{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NQZP4PMCO2TJ4BG5RWI22VZWFV","short_pith_number":"pith:NQZP4PMC","canonical_record":{"source":{"id":"2106.05407","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-06-09T21:52:13Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"3c02fee8768d28a70ed4f2d2acb8b534f84ff1f2358a1c66631bd9c702b0d502","abstract_canon_sha256":"f2e618100008a22191cfac8925fa8d1d4df7fe9d1f5c411fdaf26dda5480fe93"},"schema_version":"1.0"},"canonical_sha256":"6c32fe3d8276a69e04dd8d91ad57362d786f3b425fb051370c3c5ccd5bd44636","source":{"kind":"arxiv","id":"2106.05407","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.05407","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"arxiv_version","alias_value":"2106.05407v4","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.05407","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_12","alias_value":"NQZP4PMCO2TJ","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_16","alias_value":"NQZP4PMCO2TJ4BG5","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_8","alias_value":"NQZP4PMC","created_at":"2026-07-05T03:33:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NQZP4PMCO2TJ4BG5RWI22VZWFV","target":"record","payload":{"canonical_record":{"source":{"id":"2106.05407","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-06-09T21:52:13Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"3c02fee8768d28a70ed4f2d2acb8b534f84ff1f2358a1c66631bd9c702b0d502","abstract_canon_sha256":"f2e618100008a22191cfac8925fa8d1d4df7fe9d1f5c411fdaf26dda5480fe93"},"schema_version":"1.0"},"canonical_sha256":"6c32fe3d8276a69e04dd8d91ad57362d786f3b425fb051370c3c5ccd5bd44636","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:33:22.101722Z","signature_b64":"zYE9aXlvzpMu4ApkXhKrhKgwtJAXobyUVEqNOn0JcMgIiM/EXdOk8trE98GLvOE6rp0GFr6yhqvGavuaf536AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6c32fe3d8276a69e04dd8d91ad57362d786f3b425fb051370c3c5ccd5bd44636","last_reissued_at":"2026-07-05T03:33:22.101282Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:33:22.101282Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.05407","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t7UKQMSv/GBjS7bICchpqPiWEvDT9VV/kT+Vt76FFjuF3iW6qqwKZWRm7KmRSxQORg8KID6ZD2rZ495RNQJUCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:07:14.096844Z"},"content_sha256":"596177a224844586157b75dbab22905f03c4bbbbcdbfd4554ddd8481b9208707","schema_version":"1.0","event_id":"sha256:596177a224844586157b75dbab22905f03c4bbbbcdbfd4554ddd8481b9208707"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NQZP4PMCO2TJ4BG5RWI22VZWFV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"OVRseen: Auditing Network Traffic and Privacy Policies in Oculus VR","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Anastasia Shuba, Athina Markopoulou, Hao Cui, Hieu Le, Janice Tran Ho, Rahmadi Trimananda","submitted_at":"2021-06-09T21:52:13Z","abstract_excerpt":"Virtual reality (VR) is an emerging technology that enables new applications but also introduces privacy risks. In this paper, we focus on Oculus VR (OVR), the leading platform in the VR space and we provide the first comprehensive analysis of personal data exposed by OVR apps and the platform itself, from a combined networking and privacy policy perspective. We experimented with the Quest 2 headset and tested the most popular VR apps available on the official Oculus and the SideQuest app stores. We developed OVRseen, a methodology and system for collecting, analyzing, and comparing network tr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.05407","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.05407/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Zl1edfpgwfgN3TIOh6DO8plIM+4BwRahivL8JQdG1gIvrqo2uAFutMZquGTfMTn6yh0Yie0BFUkKyUfOMjmEBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:07:14.097465Z"},"content_sha256":"644389fe6027c2681932969f419c9c781e5b061260a925fcbe7c1b4d3e113f6f","schema_version":"1.0","event_id":"sha256:644389fe6027c2681932969f419c9c781e5b061260a925fcbe7c1b4d3e113f6f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/bundle.json","state_url":"https://pith.science/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