{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:KWBYKDDSSQQMXQ5EY4EPUPQIBE","short_pith_number":"pith:KWBYKDDS","canonical_record":{"source":{"id":"1607.00801","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-04T09:46:18Z","cross_cats_sorted":[],"title_canon_sha256":"067fc90ff4183528119e7f6149f0b873c950f4a93968de4dd1d5d230f0306726","abstract_canon_sha256":"02fcbbee82921153d5cf7bdeeed540bb521f66bcbcd7fd616ce6b98f9290c27c"},"schema_version":"1.0"},"canonical_sha256":"5583850c729420cbc3a4c708fa3e080933a97c3a17a40f3af51780e7a88f0e08","source":{"kind":"arxiv","id":"1607.00801","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1607.00801","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"1607.00801v1","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1607.00801","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"KWBYKDDSSQQM","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"KWBYKDDSSQQMXQ5E","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"KWBYKDDS","created_at":"2026-05-18T12:30:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:KWBYKDDSSQQMXQ5EY4EPUPQIBE","target":"record","payload":{"canonical_record":{"source":{"id":"1607.00801","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-04T09:46:18Z","cross_cats_sorted":[],"title_canon_sha256":"067fc90ff4183528119e7f6149f0b873c950f4a93968de4dd1d5d230f0306726","abstract_canon_sha256":"02fcbbee82921153d5cf7bdeeed540bb521f66bcbcd7fd616ce6b98f9290c27c"},"schema_version":"1.0"},"canonical_sha256":"5583850c729420cbc3a4c708fa3e080933a97c3a17a40f3af51780e7a88f0e08","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:11:34.254107Z","signature_b64":"MdN4pOkN7mz7hdqul22W5UR326JwvSUlbTMDsFwSQDcDpAHr0iY2+iECpFUnEBa4lJ/b82RjoDm0GbA2rYEnDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5583850c729420cbc3a4c708fa3e080933a97c3a17a40f3af51780e7a88f0e08","last_reissued_at":"2026-05-18T01:11:34.253725Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:11:34.253725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1607.00801","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3LXxoZ13sD8n6IodZNoQwIrEwfGpesKsI/SDZkTIpOsKX8g/mRPC6u7n8K8l2OuQPJx0WHx+psTLqglBw8D5CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T02:24:47.908201Z"},"content_sha256":"d31e2f9048fdee2c6cf3e11e627d8eec608dea49eef659fd0ac624579f7b489f","schema_version":"1.0","event_id":"sha256:d31e2f9048fdee2c6cf3e11e627d8eec608dea49eef659fd0ac624579f7b489f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:KWBYKDDSSQQMXQ5EY4EPUPQIBE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Honey Sheets: What Happens to Leaked Google Spreadsheets?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gianluca Stringhini, Jeremiah Onaolapo, Martin Lazarov","submitted_at":"2016-07-04T09:46:18Z","abstract_excerpt":"Cloud-based documents are inherently valuable, due to the volume and nature of sensitive personal and business content stored in them. Despite the importance of such documents to Internet users, there are still large gaps in the understanding of what cybercriminals do when they illicitly get access to them by for example compromising the account credentials they are associated with. In this paper, we present a system able to monitor user activity on Google spreadsheets. We populated 5 Google spreadsheets with fake bank account details and fake funds transfer links. Each spreadsheet was configu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1607.00801","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:11:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0sOc+aWNQGUZcG4s0Jg3FUsp6Kovj/68CRtLUoT5IPR5E6MzNJ4ByGunY9JYIw/PZuUixclr4E3X7gzke0ioCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T02:24:47.908878Z"},"content_sha256":"5c67c9438dcb9b0749b454281f612e8302d370ff127e80b1ea825c725419904d","schema_version":"1.0","event_id":"sha256:5c67c9438dcb9b0749b454281f612e8302d370ff127e80b1ea825c725419904d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/bundle.json","state_url":"https://pith.science/