{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:GQCO3OYBSMIYGUAUX7NAAYZGKN","short_pith_number":"pith:GQCO3OYB","canonical_record":{"source":{"id":"1908.07965","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-08-21T16:18:22Z","cross_cats_sorted":[],"title_canon_sha256":"66cab01ecfd9fd6b0f2a57f9735d8c6c0ad0ba86cbc5b3c17cf19d008ee48feb","abstract_canon_sha256":"d1fe67c7563ef35913a7ec7561aa395975de2c413d4167e4410e834eaf982681"},"schema_version":"1.0"},"canonical_sha256":"3404edbb019311835014bfda006326536004fbb83de1444cecdefd184871d32f","source":{"kind":"arxiv","id":"1908.07965","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07965","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07965v1","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07965","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_12","alias_value":"GQCO3OYBSMIY","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_16","alias_value":"GQCO3OYBSMIYGUAU","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_8","alias_value":"GQCO3OYB","created_at":"2026-07-04T23:59:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:GQCO3OYBSMIYGUAUX7NAAYZGKN","target":"record","payload":{"canonical_record":{"source":{"id":"1908.07965","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-08-21T16:18:22Z","cross_cats_sorted":[],"title_canon_sha256":"66cab01ecfd9fd6b0f2a57f9735d8c6c0ad0ba86cbc5b3c17cf19d008ee48feb","abstract_canon_sha256":"d1fe67c7563ef35913a7ec7561aa395975de2c413d4167e4410e834eaf982681"},"schema_version":"1.0"},"canonical_sha256":"3404edbb019311835014bfda006326536004fbb83de1444cecdefd184871d32f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:59:02.865052Z","signature_b64":"gWbkOfs0ML0MvA4RFSJZTHH4T3cc5cMUOCBp1opcD/7umLCCaWMQkOwV9StsS8biWfpHoZauVnFalabWyN9BAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3404edbb019311835014bfda006326536004fbb83de1444cecdefd184871d32f","last_reissued_at":"2026-07-04T23:59:02.864647Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:59:02.864647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.07965","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wyKaEeAx94ulRnS27V/H1uj56XMc3pQ6WpudBQpzIA2Hu3B4NczjLa0HhT3d3l3qYQVkw3ZieOJja8O0eMIpCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T19:32:14.586956Z"},"content_sha256":"ebf66806cf1cf5267b033672ff498a8ad31414e53b752c90a589cf32d6c0e371","schema_version":"1.0","event_id":"sha256:ebf66806cf1cf5267b033672ff498a8ad31414e53b752c90a589cf32d6c0e371"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:GQCO3OYBSMIYGUAUX7NAAYZGKN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Case Study: Disclosure of Indirect Device Fingerprinting in Privacy Policies","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CY","authors_text":"Andrew Sellars, Ari Trachtenberg, Julissa Milligan, Mayank Varia, Sarah Scheffler, Trishita Tiwari","submitted_at":"2019-08-21T16:18:22Z","abstract_excerpt":"Recent developments in online tracking make it harder for individuals to detect and block trackers. Some sites have deployed indirect tracking methods, which attempt to uniquely identify a device by asking the browser to perform a seemingly-unrelated task. One type of indirect tracking, Canvas fingerprinting, causes the browser to render a graphic recording rendering statistics as a unique identifier. In this work, we observe how indirect device fingerprinting methods are disclosed in privacy policies, and consider whether the disclosures are sufficient to enable website visitors to block the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07965","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.07965/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:59:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n0oBcPA4pxdVEbW9eq0qC8AMIjvIiG/YVw+RKztM+4GfjQOE9eJ+rEPwuWgJUFp4u4u/E9SL86WFGmQ14QKuAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T19:32:14.587473Z"},"content_sha256":"16c39509365ca49f5e172c5ea4e82aa2a89f4040f12d66f12cab9e5b99effcf0","schema_version":"1.0","event_id":"sha256:16c39509365ca49f5e172c5ea4e82aa2a89f4040f12d66f12cab9e5b99effcf0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/bundle.json","state_url":"https