{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:NHCITVQZ7GWKGM2V5LN4ASDC72","short_pith_number":"pith:NHCITVQZ","canonical_record":{"source":{"id":"1811.06584","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-15T20:28:56Z","cross_cats_sorted":[],"title_canon_sha256":"56f395c32d35e675940d674a0dcc3fa270b0b187a53d408324d6cd7517c82f34","abstract_canon_sha256":"f8a47c7fb0a2b3357a0eec280d86eaf67b0f9f64298b7af2531a2568f4a8c2a6"},"schema_version":"1.0"},"canonical_sha256":"69c489d619f9aca33355eadbc04862fe8dfb851c2faaf04bfbfa39cf4c2bb4c9","source":{"kind":"arxiv","id":"1811.06584","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.06584","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"arxiv_version","alias_value":"1811.06584v1","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.06584","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"pith_short_12","alias_value":"NHCITVQZ7GWK","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"NHCITVQZ7GWKGM2V","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"NHCITVQZ","created_at":"2026-05-18T12:32:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:NHCITVQZ7GWKGM2V5LN4ASDC72","target":"record","payload":{"canonical_record":{"source":{"id":"1811.06584","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-15T20:28:56Z","cross_cats_sorted":[],"title_canon_sha256":"56f395c32d35e675940d674a0dcc3fa270b0b187a53d408324d6cd7517c82f34","abstract_canon_sha256":"f8a47c7fb0a2b3357a0eec280d86eaf67b0f9f64298b7af2531a2568f4a8c2a6"},"schema_version":"1.0"},"canonical_sha256":"69c489d619f9aca33355eadbc04862fe8dfb851c2faaf04bfbfa39cf4c2bb4c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:00:34.445894Z","signature_b64":"J4Nqd0Cme8DQp9flZREqlbSuLfm9SbfK6VUHAmwswWwt9/2EONBAW5uh6aekNIX6kLnIz7ESx82Wcbz7Y+tZCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"69c489d619f9aca33355eadbc04862fe8dfb851c2faaf04bfbfa39cf4c2bb4c9","last_reissued_at":"2026-05-18T00:00:34.445365Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:00:34.445365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.06584","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UfJUNeB39XpUu+bLoZRteofP2i+F2dcDuRjM3e3NX/HhHqDSr8dWQa0akH4fTnsrXtNrSUeJ3YYm5Qp5WUAHBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T04:00:24.640915Z"},"content_sha256":"1ec932af680f4ee3a53ed40e53ae8b27becc28bf6ce9bb527e39adfd3bffa7d2","schema_version":"1.0","event_id":"sha256:1ec932af680f4ee3a53ed40e53ae8b27becc28bf6ce9bb527e39adfd3bffa7d2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:NHCITVQZ7GWKGM2V5LN4ASDC72","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cybercasing 2.0: You Get What You Pay For","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gerald Friedland, Istemi Ekin Akkus, Jaeyoung Choi, Michael Carl Tschantz, Nicholas Weaver, Robin Sommer, Serge Egelman","submitted_at":"2018-11-15T20:28:56Z","abstract_excerpt":"Under U.S. law, marketing databases exist under almost no legal restrictions concerning accuracy, access, or confidentiality. We explore the possible (mis)use of these databases in a criminal context by conducting two experiments. First, we show how this data can be used for \"cybercasing\" by using this data to resolve the physical addresses of individuals who are likely to be on vacation. Second, we evaluate the utility of a \"bride to be\" mailing list augmented with data obtained by searching both Facebook and a bridal registry aggregator. We conclude that marketing data is not necessarily