{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:MYXXCTCQIVVWMGT7JFNJVXXI65","short_pith_number":"pith:MYXXCTCQ","canonical_record":{"source":{"id":"2403.05721","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T23:22:16Z","cross_cats_sorted":[],"title_canon_sha256":"0c31245ee226cd4324b946a4827af3a053306ef11b1e4842406d1122acffae51","abstract_canon_sha256":"20fdd84cee80bf97c89aaac175dec48fac6df62612890e44fdd12dfabde2e4c2"},"schema_version":"1.0"},"canonical_sha256":"662f714c50456b661a7f495a9adee8f74445929624b4ce8fd8a19d3bf8110870","source":{"kind":"arxiv","id":"2403.05721","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.05721","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"arxiv_version","alias_value":"2403.05721v2","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.05721","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_12","alias_value":"MYXXCTCQIVVW","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_16","alias_value":"MYXXCTCQIVVWMGT7","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_8","alias_value":"MYXXCTCQ","created_at":"2026-07-05T09:04:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:MYXXCTCQIVVWMGT7JFNJVXXI65","target":"record","payload":{"canonical_record":{"source":{"id":"2403.05721","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T23:22:16Z","cross_cats_sorted":[],"title_canon_sha256":"0c31245ee226cd4324b946a4827af3a053306ef11b1e4842406d1122acffae51","abstract_canon_sha256":"20fdd84cee80bf97c89aaac175dec48fac6df62612890e44fdd12dfabde2e4c2"},"schema_version":"1.0"},"canonical_sha256":"662f714c50456b661a7f495a9adee8f74445929624b4ce8fd8a19d3bf8110870","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:04:56.719313Z","signature_b64":"aP9EgwNNwyquZgWfArgfj7F6NFb5dbzzY2gBS8kwXc5JaWQd+VXh+z+sxjF29Da3FR31iMpr50HeseXY7HHrCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"662f714c50456b661a7f495a9adee8f74445929624b4ce8fd8a19d3bf8110870","last_reissued_at":"2026-07-05T09:04:56.718861Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:04:56.718861Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.05721","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:04:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/ViHRuUE8K/igTSZiBLUFp66aRCLK4QXzoUne8kaDYuB6w3Ev9RMX1oRJzn1P7zkEY7vy3nqsJfzCG2W5ChGCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:07:15.886452Z"},"content_sha256":"3b72d324433bfa66f966f151c22ddf3ca66b163f95ec04282a34bef230df66d7","schema_version":"1.0","event_id":"sha256:3b72d324433bfa66f966f151c22ddf3ca66b163f95ec04282a34bef230df66d7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:MYXXCTCQIVVWMGT7JFNJVXXI65","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Inception Attacks: Immersive Hijacking in Virtual Reality Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Arman Bhalla, Ben Y. Zhao, Cathy Yuanchen Li, Haitao Zheng, Zhuolin Yang","submitted_at":"2024-03-08T23:22:16Z","abstract_excerpt":"Today's virtual reality (VR) systems provide immersive interactions that seamlessly connect users with online services and one another. However, these immersive interfaces also introduce new vulnerabilities, making it easier for users to fall prey to new attacks. In this work, we introduce the immersive hijacking attack, where a remote attacker takes control of a user's interaction with their VR system, by trapping them inside a malicious app that masquerades as the full VR interface. Once trapped, all of the user's interactions with apps, services and other users can be recorded and modified "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.05721","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.05721/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:04:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fCcbc579AQ5Nr1n1BvPQrELCZQsu0kl3k1az0zwcQa4wibiQt/lVRrLKaxij+hixZ6W+Vkr5I76JLe9ZJYLwAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T09:07:15.886815Z"},"content_sha256":"2a9e42e1e214d0f214462d22a2e42542ef7d62659c88c762bb58dd8dce8066c1","schema_version":"1.0","event_id":"sha256:2a9e42e1e214d0f214462d22a2e42542ef7d62659c88c762bb58dd8dce8066c1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