://pith.science/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T19:32:14Z","links":{"resolver":"https://pith.science/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN","bundle":"https://pith.science/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/bundle.json","state":"https://pith.science/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GQCO3OYBSMIYGUAUX7NAAYZGKN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:GQCO3OYBSMIYGUAUX7NAAYZGKN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d1fe67c7563ef35913a7ec7561aa395975de2c413d4167e4410e834eaf982681","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-08-21T16:18:22Z","title_canon_sha256":"66cab01ecfd9fd6b0f2a57f9735d8c6c0ad0ba86cbc5b3c17cf19d008ee48feb"},"schema_version":"1.0","source":{"id":"1908.07965","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07965","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07965v1","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07965","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_12","alias_value":"GQCO3OYBSMIY","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_16","alias_value":"GQCO3OYBSMIYGUAU","created_at":"2026-07-04T23:59:02Z"},{"alias_kind":"pith_short_8","alias_value":"GQCO3OYB","created_at":"2026-07-04T23:59:02Z"}],"graph_snapshots":[{"event_id":"sha256:16c39509365ca49f5e172c5ea4e82aa2a89f4040f12d66f12cab9e5b99effcf0","target":"graph","created_at":"2026-07-04T23:59:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.07965/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent developments in online tracking make it harder for individuals to detect and block trackers. Some sites have deployed indirect tracking methods, which attempt to uniquely identify a device by asking the browser to perform a seemingly-unrelated task. One type of indirect tracking, Canvas fingerprinting, causes the browser to render a graphic recording rendering statistics as a unique identifier. In this work, we observe how indirect device fingerprinting methods are disclosed in privacy policies, and consider whether the disclosures are sufficient to enable website visitors to block the ","authors_text":"Andrew Sellars, Ari Trachtenberg, Julissa Milligan, Mayank Varia, Sarah Scheffler, Trishita Tiwari","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-08-21T16:18:22Z","title":"Case Study: Disclosure of Indirect Device Fingerprinting in Privacy Policies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07965","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ebf66806cf1cf5267b033672ff498a8ad31414e53b752c90a589cf32d6c0e371","target":"record","created_at":"2026-07-04T23:59:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d1fe67c7563ef35913a7ec7561aa395975de2c413d4167e4410e834eaf982681","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2019-08-21T16:18:22Z","title_canon_sha256":"66cab01ecfd9fd6b0f2a57f9735d8c6c0ad0ba86cbc5b3c17cf19d008ee48feb"},"schema_version":"1.0","source":{"id":"1908.07965","kind":"arxiv","version":1}},"canonical_sha256":"3404edbb019311835014bfda006326536004fbb83de1444cecdefd184871d32f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3404edbb019311835014bfda006326536004fbb83de1444cecdefd184871d32f","first_computed_at":"2026-07-04T23:59:02.864647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:59:02.864647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gWbkOfs0ML0MvA4RFSJZTHH4T3cc5cMUOCBp1opcD/7umLCCaWMQkOwV9StsS8biWfpHoZauVnFalabWyN9BAg==","signature_status":"signed_v1","signed_at":"2026-07-04T23:59:02.865052Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.07965","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ebf66806cf1cf5267b033672ff498a8ad31414e53b752c90a589cf32d6c0e371","sha256:16c39509365ca49f5e172c5ea4e82aa2a89f4040f12d66f12cab9e5b99effcf0"],"state_sha256":"6e44a581984b313b171c2656bb294130f0432b951587775ee0573eac40436854"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1dYEs8KJUn2WWkXaethWzVSZ35osuuEFT2hcsbOTQsMX2nnnAgphc6P7JA/fqCJtxZCCq85veZDfQkMM/p27Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T19:32:14.592627Z","bundle_sha256":"2c68d46c4f478882d62319799778c7a246a1266649e7a69b0239bc8f6d2b260a"}}