:04:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TlkDQ+0cDE7pBkRsYMCOKrWJqjLzU/Zcj3pWO5LsaWjVrqcHh3sNrtUA7cHUkoLIvmTLVuH/fqPGD2rPH2EBDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T15:57:34.274989Z"},"content_sha256":"2ca12c6b474e4c48d2b93a2ff9a6051928132ea5f0aca657898a50da2f676556","schema_version":"1.0","event_id":"sha256:2ca12c6b474e4c48d2b93a2ff9a6051928132ea5f0aca657898a50da2f676556"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:BZQ7UHKGNGQPCNXJKIJKP54M76","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Evangelos P. Markatos, Giorgos Vasiliadis, Michalis Polychronakis, Panagiotis Ilia, Panagiotis Papadopoulos, Sotiris Ioannidis","submitted_at":"2018-09-30T20:47:22Z","abstract_excerpt":"The proliferation of web applications has essentially transformed modern browsers into small but powerful operating systems. Upon visiting a website, user devices run implicitly trusted script code, the execution of which is confined within the browser to prevent any interference with the user's system. Recent JavaScript APIs, however, provide advanced capabilities that not only enable feature-rich web applications, but also allow attackers to perform malicious operations despite the confined nature of JavaScript code execution. In this paper, we demonstrate the powerful capabilities that mode"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.00464","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:04:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gJta6W2WgIOP+BRYmhl7B4sRHjcHymw38jApbX3ju3NfyXdLsosgznkMlAMQfpg9fKv+3GScoRRGFYEfR+nvDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T15:57:34.275337Z"},"content_sha256":"80724aa7ffa29a8654604fd67616774fb9bd23ff6ff4afbab21dcfef1b6256f1","schema_version":"1.0","event_id":"sha256:80724aa7ffa29a8654604fd67616774fb9bd23ff6ff4afbab21dcfef1b6256f1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/bundle.json","state_url":"https://pith.science/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T15:57:34Z","links":{"resolver":"https://pith.science/pith/BZQ7UHKGNGQPCNXJKIJKP54M76","bundle":"https://pith.science/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/bundle.json","state":"https://pith.science/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BZQ7UHKGNGQPCNXJKIJKP54M76/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:BZQ7UHKGNGQPCNXJKIJKP54M76","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"04bef5addfdf93dfc5662275067226bcfff7adc5ffe391994fa8ba61e659ff82","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-30T20:47:22Z","title_canon_sha256":"0d8a9cc86eae658dd0c0760113114773a5ae3cb9505373084c6f7230b93abd23"},"schema_version":"1.0","source":{"id":"1810.00464","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.00464","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"arxiv_version","alias_value":"1810.00464v1","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.00464","created_at":"2026-05-18T00:04:26Z"},{"alias_kind":"pith_short_12","alias_value":"BZQ7UHKGNGQP","created_at":"2026-05-18T12:32:16Z"},{"alias_kind":"pith_short_16","alias_value":"BZQ7UHKGNGQPCNXJ","created_at":"2026-05-18T12:32:16Z"},{"alias_kind":"pith_short_8","alias_value":"BZQ7UHKG","created_at":"2026-05-18T12:32:16Z"}],"graph_snapshots":[{"event_id":"sha256:80724aa7ffa29a8654604fd67616774fb9bd23ff6ff4afbab21dcfef1b6256f1","target":"graph","created_at":"2026-05-18T00:04:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The proliferation of web applications has essentially transformed modern browsers into small but powerful operating systems. Upon visiting a website, user devices run implicitly trusted script code, the execution of which is confined within the browser to prevent any interference with the user's system. Recent JavaScript APIs, however, provide advanced capabilities that not only enable feature-rich web applications, but also allow attackers to perform malicious operations despite the confined nature of JavaScript code execution. In this paper, we demonstrate the powerful capabilities that mode","authors_text":"Evangelos P. Markatos, Giorgos Vasiliadis, Michalis Polychronakis, Panagiotis Ilia, Panagiotis Papadopoulos, Sotiris Ioannidis","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-30T20:47:22Z","title":"Master of Web Puppets: Abusing Web Browsers for Persistent and Stealthy Computation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.00464","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2ca12c6b474e4c48d2b93a2ff9a6051928132ea5f0aca657898a50da2f676556","target":"record","created_at":"2026-05-18T00:04:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"04bef5addfdf93dfc5662275067226bcfff7adc5ffe391994fa8ba61e659ff82","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-30T20:47:22Z","title_canon_sha256":"0d8a9cc86eae658dd0c0760113114773a5ae3cb9505373084c6f7230b93abd23"},"schema_version":"1.0","source":{"id":"1810.00464","kind":"arxiv","version":1}},"canonical_sha256":"0e61fa1d4669a0f136e95212a7f78cff815f17111e717092da626a32dc2e15d7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0e61fa1d4669a0f136e95212a7f78cff815f17111e717092da626a32dc2e15d7","first_computed_at":"2026-05-18T00:04:26.095808Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:04:26.095808Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4mMVXPLN7Wd75NFZh5CK/XHJlqa/yVVJ+CIwsOlCg9G4JkyvNH3/yUgPuiO3B0NHjEEAEgPy0m5c8KtObGjRCw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:04:26.096276Z","signed_message":"canonical_sha256_bytes"},"source_id":"1810.00464","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2ca12c6b474e4c48d2b93a2ff9a6051928132ea5f0aca657898a50da2f676556","sha256:80724aa7ffa29a8654604fd67616774fb9bd23ff6ff4afbab21dcfef1b6256f1"],"state_sha256":"e4ec390adae1c6c0ba4242665d5d48ce6faa0dff383b81d722a3f3397f734349"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"caWvFuH7YHDHWDcK1GbXyY9o0ykfz1b1QCSrQz+qkJ95SbvR1+Crg6hUQUpS+Tb38IjAdcsdRi/FEtWju3TCDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T15:57:34.277156Z","bundle_sha256":"21e06bd70d7348333fe9088e66381811b62fda8b28640fc103c7f18e980b3886"}}