/bundle.json","state_url":"https://pith.science/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T09:07:15Z","links":{"resolver":"https://pith.science/pith/MYXXCTCQIVVWMGT7JFNJVXXI65","bundle":"https://pith.science/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/bundle.json","state":"https://pith.science/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MYXXCTCQIVVWMGT7JFNJVXXI65/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:MYXXCTCQIVVWMGT7JFNJVXXI65","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"20fdd84cee80bf97c89aaac175dec48fac6df62612890e44fdd12dfabde2e4c2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T23:22:16Z","title_canon_sha256":"0c31245ee226cd4324b946a4827af3a053306ef11b1e4842406d1122acffae51"},"schema_version":"1.0","source":{"id":"2403.05721","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.05721","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"arxiv_version","alias_value":"2403.05721v2","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.05721","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_12","alias_value":"MYXXCTCQIVVW","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_16","alias_value":"MYXXCTCQIVVWMGT7","created_at":"2026-07-05T09:04:56Z"},{"alias_kind":"pith_short_8","alias_value":"MYXXCTCQ","created_at":"2026-07-05T09:04:56Z"}],"graph_snapshots":[{"event_id":"sha256:2a9e42e1e214d0f214462d22a2e42542ef7d62659c88c762bb58dd8dce8066c1","target":"graph","created_at":"2026-07-05T09:04:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.05721/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Today's virtual reality (VR) systems provide immersive interactions that seamlessly connect users with online services and one another. However, these immersive interfaces also introduce new vulnerabilities, making it easier for users to fall prey to new attacks. In this work, we introduce the immersive hijacking attack, where a remote attacker takes control of a user's interaction with their VR system, by trapping them inside a malicious app that masquerades as the full VR interface. Once trapped, all of the user's interactions with apps, services and other users can be recorded and modified ","authors_text":"Arman Bhalla, Ben Y. Zhao, Cathy Yuanchen Li, Haitao Zheng, Zhuolin Yang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T23:22:16Z","title":"Inception Attacks: Immersive Hijacking in Virtual Reality Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.05721","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3b72d324433bfa66f966f151c22ddf3ca66b163f95ec04282a34bef230df66d7","target":"record","created_at":"2026-07-05T09:04:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"20fdd84cee80bf97c89aaac175dec48fac6df62612890e44fdd12dfabde2e4c2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-08T23:22:16Z","title_canon_sha256":"0c31245ee226cd4324b946a4827af3a053306ef11b1e4842406d1122acffae51"},"schema_version":"1.0","source":{"id":"2403.05721","kind":"arxiv","version":2}},"canonical_sha256":"662f714c50456b661a7f495a9adee8f74445929624b4ce8fd8a19d3bf8110870","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"662f714c50456b661a7f495a9adee8f74445929624b4ce8fd8a19d3bf8110870","first_computed_at":"2026-07-05T09:04:56.718861Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:04:56.718861Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aP9EgwNNwyquZgWfArgfj7F6NFb5dbzzY2gBS8kwXc5JaWQd+VXh+z+sxjF29Da3FR31iMpr50HeseXY7HHrCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:04:56.719313Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.05721","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3b72d324433bfa66f966f151c22ddf3ca66b163f95ec04282a34bef230df66d7","sha256:2a9e42e1e214d0f214462d22a2e42542ef7d62659c88c762bb58dd8dce8066c1"],"state_sha256":"15355bc979ff32fac77f1da2c0e9dbe6a6b748347ca6758de9f90b441c156f48"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4nM4TA1K2otiTQ7Wmsmk8hXpy8eas73oP3Yid/VYgaA7sXA9kMTiU+/I6F97gBQ/sYAz2pxJvfqKLEnqcQ5MCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T09:07:15.888753Z","bundle_sha256":"c625f573040e6ddf1e277890585ee664e871aa833d247c2f781b722f93a0572a"}}