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T02:24:47Z","links":{"resolver":"https://pith.science/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE","bundle":"https://pith.science/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/bundle.json","state":"https://pith.science/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KWBYKDDSSQQMXQ5EY4EPUPQIBE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:KWBYKDDSSQQMXQ5EY4EPUPQIBE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02fcbbee82921153d5cf7bdeeed540bb521f66bcbcd7fd616ce6b98f9290c27c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-04T09:46:18Z","title_canon_sha256":"067fc90ff4183528119e7f6149f0b873c950f4a93968de4dd1d5d230f0306726"},"schema_version":"1.0","source":{"id":"1607.00801","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1607.00801","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"arxiv_version","alias_value":"1607.00801v1","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1607.00801","created_at":"2026-05-18T01:11:34Z"},{"alias_kind":"pith_short_12","alias_value":"KWBYKDDSSQQM","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"KWBYKDDSSQQMXQ5E","created_at":"2026-05-18T12:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"KWBYKDDS","created_at":"2026-05-18T12:30:29Z"}],"graph_snapshots":[{"event_id":"sha256:5c67c9438dcb9b0749b454281f612e8302d370ff127e80b1ea825c725419904d","target":"graph","created_at":"2026-05-18T01:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Cloud-based documents are inherently valuable, due to the volume and nature of sensitive personal and business content stored in them. Despite the importance of such documents to Internet users, there are still large gaps in the understanding of what cybercriminals do when they illicitly get access to them by for example compromising the account credentials they are associated with. In this paper, we present a system able to monitor user activity on Google spreadsheets. We populated 5 Google spreadsheets with fake bank account details and fake funds transfer links. Each spreadsheet was configu","authors_text":"Gianluca Stringhini, Jeremiah Onaolapo, Martin Lazarov","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-04T09:46:18Z","title":"Honey Sheets: What Happens to Leaked Google Spreadsheets?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1607.00801","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d31e2f9048fdee2c6cf3e11e627d8eec608dea49eef659fd0ac624579f7b489f","target":"record","created_at":"2026-05-18T01:11:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02fcbbee82921153d5cf7bdeeed540bb521f66bcbcd7fd616ce6b98f9290c27c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-04T09:46:18Z","title_canon_sha256":"067fc90ff4183528119e7f6149f0b873c950f4a93968de4dd1d5d230f0306726"},"schema_version":"1.0","source":{"id":"1607.00801","kind":"arxiv","version":1}},"canonical_sha256":"5583850c729420cbc3a4c708fa3e080933a97c3a17a40f3af51780e7a88f0e08","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5583850c729420cbc3a4c708fa3e080933a97c3a17a40f3af51780e7a88f0e08","first_computed_at":"2026-05-18T01:11:34.253725Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:11:34.253725Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MdN4pOkN7mz7hdqul22W5UR326JwvSUlbTMDsFwSQDcDpAHr0iY2+iECpFUnEBa4lJ/b82RjoDm0GbA2rYEnDA==","signature_status":"signed_v1","signed_at":"2026-05-18T01:11:34.254107Z","signed_message":"canonical_sha256_bytes"},"source_id":"1607.00801","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d31e2f9048fdee2c6cf3e11e627d8eec608dea49eef659fd0ac624579f7b489f","sha256:5c67c9438dcb9b0749b454281f612e8302d370ff127e80b1ea825c725419904d"],"state_sha256":"bd6c3083c5572736fbc759f7145d61eedfecf8c0cfc67a39cb8a150d7b97beba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Dkkwb4ZveUdrsY2Qq6MM5IJ7nq5FTxcWG3fXE2/I0pPxlrviQhLikGVln64xlVecZ//U5QyXSj4hVT2oVRYoCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T02:24:47.912362Z","bundle_sha256":"16122304ad01b04f79c378b54493c989dff0dc3edb3daa4a16314bea21a08581"}}