{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:JPI4CMYCZGFTTRLQJCT4TEL6QZ","short_pith_number":"pith:JPI4CMYC","schema_version":"1.0","canonical_sha256":"4bd1c13302c98b39c57048a7c9917e86764380361f2c398128b8e6bb30118dd6","source":{"kind":"arxiv","id":"2606.21067","version":1},"attestation_state":"computed","paper":{"title":"Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Boya Liu, Mo Li, Yanbo Zhang, Zhenyu Ren","submitted_at":"2026-06-19T03:32:52Z","abstract_excerpt":"Apple's Find My network connects nearly one billion devices to locate missing property via Bluetooth Low Energy (BLE). This paper reveals that insecure BLE advertisements and design tradeoffs allow unauthorized discovery and physical theft of lost Apple devices. We develop Snatcher, an attack and analysis framework implemented fully on Android smartphones without specialized hardware. Snatcher identifies vulnerabilities in unencrypted BLE advertisements, unauthenticated acoustic triggers, and slow MAC address randomization. Through three levels - sound-based direction finding, RSSI-IMU sensor-"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.21067","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T03:32:52Z","cross_cats_sorted":[],"title_canon_sha256":"064e62f85708eaedcf6f4a2561150e2e774d15300177a1bfea0bf6cc4bb1259a","abstract_canon_sha256":"f8250aeb8fe1eeb2b18dcffcef889eb75d7e8cddba77fba5b55de6fa21376742"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T01:12:28.769905Z","signature_b64":"mzQ1W79gXLyqzPXT1mlMQEKbbGAbgYc3w8lnnYD2MPYuWXr+LRkTyfYpWBFI52YNMDVlWDCR0QSsbgKNVqCCDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4bd1c13302c98b39c57048a7c9917e86764380361f2c398128b8e6bb30118dd6","last_reissued_at":"2026-06-23T01:12:28.769442Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T01:12:28.769442Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Snatcher: Apple Find My Network Exposes Your Lost Devices To Strangers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Boya Liu, Mo Li, Yanbo Zhang, Zhenyu Ren","submitted_at":"2026-06-19T03:32:52Z","abstract_excerpt":"Apple's Find My network connects nearly one billion devices to locate missing property via Bluetooth Low Energy (BLE). This paper reveals that insecure BLE advertisements and design tradeoffs allow unauthorized discovery and physical theft of lost Apple devices. We develop Snatcher, an attack and analysis framework implemented fully on Android smartphones without specialized hardware. Snatcher identifies vulnerabilities in unencrypted BLE advertisements, unauthenticated acoustic triggers, and slow MAC address randomization. Through three levels - sound-based direction finding, RSSI-IMU sensor-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21067","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.21067/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.21067","created_at":"2026-06-23T01:12:28.769510+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.21067v1","created_at":"2026-06-23T01:12:28.769510+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21067","created_at":"2026-06-23T01:12:28.769510+00:00"},{"alias_kind":"pith_short_12","alias_value":"JPI4CMYCZGFT","created_at":"2026-06-23T01:12:28.769510+00:00"},{"alias_kind":"pith_short_16","alias_value":"JPI4CMYCZGFTTRLQ","created_at":"2026-06-23T01:12:28.769510+00:00"},{"alias_kind":"pith_short_8","alias_value":"JPI4CMYC","created_at":"2026-06-23T01:12:28.769510+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ","json":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ.json","graph_json":"https://pith.science/api/pith-number/JPI4CMYCZGFTTRLQJCT4TEL6QZ/graph.json","events_json":"https://pith.science/api/pith-number/JPI4CMYCZGFTTRLQJCT4TEL6QZ/events.json","paper":"https://pith.science/paper/JPI4CMYC"},"agent_actions":{"view_html":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ","download_json":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ.json","view_paper":"https://pith.science/paper/JPI4CMYC","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.21067&json=true","fetch_graph":"https://pith.science/api/pith-number/JPI4CMYCZGFTTRLQJCT4TEL6QZ/graph.json","fetch_events":"https://pith.science/api/pith-number/JPI4CMYCZGFTTRLQJCT4TEL6QZ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ/action/storage_attestation","attest_author":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ/action/author_attestation","sign_citation":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ/action/citation_signature","submit_replication":"https://pith.science/pith/JPI4CMYCZGFTTRLQJCT4TEL6QZ/action/replication_record"}},"created_at":"2026-06-23T01:12:28.769510+00:00","updated_at":"2026-06-23T01:12:28.769510+00:00"}