{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:QHVFVXMVVDQKOV4YCW7IN2LYCY","short_pith_number":"pith:QHVFVXMV","canonical_record":{"source":{"id":"2304.14031","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-27T08:56:42Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"ad81565e756679bac5078e44888da6e1c6ab8503aaff3faeea1bfd30481057de","abstract_canon_sha256":"ba5c2d93e5f23752e5f2bbfc9c81f68e7648c7367b3e0c43300a8b757e8f0ff1"},"schema_version":"1.0"},"canonical_sha256":"81ea5add95a8e0a7579815be86e9781624ad7d81ac77b6d70cd3e3b3f6df440a","source":{"kind":"arxiv","id":"2304.14031","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.14031","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"arxiv_version","alias_value":"2304.14031v2","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.14031","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_12","alias_value":"QHVFVXMVVDQK","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_16","alias_value":"QHVFVXMVVDQKOV4Y","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_8","alias_value":"QHVFVXMV","created_at":"2026-07-05T06:35:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:QHVFVXMVVDQKOV4YCW7IN2LYCY","target":"record","payload":{"canonical_record":{"source":{"id":"2304.14031","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-27T08:56:42Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"ad81565e756679bac5078e44888da6e1c6ab8503aaff3faeea1bfd30481057de","abstract_canon_sha256":"ba5c2d93e5f23752e5f2bbfc9c81f68e7648c7367b3e0c43300a8b757e8f0ff1"},"schema_version":"1.0"},"canonical_sha256":"81ea5add95a8e0a7579815be86e9781624ad7d81ac77b6d70cd3e3b3f6df440a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:35:08.751364Z","signature_b64":"rN8WjCZ15YFuX5yNGFFn0MRTN0yvFWB9l0J/m1n6HQX9jwv1YmCQQlMtWcZ+6KZbxkLh0iXUDfyKJGQQUKGkCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"81ea5add95a8e0a7579815be86e9781624ad7d81ac77b6d70cd3e3b3f6df440a","last_reissued_at":"2026-07-05T06:35:08.750856Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:35:08.750856Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.14031","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:35:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6jrAkO/FMnHY6FEPQdpLMkMXjGCu7YkjRAo1jnjukP37Okfib/T6lX+7MM4tRRiazMPDunj0veFoXSDJ65TUDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T20:19:57.218528Z"},"content_sha256":"333662aae5794867496ae8c5306c04c11c779705ab355a9337f987084bf53eea","schema_version":"1.0","event_id":"sha256:333662aae5794867496ae8c5306c04c11c779705ab355a9337f987084bf53eea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:QHVFVXMVVDQKOV4YCW7IN2LYCY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Boosting Big Brother: Attacking Search Engines with Encodings","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.CR","authors_text":"Ilia Shumailov, Luca Pajola, Mauro Conti, Nicholas Boucher, Ross Anderson","submitted_at":"2023-04-27T08:56:42Z","abstract_excerpt":"Search engines are vulnerable to attacks against indexing and searching via text encoding manipulation. By imperceptibly perturbing text using uncommon encoded representations, adversaries can control results across search engines for specific search queries. We demonstrate that this attack is successful against two major commercial search engines - Google and Bing - and one open source search engine - Elasticsearch. We further demonstrate that this attack is successful against LLM chat search including Bing's GPT-4 chatbot and Google's Bard chatbot. We also present a variant of the attack tar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.14031","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.14031/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:35:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lly5pFkHiV1u9luB20fX61iHRzAiFGV24WgXQB4QUcKTsAmbrOP693kwSppm2y4AoD6h7f6fYZmXHS2rY+CjBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T20:19:57.221250Z"},"content_sha256":"73f734e7bebb6cca6aab2e6b576882705fefe85d14ecc83ff4e95d1481323804","schema_version":"1.0","event_id":"sha256:73f734e7bebb6cca6aab2e6b576882705fefe85d14ecc83ff4e95d1481323804"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/bundle.json","state_url