{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:LGC7IHKEMSZ27DMXS4FRGAV44A","short_pith_number":"pith:LGC7IHKE","canonical_record":{"source":{"id":"1912.10190","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-12-21T03:54:40Z","cross_cats_sorted":[],"title_canon_sha256":"070a5ca8f46b3555d2f89a9f76b13a979c6e61360f84fd7e8f0ece5799973b77","abstract_canon_sha256":"51163493a8f982088a145ffc181a8889beea0d2bc84773c5d81ca772fb48e15c"},"schema_version":"1.0"},"canonical_sha256":"5985f41d4464b3af8d97970b1302bce02911d109c70bebb4e1c1ee9cfb6b83ef","source":{"kind":"arxiv","id":"1912.10190","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.10190","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"arxiv_version","alias_value":"1912.10190v2","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.10190","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_12","alias_value":"LGC7IHKEMSZ2","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_16","alias_value":"LGC7IHKEMSZ27DMX","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_8","alias_value":"LGC7IHKE","created_at":"2026-07-05T00:40:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:LGC7IHKEMSZ27DMXS4FRGAV44A","target":"record","payload":{"canonical_record":{"source":{"id":"1912.10190","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-12-21T03:54:40Z","cross_cats_sorted":[],"title_canon_sha256":"070a5ca8f46b3555d2f89a9f76b13a979c6e61360f84fd7e8f0ece5799973b77","abstract_canon_sha256":"51163493a8f982088a145ffc181a8889beea0d2bc84773c5d81ca772fb48e15c"},"schema_version":"1.0"},"canonical_sha256":"5985f41d4464b3af8d97970b1302bce02911d109c70bebb4e1c1ee9cfb6b83ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:40:35.222867Z","signature_b64":"MHq2lZbSU3oRUeVFs8rhx9vUq51FJUq0XdWAIh3cphKOnmbynlv6USKHPI1mVN4ShPB6KBbl+xnFFJ3wzSICCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5985f41d4464b3af8d97970b1302bce02911d109c70bebb4e1c1ee9cfb6b83ef","last_reissued_at":"2026-07-05T00:40:35.222375Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:40:35.222375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.10190","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:40:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hSK9N4gyTXO+p0/DsIikI9XkQEpwS0bveDaMJ1anAWo632C8JvZl2bb/iSBVXgxZCKufRxhrcn1oLiB5qVd0Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:52:47.711741Z"},"content_sha256":"60c7010aef61edd556534c5b88c7ecfc2c55bca02bbcb8b9b694702cda861cdf","schema_version":"1.0","event_id":"sha256:60c7010aef61edd556534c5b88c7ecfc2c55bca02bbcb8b9b694702cda861cdf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:LGC7IHKEMSZ27DMXS4FRGAV44A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cached and Confused: Web Cache Deception in the Wild","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bruno Crispo, Engin Kirda, Kaan Onarlioglu, Sajjad Arshad, Seyed Ali Mirheidari, William Robertson","submitted_at":"2019-12-21T03:54:40Z","abstract_excerpt":"Web cache deception (WCD) is an attack proposed in 2017, where an attacker tricks a caching proxy into erroneously storing private information transmitted over the Internet and subsequently gains unauthorized access to that cached data. Due to the widespread use of web caches and, in particular, the use of massive networks of caching proxies deployed by content distribution network (CDN) providers as a critical component of the Internet, WCD puts a substantial population of Internet users at risk. We present the first large-scale study that quantifies the prevalence of WCD in 340 high-profile "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.10190","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.10190/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:40:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U1jiXijgwkN01ZU0rWlb7Fg9E522t/2FVsqX465n0pEe124HJaEebXF3eRtazlUOYoQNT5mR4Sr873o4UaeAAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T13:52:47.712279Z"},"content_sha256":"94095496c0906ae32940ab37bb15f77f8df16cd4684bb414e08ade56d7110904","schema_version":"1.0","event_id":"sha256:94095496c0906ae32940ab37bb15f77f8df16cd4684bb414e08ade56d7110904"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/bundle.json","state_url":"https://pith.science/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T13:52:47Z","links":{"resolver":"https://pith.science/pith/LGC7IHKEMSZ27DMXS4FRGAV44A","bundle":"https://pith.science/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/bundle.json","state":"https://pith.science/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LGC7IHKEMSZ27DMXS4FRGAV44A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:LGC7IHKEMSZ27DMXS4FRGAV44A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"51163493a8f982088a145ffc181a8889beea0d2bc84773c5d81ca772fb48e15c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-12-21T03:54:40Z","title_canon_sha256":"070a5ca8f46b3555d2f89a9f76b13a979c6e61360f84fd7e8f0ece5799973b77"},"schema_version":"1.0","source":{"id":"1912.10190","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.10190","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"arxiv_version","alias_value":"1912.10190v2","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.10190","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_12","alias_value":"LGC7IHKEMSZ2","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_16","alias_value":"LGC7IHKEMSZ27DMX","created_at":"2026-07-05T00:40:35Z"},{"alias_kind":"pith_short_8","alias_value":"LGC7IHKE","created_at":"2026-07-05T00:40:35Z"}],"graph_snapshots":[{"event_id":"sha256:94095496c0906ae32940ab37bb15f77f8df16cd4684bb414e08ade56d7110904","target":"graph","created_at":"2026-07-05T00:40:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.10190/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Web cache deception (WCD) is an attack proposed in 2017, where an attacker tricks a caching proxy into erroneously storing private information transmitted over the Internet and subsequently gains unauthorized access to that cached data. Due to the widespread use of web caches and, in particular, the use of massive networks of caching proxies deployed by content distribution network (CDN) providers as a critical component of the Internet, WCD puts a substantial population of Internet users at risk. We present the first large-scale study that quantifies the prevalence of WCD in 340 high-profile ","authors_text":"Bruno Crispo, Engin Kirda, Kaan Onarlioglu, Sajjad Arshad, Seyed Ali Mirheidari, William Robertson","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-12-21T03:54:40Z","title":"Cached and Confused: Web Cache Deception in the Wild"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.10190","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:60c7010aef61edd556534c5b88c7ecfc2c55bca02bbcb8b9b694702cda861cdf","target":"record","created_at":"2026-07-05T00:40:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"51163493a8f982088a145ffc181a8889beea0d2bc84773c5d81ca772fb48e15c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-12-21T03:54:40Z","title_canon_sha256":"070a5ca8f46b3555d2f89a9f76b13a979c6e61360f84fd7e8f0ece5799973b77"},"schema_version":"1.0","source":{"id":"1912.10190","kind":"arxiv","version":2}},"canonical_sha256":"5985f41d4464b3af8d97970b1302bce02911d109c70bebb4e1c1ee9cfb6b83ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5985f41d4464b3af8d97970b1302bce02911d109c70bebb4e1c1ee9cfb6b83ef","first_computed_at":"2026-07-05T00:40:35.222375Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:40:35.222375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MHq2lZbSU3oRUeVFs8rhx9vUq51FJUq0XdWAIh3cphKOnmbynlv6USKHPI1mVN4ShPB6KBbl+xnFFJ3wzSICCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:40:35.222867Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.10190","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:60c7010aef61edd556534c5b88c7ecfc2c55bca02bbcb8b9b694702cda861cdf","sha256:94095496c0906ae32940ab37bb15f77f8df16cd4684bb414e08ade56d7110904"],"state_sha256":"2ca8fd25a55162454f78f75d7b9a90c4a9dfa4312fd187cfb32848d29614727d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YUzlRf1JcqYLu6BGS6XxKS0unv3vUzhvlaz5EhnSOGxxGoOORqn+UF2nImS3lRvbfKc2upq6Mby9plvCSm4PBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T13:52:47.718052Z","bundle_sha256":"f07d6b0b5114a39271ed00e53b4368184446ca8390d43af45b9e31aae65bdb4e"}}