{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:P3F7V4XESIIPEOONDFPOQNLSVB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b8c83b5fff049267848dcf762125f678d7fbfab3bdb3789c843daee5054aa17","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-30T09:51:45Z","title_canon_sha256":"f1c0c7afae11251502bf1e1bd78acae9131dd6d2b099150cdcb150ed2b7f8902"},"schema_version":"1.0","source":{"id":"1904.00188","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.00188","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"1904.00188v2","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.00188","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"P3F7V4XESIIP","created_at":"2026-05-18T12:33:24Z"},{"alias_kind":"pith_short_16","alias_value":"P3F7V4XESIIPEOON","created_at":"2026-05-18T12:33:24Z"},{"alias_kind":"pith_short_8","alias_value":"P3F7V4XE","created_at":"2026-05-18T12:33:24Z"}],"graph_snapshots":[{"event_id":"sha256:cc94b92bab2a82a3260f71934c029854c4101386fc875e39e03f6f13d5ed49e8","target":"graph","created_at":"2026-05-17T23:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"This paper studies leakage of user passwords and PINs based on observations of typing feedback on screens or from projectors in the form of masked characters that indicate keystrokes. To this end, we developed an attack called Password and Pin Information Leakage from Obfuscated Typing Videos (PILOT). Our attack extracts inter-keystroke timing information from videos of password masking characters displayed when users type their password on a computer, or their PIN at an ATM. We conducted several experiments in various attack scenarios. Results indicate that, while in some cases leakage is min","authors_text":"Charissa Miller, Daniele Lain, Eugen Saraci, Gene Tsudik, Kendall Molas, Kiran Balagani, Lynn Wu, Martin Georgiev, Matteo Cardaioli, Mauro Conti, Nikita Samarin, Paolo Gasti, Tristan Gurtler","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-30T09:51:45Z","title":"PILOT: Password and PIN Information Leakage from Obfuscated Typing Videos"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.00188","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bbc676760269f9bc2ad9230ac97c940bbab40440f4a771f7b81b4ee8173e4857","target":"record","created_at":"2026-05-17T23:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b8c83b5fff049267848dcf762125f678d7fbfab3bdb3789c843daee5054aa17","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-30T09:51:45Z","title_canon_sha256":"f1c0c7afae11251502bf1e1bd78acae9131dd6d2b099150cdcb150ed2b7f8902"},"schema_version":"1.0","source":{"id":"1904.00188","kind":"arxiv","version":2}},"canonical_sha256":"7ecbfaf2e49210f239cd195ee83572a85ba950aabc8b5a1a804fcbfb29edb943","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7ecbfaf2e49210f239cd195ee83572a85ba950aabc8b5a1a804fcbfb29edb943","first_computed_at":"2026-05-17T23:48:59.773553Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:48:59.773553Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4ineNrsmRnm2y+2PmN1UvgvWXlu/6mpmhgZOX/zyHZKiqdts33RI3KAs8a7dyjQjo4FbCi8hIX4Lko6r97wOCQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:48:59.773999Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.00188","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bbc676760269f9bc2ad9230ac97c940bbab40440f4a771f7b81b4ee8173e4857","sha256:cc94b92bab2a82a3260f71934c029854c4101386fc875e39e03f6f13d5ed49e8"],"state_sha256":"49ed96fbec0dcb63f8baeb6f2323dda35931e1220ab0d1cd41f323a82cca508e"}