":"https://pith.science/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T20:19:57Z","links":{"resolver":"https://pith.science/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY","bundle":"https://pith.science/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/bundle.json","state":"https://pith.science/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QHVFVXMVVDQKOV4YCW7IN2LYCY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:QHVFVXMVVDQKOV4YCW7IN2LYCY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ba5c2d93e5f23752e5f2bbfc9c81f68e7648c7367b3e0c43300a8b757e8f0ff1","cross_cats_sorted":["cs.IR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-27T08:56:42Z","title_canon_sha256":"ad81565e756679bac5078e44888da6e1c6ab8503aaff3faeea1bfd30481057de"},"schema_version":"1.0","source":{"id":"2304.14031","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.14031","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"arxiv_version","alias_value":"2304.14031v2","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.14031","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_12","alias_value":"QHVFVXMVVDQK","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_16","alias_value":"QHVFVXMVVDQKOV4Y","created_at":"2026-07-05T06:35:08Z"},{"alias_kind":"pith_short_8","alias_value":"QHVFVXMV","created_at":"2026-07-05T06:35:08Z"}],"graph_snapshots":[{"event_id":"sha256:73f734e7bebb6cca6aab2e6b576882705fefe85d14ecc83ff4e95d1481323804","target":"graph","created_at":"2026-07-05T06:35:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.14031/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Search engines are vulnerable to attacks against indexing and searching via text encoding manipulation. By imperceptibly perturbing text using uncommon encoded representations, adversaries can control results across search engines for specific search queries. We demonstrate that this attack is successful against two major commercial search engines - Google and Bing - and one open source search engine - Elasticsearch. We further demonstrate that this attack is successful against LLM chat search including Bing's GPT-4 chatbot and Google's Bard chatbot. We also present a variant of the attack tar","authors_text":"Ilia Shumailov, Luca Pajola, Mauro Conti, Nicholas Boucher, Ross Anderson","cross_cats":["cs.IR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-27T08:56:42Z","title":"Boosting Big Brother: Attacking Search Engines with Encodings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.14031","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:333662aae5794867496ae8c5306c04c11c779705ab355a9337f987084bf53eea","target":"record","created_at":"2026-07-05T06:35:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ba5c2d93e5f23752e5f2bbfc9c81f68e7648c7367b3e0c43300a8b757e8f0ff1","cross_cats_sorted":["cs.IR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-27T08:56:42Z","title_canon_sha256":"ad81565e756679bac5078e44888da6e1c6ab8503aaff3faeea1bfd30481057de"},"schema_version":"1.0","source":{"id":"2304.14031","kind":"arxiv","version":2}},"canonical_sha256":"81ea5add95a8e0a7579815be86e9781624ad7d81ac77b6d70cd3e3b3f6df440a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"81ea5add95a8e0a7579815be86e9781624ad7d81ac77b6d70cd3e3b3f6df440a","first_computed_at":"2026-07-05T06:35:08.750856Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:35:08.750856Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rN8WjCZ15YFuX5yNGFFn0MRTN0yvFWB9l0J/m1n6HQX9jwv1YmCQQlMtWcZ+6KZbxkLh0iXUDfyKJGQQUKGkCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:35:08.751364Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.14031","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:333662aae5794867496ae8c5306c04c11c779705ab355a9337f987084bf53eea","sha256:73f734e7bebb6cca6aab2e6b576882705fefe85d14ecc83ff4e95d1481323804"],"state_sha256":"97ba57fed4b44b0cd4c363436f61d1fcdb438499e6723da48a8bb47aeffc9373"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"seeh8Y0P9Ry+mublcyIsW41MAqSo+3HGLRTdAsYaXLgylIFZEAWIV74P1cHoCY/oWXHo/WnYRJ7rPqzv8vPgDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T20:19:57.230044Z","bundle_sha256":"50e7be893556de8f8d4076f4ca9af1ed6e85fbd779f845daa761e3e2b88f6f54"}}