{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:KZJ2OEZA5IE4WXGXZEDS5RYP5Q","short_pith_number":"pith:KZJ2OEZA","canonical_record":{"source":{"id":"1705.04437","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-12T03:58:50Z","cross_cats_sorted":[],"title_canon_sha256":"db99c7ff90eb84a6e7f46be236dc19e116e2fa36ef23d0a05777913979110c91","abstract_canon_sha256":"6f70d2a68073927e429d53a6c1ea376fade987f061dc90ec7d640e8df9af8254"},"schema_version":"1.0"},"canonical_sha256":"5653a71320ea09cb5cd7c9072ec70fec02902aaa540aaf47541ede6800b4fc77","source":{"kind":"arxiv","id":"1705.04437","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.04437","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"arxiv_version","alias_value":"1705.04437v1","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.04437","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"pith_short_12","alias_value":"KZJ2OEZA5IE4","created_at":"2026-05-18T12:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"KZJ2OEZA5IE4WXGX","created_at":"2026-05-18T12:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"KZJ2OEZA","created_at":"2026-05-18T12:31:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:KZJ2OEZA5IE4WXGXZEDS5RYP5Q","target":"record","payload":{"canonical_record":{"source":{"id":"1705.04437","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-12T03:58:50Z","cross_cats_sorted":[],"title_canon_sha256":"db99c7ff90eb84a6e7f46be236dc19e116e2fa36ef23d0a05777913979110c91","abstract_canon_sha256":"6f70d2a68073927e429d53a6c1ea376fade987f061dc90ec7d640e8df9af8254"},"schema_version":"1.0"},"canonical_sha256":"5653a71320ea09cb5cd7c9072ec70fec02902aaa540aaf47541ede6800b4fc77","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:44:33.199330Z","signature_b64":"JPci5xor1a4/qxZzNn9vxrHyerlzBPEfgDoXO1ilp28ZgowvAxF4voGs61lOGg9DgHp8zhW0bs3jpSajbPVvAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5653a71320ea09cb5cd7c9072ec70fec02902aaa540aaf47541ede6800b4fc77","last_reissued_at":"2026-05-18T00:44:33.198906Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:44:33.198906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1705.04437","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:44:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QliOV5zrv8GmvIMyXs1Ob9htHFKbNZnd0HuS9KrJe94L/DXvQXQ9s1YEYQhtr7pzwPhqYQdioJna1OS9iAHGDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T21:22:44.848009Z"},"content_sha256":"5f0e9f1f10b5bc4ac8d3e8e54e03f5f3abbb93be889d1a5c4189c7a4fcfb52a2","schema_version":"1.0","event_id":"sha256:5f0e9f1f10b5bc4ac8d3e8e54e03f5f3abbb93be889d1a5c4189c7a4fcfb52a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:KZJ2OEZA5IE4WXGXZEDS5RYP5Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PerfWeb: How to Violate Web Privacy with Hardware Performance Events","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andreas Zankl, Berk Gulmezoglu, Berk Sunar, Thomas Eisenbarth","submitted_at":"2017-05-12T03:58:50Z","abstract_excerpt":"The browser history reveals highly sensitive information about users, such as financial status, health conditions, or political views. Private browsing modes and anonymity networks are consequently important tools to preserve the privacy not only of regular users but in particular of whistleblowers and dissidents. Yet, in this work we show how a malicious application can infer opened websites from Google Chrome in Incognito mode and from Tor Browser by exploiting hardware performance events (HPEs). In particular, we analyze the browsers' microarchitectural footprint with the help of advanced