{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:OMQBZ4BJNO3ITQKQKKXHQEY6V6","short_pith_number":"pith:OMQBZ4BJ","canonical_record":{"source":{"id":"2112.13997","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-28T05:07:11Z","cross_cats_sorted":[],"title_canon_sha256":"ebe6f41a7a7b4ff62a569ae539e94b531f0a62209e77f6f29342e4d84000d039","abstract_canon_sha256":"7dbbcd4d237bd6472ba200d0da4eab51eb62becebe684b20f37030e7cd93e14a"},"schema_version":"1.0"},"canonical_sha256":"73201cf0296bb689c15052ae78131eaf883fc4f6a66db9161eeb950c218454cb","source":{"kind":"arxiv","id":"2112.13997","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.13997","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"arxiv_version","alias_value":"2112.13997v2","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.13997","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_12","alias_value":"OMQBZ4BJNO3I","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_16","alias_value":"OMQBZ4BJNO3ITQKQ","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_8","alias_value":"OMQBZ4BJ","created_at":"2026-07-05T05:40:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:OMQBZ4BJNO3ITQKQKKXHQEY6V6","target":"record","payload":{"canonical_record":{"source":{"id":"2112.13997","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-28T05:07:11Z","cross_cats_sorted":[],"title_canon_sha256":"ebe6f41a7a7b4ff62a569ae539e94b531f0a62209e77f6f29342e4d84000d039","abstract_canon_sha256":"7dbbcd4d237bd6472ba200d0da4eab51eb62becebe684b20f37030e7cd93e14a"},"schema_version":"1.0"},"canonical_sha256":"73201cf0296bb689c15052ae78131eaf883fc4f6a66db9161eeb950c218454cb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:40:20.176919Z","signature_b64":"olvCGTa54xvTS9mRJgthI9RM42k35jRbbjDYHzjUy0VDy6k7nJYQ3dc0i3u0+0fyhh4dE/IyQ8izIEkAqhGHAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"73201cf0296bb689c15052ae78131eaf883fc4f6a66db9161eeb950c218454cb","last_reissued_at":"2026-07-05T05:40:20.176507Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:40:20.176507Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.13997","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:40:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cDJN+XSq8NJn89w7A31yH7WWBEfY/0IBPMJIb4DKMhbPMpYtn+XRfqL/5eocmO9tm9twcm2POSgEgY/3c7RaCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:07:55.386108Z"},"content_sha256":"1af70298afe53565dd1b1fe36e3c0f38097d6302d622bb802b6a2ff00c332c0d","schema_version":"1.0","event_id":"sha256:1af70298afe53565dd1b1fe36e3c0f38097d6302d622bb802b6a2ff00c332c0d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:OMQBZ4BJNO3ITQKQKKXHQEY6V6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Privacy Weaknesses and Vulnerabilities in Software Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Aditya Ghose, Hoa Khanh Dam, Pattaraporn Sangaroonsilp","submitted_at":"2021-12-28T05:07:11Z","abstract_excerpt":"In this digital era, our privacy is under constant threat as our personal data and traceable online/offline activities are frequently collected, processed and transferred by many software applications. Privacy attacks are often formed by exploiting vulnerabilities found in those software applications. The Common Weakness Enumeration (CWE) and Common Vulnerabilities and Exposures (CVE) systems are currently the main sources that software engineers rely on for understanding and preventing publicly disclosed software vulnerabilities. However, our study on all 922 weaknesses in the CWE and 156,537"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.13997","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.13997/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:40:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Fj2apOqDur76RxZ1XrmokA8ftl0wNU1znuC3pv6/mg2np+HUE+VHJgzpS8iLtZSuAacc+1oKYNeLmt3H5EKPBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T03:07:55.386664Z"},"content_sha256":"a83221c27c706f380f341c2f9e2a554eedcc4c06672733455d734b3817468b78","schema_version":"1.0","event_id":"sha256:a83221c27c706f380f341c2f9e2a554eedcc4c06672733455d734b3817468b78"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/bundle.json","state_url":"https://pith.science/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T03:07:55Z","links":{"resolver":"https://pith.science/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6","bundle":"https://pith.science/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/bundle.json","state":"https://pith.science/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OMQBZ4BJNO3ITQKQKKXHQEY6V6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:OMQBZ4BJNO3ITQKQKKXHQEY6V6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7dbbcd4d237bd6472ba200d0da4eab51eb62becebe684b20f37030e7cd93e14a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-28T05:07:11Z","title_canon_sha256":"ebe6f41a7a7b4ff62a569ae539e94b531f0a62209e77f6f29342e4d84000d039"},"schema_version":"1.0","source":{"id":"2112.13997","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.13997","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"arxiv_version","alias_value":"2112.13997v2","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.13997","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_12","alias_value":"OMQBZ4BJNO3I","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_16","alias_value":"OMQBZ4BJNO3ITQKQ","created_at":"2026-07-05T05:40:20Z"},{"alias_kind":"pith_short_8","alias_value":"OMQBZ4BJ","created_at":"2026-07-05T05:40:20Z"}],"graph_snapshots":[{"event_id":"sha256:a83221c27c706f380f341c2f9e2a554eedcc4c06672733455d734b3817468b78","target":"graph","created_at":"2026-07-05T05:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.13997/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this digital era, our privacy is under constant threat as our personal data and traceable online/offline activities are frequently collected, processed and transferred by many software applications. Privacy attacks are often formed by exploiting vulnerabilities found in those software applications. The Common Weakness Enumeration (CWE) and Common Vulnerabilities and Exposures (CVE) systems are currently the main sources that software engineers rely on for understanding and preventing publicly disclosed software vulnerabilities. However, our study on all 922 weaknesses in the CWE and 156,537","authors_text":"Aditya Ghose, Hoa Khanh Dam, Pattaraporn Sangaroonsilp","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-28T05:07:11Z","title":"On Privacy Weaknesses and Vulnerabilities in Software Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.13997","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1af70298afe53565dd1b1fe36e3c0f38097d6302d622bb802b6a2ff00c332c0d","target":"record","created_at":"2026-07-05T05:40:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7dbbcd4d237bd6472ba200d0da4eab51eb62becebe684b20f37030e7cd93e14a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-12-28T05:07:11Z","title_canon_sha256":"ebe6f41a7a7b4ff62a569ae539e94b531f0a62209e77f6f29342e4d84000d039"},"schema_version":"1.0","source":{"id":"2112.13997","kind":"arxiv","version":2}},"canonical_sha256":"73201cf0296bb689c15052ae78131eaf883fc4f6a66db9161eeb950c218454cb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"73201cf0296bb689c15052ae78131eaf883fc4f6a66db9161eeb950c218454cb","first_computed_at":"2026-07-05T05:40:20.176507Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:40:20.176507Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"olvCGTa54xvTS9mRJgthI9RM42k35jRbbjDYHzjUy0VDy6k7nJYQ3dc0i3u0+0fyhh4dE/IyQ8izIEkAqhGHAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:40:20.176919Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.13997","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1af70298afe53565dd1b1fe36e3c0f38097d6302d622bb802b6a2ff00c332c0d","sha256:a83221c27c706f380f341c2f9e2a554eedcc4c06672733455d734b3817468b78"],"state_sha256":"8a57e2b2d99778436497bb8bdcf3f482b073c81885278bdfaa48fe29e34c0998"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dBRxBwzMHd52P5A4IcIKRc+BV3251G7pdK5NZQn34/JO7I07qhdwE3jyxfPAxuJEEW2rtB+jkKQgBozkmRCvCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T03:07:55.392188Z","bundle_sha256":"4bb934f638ef139e4d81611df9a9d349761e9c407080483d5f79d6f57aec0058"}}