:07:14Z","links":{"resolver":"https://pith.science/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV","bundle":"https://pith.science/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/bundle.json","state":"https://pith.science/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NQZP4PMCO2TJ4BG5RWI22VZWFV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NQZP4PMCO2TJ4BG5RWI22VZWFV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f2e618100008a22191cfac8925fa8d1d4df7fe9d1f5c411fdaf26dda5480fe93","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-06-09T21:52:13Z","title_canon_sha256":"3c02fee8768d28a70ed4f2d2acb8b534f84ff1f2358a1c66631bd9c702b0d502"},"schema_version":"1.0","source":{"id":"2106.05407","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.05407","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"arxiv_version","alias_value":"2106.05407v4","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.05407","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_12","alias_value":"NQZP4PMCO2TJ","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_16","alias_value":"NQZP4PMCO2TJ4BG5","created_at":"2026-07-05T03:33:22Z"},{"alias_kind":"pith_short_8","alias_value":"NQZP4PMC","created_at":"2026-07-05T03:33:22Z"}],"graph_snapshots":[{"event_id":"sha256:644389fe6027c2681932969f419c9c781e5b061260a925fcbe7c1b4d3e113f6f","target":"graph","created_at":"2026-07-05T03:33:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.05407/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Virtual reality (VR) is an emerging technology that enables new applications but also introduces privacy risks. In this paper, we focus on Oculus VR (OVR), the leading platform in the VR space and we provide the first comprehensive analysis of personal data exposed by OVR apps and the platform itself, from a combined networking and privacy policy perspective. We experimented with the Quest 2 headset and tested the most popular VR apps available on the official Oculus and the SideQuest app stores. We developed OVRseen, a methodology and system for collecting, analyzing, and comparing network tr","authors_text":"Anastasia Shuba, Athina Markopoulou, Hao Cui, Hieu Le, Janice Tran Ho, Rahmadi Trimananda","cross_cats":["cs.NI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-06-09T21:52:13Z","title":"OVRseen: Auditing Network Traffic and Privacy Policies in Oculus VR"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.05407","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:596177a224844586157b75dbab22905f03c4bbbbcdbfd4554ddd8481b9208707","target":"record","created_at":"2026-07-05T03:33:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f2e618100008a22191cfac8925fa8d1d4df7fe9d1f5c411fdaf26dda5480fe93","cross_cats_sorted":["cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-06-09T21:52:13Z","title_canon_sha256":"3c02fee8768d28a70ed4f2d2acb8b534f84ff1f2358a1c66631bd9c702b0d502"},"schema_version":"1.0","source":{"id":"2106.05407","kind":"arxiv","version":4}},"canonical_sha256":"6c32fe3d8276a69e04dd8d91ad57362d786f3b425fb051370c3c5ccd5bd44636","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6c32fe3d8276a69e04dd8d91ad57362d786f3b425fb051370c3c5ccd5bd44636","first_computed_at":"2026-07-05T03:33:22.101282Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:33:22.101282Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zYE9aXlvzpMu4ApkXhKrhKgwtJAXobyUVEqNOn0JcMgIiM/EXdOk8trE98GLvOE6rp0GFr6yhqvGavuaf536AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:33:22.101722Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.05407","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:596177a224844586157b75dbab22905f03c4bbbbcdbfd4554ddd8481b9208707","sha256:644389fe6027c2681932969f419c9c781e5b061260a925fcbe7c1b4d3e113f6f"],"state_sha256":"21043a6e35b6564e6688f61bdc3aaeedbce018e488098766ebb6c19814acb19f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qyRQyu/UNRZdUV/nZwqfiUbzcJdwY/YwN7YVxCrfGducVd0sZHdGXRRtcjNUKdJT2A8zIz8NfT1s/xWON796CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:07:14.100063Z","bundle_sha256":"d001d3d46f24327d373e2dd0b89c9030971f07c9acb2175f62887769fac2868a"}}