M"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.04437","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:44:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5SgK9Z5lLDF1r7dVBsXEPwPduq04IznVDY8VdYyYty8N0vNO+3CjDDgrJ943z8Mjidu6Y4rCGyUFpXO8Ks6zDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T21:22:44.848684Z"},"content_sha256":"b2a8d757c8c57e867ea3dfb7d34371549056a94ae5249ec64bffe14af77d33a2","schema_version":"1.0","event_id":"sha256:b2a8d757c8c57e867ea3dfb7d34371549056a94ae5249ec64bffe14af77d33a2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/bundle.json","state_url":"https://pith.science/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T21:22:44Z","links":{"resolver":"https://pith.science/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q","bundle":"https://pith.science/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/bundle.json","state":"https://pith.science/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KZJ2OEZA5IE4WXGXZEDS5RYP5Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:KZJ2OEZA5IE4WXGXZEDS5RYP5Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6f70d2a68073927e429d53a6c1ea376fade987f061dc90ec7d640e8df9af8254","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-12T03:58:50Z","title_canon_sha256":"db99c7ff90eb84a6e7f46be236dc19e116e2fa36ef23d0a05777913979110c91"},"schema_version":"1.0","source":{"id":"1705.04437","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.04437","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"arxiv_version","alias_value":"1705.04437v1","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.04437","created_at":"2026-05-18T00:44:33Z"},{"alias_kind":"pith_short_12","alias_value":"KZJ2OEZA5IE4","created_at":"2026-05-18T12:31:28Z"},{"alias_kind":"pith_short_16","alias_value":"KZJ2OEZA5IE4WXGX","created_at":"2026-05-18T12:31:28Z"},{"alias_kind":"pith_short_8","alias_value":"KZJ2OEZA","created_at":"2026-05-18T12:31:28Z"}],"graph_snapshots":[{"event_id":"sha256:b2a8d757c8c57e867ea3dfb7d34371549056a94ae5249ec64bffe14af77d33a2","target":"graph","created_at":"2026-05-18T00:44:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The browser history reveals highly sensitive information about users, such as financial status, health conditions, or political views. Private browsing modes and anonymity networks are consequently important tools to preserve the privacy not only of regular users but in particular of whistleblowers and dissidents. Yet, in this work we show how a malicious application can infer opened websites from Google Chrome in Incognito mode and from Tor Browser by exploiting hardware performance events (HPEs). In particular, we analyze the browsers' microarchitectural footprint with the help of advanced M","authors_text":"Andreas Zankl, Berk Gulmezoglu, Berk Sunar, Thomas Eisenbarth","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-12T03:58:50Z","title":"PerfWeb: How to Violate Web Privacy with Hardware Performance Events"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.04437","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5f0e9f1f10b5bc4ac8d3e8e54e03f5f3abbb93be889d1a5c4189c7a4fcfb52a2","target":"record","created_at":"2026-05-18T00:44:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6f70d2a68073927e429d53a6c1ea376fade987f061dc90ec7d640e8df9af8254","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-12T03:58:50Z","title_canon_sha256":"db99c7ff90eb84a6e7f46be236dc19e116e2fa36ef23d0a05777913979110c91"},"schema_version":"1.0","source":{"id":"1705.04437","kind":"arxiv","version":1}},"canonical_sha256":"5653a71320ea09cb5cd7c9072ec70fec02902aaa540aaf47541ede6800b4fc77","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5653a71320ea09cb5cd7c9072ec70fec02902aaa540aaf47541ede6800b4fc77","first_computed_at":"2026-05-18T00:44:33.198906Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:44:33.198906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"JPci5xor1a4/qxZzNn9vxrHyerlzBPEfgDoXO1ilp28ZgowvAxF4voGs61lOGg9DgHp8zhW0bs3jpSajbPVvAg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:44:33.199330Z","signed_message":"canonical_sha256_bytes"},"source_id":"1705.04437","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5f0e9f1f10b5bc4ac8d3e8e54e03f5f3abbb93be889d1a5c4189c7a4fcfb52a2","sha256:b2a8d757c8c57e867ea3dfb7d34371549056a94ae5249ec64bffe14af77d33a2"],"state_sha256":"87344a2e7630b349646bdbaeefadf56d662c2baf0bd462c7fa91269376beb9cc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6OQ+7+sLq4qhFNNoJvCZm/GHWJSgTJHjJgAfx3yKbfZgl5B0ChIMezhvXX8oAjX2/YqHaFajlBcJEGRbyYIuAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T21:22:44.851654Z","bundle_sha256":"8a7adbb5a22d615b95ba3f684f0032365f4a41e301593d13583d7f3b1c0673fe"}}