har"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.06584","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YoQJNU5WjR6z340AQXLtnEzNmUGHjY68DErhcOonPXOeavwcgWiM/EVG4FjU1ukgDLoRh98JN0SZcUpTvN4qAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T04:00:24.641523Z"},"content_sha256":"6a56c2a7fbce34ea895efd7f1a33585b170082d16646a99806d858b5e8f37e78","schema_version":"1.0","event_id":"sha256:6a56c2a7fbce34ea895efd7f1a33585b170082d16646a99806d858b5e8f37e78"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/bundle.json","state_url":"https://pith.science/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T04:00:24Z","links":{"resolver":"https://pith.science/pith/NHCITVQZ7GWKGM2V5LN4ASDC72","bundle":"https://pith.science/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/bundle.json","state":"https://pith.science/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NHCITVQZ7GWKGM2V5LN4ASDC72/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:NHCITVQZ7GWKGM2V5LN4ASDC72","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f8a47c7fb0a2b3357a0eec280d86eaf67b0f9f64298b7af2531a2568f4a8c2a6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-15T20:28:56Z","title_canon_sha256":"56f395c32d35e675940d674a0dcc3fa270b0b187a53d408324d6cd7517c82f34"},"schema_version":"1.0","source":{"id":"1811.06584","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.06584","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"arxiv_version","alias_value":"1811.06584v1","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.06584","created_at":"2026-05-18T00:00:34Z"},{"alias_kind":"pith_short_12","alias_value":"NHCITVQZ7GWK","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"NHCITVQZ7GWKGM2V","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"NHCITVQZ","created_at":"2026-05-18T12:32:40Z"}],"graph_snapshots":[{"event_id":"sha256:6a56c2a7fbce34ea895efd7f1a33585b170082d16646a99806d858b5e8f37e78","target":"graph","created_at":"2026-05-18T00:00:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Under U.S. law, marketing databases exist under almost no legal restrictions concerning accuracy, access, or confidentiality. We explore the possible (mis)use of these databases in a criminal context by conducting two experiments. First, we show how this data can be used for \"cybercasing\" by using this data to resolve the physical addresses of individuals who are likely to be on vacation. Second, we evaluate the utility of a \"bride to be\" mailing list augmented with data obtained by searching both Facebook and a bridal registry aggregator. We conclude that marketing data is not necessarily har","authors_text":"Gerald Friedland, Istemi Ekin Akkus, Jaeyoung Choi, Michael Carl Tschantz, Nicholas Weaver, Robin Sommer, Serge Egelman","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-15T20:28:56Z","title":"Cybercasing 2.0: You Get What You Pay For"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.06584","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ec932af680f4ee3a53ed40e53ae8b27becc28bf6ce9bb527e39adfd3bffa7d2","target":"record","created_at":"2026-05-18T00:00:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f8a47c7fb0a2b3357a0eec280d86eaf67b0f9f64298b7af2531a2568f4a8c2a6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-15T20:28:56Z","title_canon_sha256":"56f395c32d35e675940d674a0dcc3fa270b0b187a53d408324d6cd7517c82f34"},"schema_version":"1.0","source":{"id":"1811.06584","kind":"arxiv","version":1}},"canonical_sha256":"69c489d619f9aca33355eadbc04862fe8dfb851c2faaf04bfbfa39cf4c2bb4c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"69c489d619f9aca33355eadbc04862fe8dfb851c2faaf04bfbfa39cf4c2bb4c9","first_computed_at":"2026-05-18T00:00:34.445365Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:00:34.445365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"J4Nqd0Cme8DQp9flZREqlbSuLfm9SbfK6VUHAmwswWwt9/2EONBAW5uh6aekNIX6kLnIz7ESx82Wcbz7Y+tZCQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:00:34.445894Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.06584","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ec932af680f4ee3a53ed40e53ae8b27becc28bf6ce9bb527e39adfd3bffa7d2","sha256:6a56c2a7fbce34ea895efd7f1a33585b170082d16646a99806d858b5e8f37e78"],"state_sha256":"fbeb26294a7c657ad33a168a4a2abeb1eda71b7fc2791ac6b6b2f813595c2c45"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PsW1n7CULvx7tp/S0chmQOLOcq6WOaCmqaD6l4UGvfb7atAMLz1j7PiEKYpblPwNgKZblI+hq/sc3UYHaUf+Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T04:00:24.645252Z","bundle_sha256":"523b9941c8b43e0da3790a0ab95d974c9211907ddbd2c4c1ded22e148b20dbe7"}}