{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:LZ63PO2W6KHHX5CYOUM6GDUWF7","short_pith_number":"pith:LZ63PO2W","canonical_record":{"source":{"id":"1908.03296","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T03:32:38Z","cross_cats_sorted":[],"title_canon_sha256":"a2a1d0fe5d93d765b9fcea21a9692084bea794c7fcec1bd0c9903629d067f6c3","abstract_canon_sha256":"9ed52da51d3a38369aa8484e170233cb5e3597cbc2fb7c597515519f22368013"},"schema_version":"1.0"},"canonical_sha256":"5e7db7bb56f28e7bf4587519e30e962fff8e49c4c85e314372087d4d9d64f62f","source":{"kind":"arxiv","id":"1908.03296","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03296","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03296v2","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03296","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_12","alias_value":"LZ63PO2W6KHH","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_16","alias_value":"LZ63PO2W6KHHX5CY","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_8","alias_value":"LZ63PO2W","created_at":"2026-07-05T00:25:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:LZ63PO2W6KHHX5CYOUM6GDUWF7","target":"record","payload":{"canonical_record":{"source":{"id":"1908.03296","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T03:32:38Z","cross_cats_sorted":[],"title_canon_sha256":"a2a1d0fe5d93d765b9fcea21a9692084bea794c7fcec1bd0c9903629d067f6c3","abstract_canon_sha256":"9ed52da51d3a38369aa8484e170233cb5e3597cbc2fb7c597515519f22368013"},"schema_version":"1.0"},"canonical_sha256":"5e7db7bb56f28e7bf4587519e30e962fff8e49c4c85e314372087d4d9d64f62f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:25:13.420344Z","signature_b64":"cXkp7wC6QIo1NymhD3oOZYAr7cVGzyJxdP5YmlWmT/Db2zJmNJoqmvLPz+VVx/yWjmph89KM4VINJ3UjILJtDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5e7db7bb56f28e7bf4587519e30e962fff8e49c4c85e314372087d4d9d64f62f","last_reissued_at":"2026-07-05T00:25:13.419923Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:25:13.419923Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.03296","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:25:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mvK8qER6fMWPFO7HChOFFwplJd2+6spmoHTQ/pnkaOBdSAHlJFKwZnXABHrh2AX4OATa0uwnf8/6j5XwckZNDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T04:59:01.299334Z"},"content_sha256":"d3f160947d8b41db809c47364a50211fb8cc030ffbeeb4dcc7de05dcaf724334","schema_version":"1.0","event_id":"sha256:d3f160947d8b41db809c47364a50211fb8cc030ffbeeb4dcc7de05dcaf724334"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:LZ63PO2W6KHHX5CYOUM6GDUWF7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Scott Ruoti, Sean Oesch","submitted_at":"2019-08-09T03:32:38Z","abstract_excerpt":"Password managers have the potential to help users more effectively manage their passwords and address many of the concerns surrounding password-based authentication, however prior research has identified significant vulnerabilities in existing password managers. Since that time, five years has passed, leaving it unclear whether password managers remain vulnerable or whether they are now ready for broad adoption. To answer this question, we evaluate thirteen popular password managers and consider all three stages of the password manager lifecycle--password generation, storage, and autofill. Ou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03296","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.03296/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:25:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7HGfZw8pVFj3zzP5ntiTaceDUWRjNcVjnTZmbgZlTt4IQlSLqbFFcVoEeB53CwKFmLIn1O1c3TFskiK4wcYSDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T04:59:01.299841Z"},"content_sha256":"a5998a1d2903a26646f91e435586ec7fa113a6e502752ea5576a96cb9085f97d","schema_version":"1.0","event_id":"sha256:a5998a1d2903a26646f91e435586ec7fa113a6e502752ea5576a96cb9085f97d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/bundle.json","state_url":"https://pith.science/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T04:59:01Z","links":{"resolver":"https://pith.science/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7","bundle":"https://pith.science/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/bundle.json","state":"https://pith.science/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LZ63PO2W6KHHX5CYOUM6GDUWF7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:LZ63PO2W6KHHX5CYOUM6GDUWF7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9ed52da51d3a38369aa8484e170233cb5e3597cbc2fb7c597515519f22368013","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T03:32:38Z","title_canon_sha256":"a2a1d0fe5d93d765b9fcea21a9692084bea794c7fcec1bd0c9903629d067f6c3"},"schema_version":"1.0","source":{"id":"1908.03296","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.03296","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"arxiv_version","alias_value":"1908.03296v2","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.03296","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_12","alias_value":"LZ63PO2W6KHH","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_16","alias_value":"LZ63PO2W6KHHX5CY","created_at":"2026-07-05T00:25:13Z"},{"alias_kind":"pith_short_8","alias_value":"LZ63PO2W","created_at":"2026-07-05T00:25:13Z"}],"graph_snapshots":[{"event_id":"sha256:a5998a1d2903a26646f91e435586ec7fa113a6e502752ea5576a96cb9085f97d","target":"graph","created_at":"2026-07-05T00:25:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.03296/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Password managers have the potential to help users more effectively manage their passwords and address many of the concerns surrounding password-based authentication, however prior research has identified significant vulnerabilities in existing password managers. Since that time, five years has passed, leaving it unclear whether password managers remain vulnerable or whether they are now ready for broad adoption. To answer this question, we evaluate thirteen popular password managers and consider all three stages of the password manager lifecycle--password generation, storage, and autofill. Ou","authors_text":"Scott Ruoti, Sean Oesch","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T03:32:38Z","title":"That Was Then, This Is Now: A Security Evaluation of Password Generation, Storage, and Autofill in Thirteen Password Managers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.03296","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d3f160947d8b41db809c47364a50211fb8cc030ffbeeb4dcc7de05dcaf724334","target":"record","created_at":"2026-07-05T00:25:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9ed52da51d3a38369aa8484e170233cb5e3597cbc2fb7c597515519f22368013","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-09T03:32:38Z","title_canon_sha256":"a2a1d0fe5d93d765b9fcea21a9692084bea794c7fcec1bd0c9903629d067f6c3"},"schema_version":"1.0","source":{"id":"1908.03296","kind":"arxiv","version":2}},"canonical_sha256":"5e7db7bb56f28e7bf4587519e30e962fff8e49c4c85e314372087d4d9d64f62f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5e7db7bb56f28e7bf4587519e30e962fff8e49c4c85e314372087d4d9d64f62f","first_computed_at":"2026-07-05T00:25:13.419923Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:25:13.419923Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cXkp7wC6QIo1NymhD3oOZYAr7cVGzyJxdP5YmlWmT/Db2zJmNJoqmvLPz+VVx/yWjmph89KM4VINJ3UjILJtDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:25:13.420344Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.03296","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d3f160947d8b41db809c47364a50211fb8cc030ffbeeb4dcc7de05dcaf724334","sha256:a5998a1d2903a26646f91e435586ec7fa113a6e502752ea5576a96cb9085f97d"],"state_sha256":"fc1c061a2ace13e4437516d849cdbb9bf1ef426cc967376cb2aa75395772c868"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vZLiLA6k+4KyhFTM98yZ8FeVTX5mbW9Q6Ct2yWQSbutHhN46vE3fCpjMDecwfvb0vDG3xcieigueo3Q51tLqAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T04:59:01.305066Z","bundle_sha256":"e670afb83854c19067f0b2d5e6f1407099ae9531848a46500310c2bf0da43c97"}}