{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RH5HVCLNKF4NMNJBF3DA42SDM2","short_pith_number":"pith:RH5HVCLN","canonical_record":{"source":{"id":"2405.19871","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T09:23:53Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"5908c26cabf5f56b9eb023bf5d4465e027774f30af37beb37dc314dcbb3d1869","abstract_canon_sha256":"49bcc277933c9bd083a619b86d9b5ef1f8973df40394281e8471553d58371de1"},"schema_version":"1.0"},"canonical_sha256":"89fa7a896d5178d635212ec60e6a4366be0b4b5ba80dbf0fc60bf4024f654c53","source":{"kind":"arxiv","id":"2405.19871","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19871","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19871v1","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19871","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_12","alias_value":"RH5HVCLNKF4N","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_16","alias_value":"RH5HVCLNKF4NMNJB","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_8","alias_value":"RH5HVCLN","created_at":"2026-07-05T08:27:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RH5HVCLNKF4NMNJBF3DA42SDM2","target":"record","payload":{"canonical_record":{"source":{"id":"2405.19871","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T09:23:53Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"5908c26cabf5f56b9eb023bf5d4465e027774f30af37beb37dc314dcbb3d1869","abstract_canon_sha256":"49bcc277933c9bd083a619b86d9b5ef1f8973df40394281e8471553d58371de1"},"schema_version":"1.0"},"canonical_sha256":"89fa7a896d5178d635212ec60e6a4366be0b4b5ba80dbf0fc60bf4024f654c53","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:27:49.194986Z","signature_b64":"d2ts/NJ3TGSQuH7L92hgmw07yaEALqTYpRbzXBmmEcVlCKY2Z7dKuigcqXBg+P8dzZjtT3Ckfu5WQMRXK4gBAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"89fa7a896d5178d635212ec60e6a4366be0b4b5ba80dbf0fc60bf4024f654c53","last_reissued_at":"2026-07-05T08:27:49.194494Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:27:49.194494Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.19871","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4nvWkd8USaWx7p2ezT/86NtdbxU11BWjEP5qug8YLOXCuSe4a2T5BGLleJQ3uJIbHgUAGVRlWU4wUN7ZvuJOAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T15:00:27.914929Z"},"content_sha256":"cfb628cac67854406db705204a0627d81409ee23c5de2b27f1856d12cf466a0f","schema_version":"1.0","event_id":"sha256:cfb628cac67854406db705204a0627d81409ee23c5de2b27f1856d12cf466a0f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RH5HVCLNKF4NMNJBF3DA42SDM2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Don't Get Hijacked: Prevalence, Mitigation, and Impact of Non-Secure DNS Dynamic Updates","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Andrzej Duda, Carlos H. Ga\\~n\\'an, Maciej Korczy\\'nski, Micha{\\l} Kr\\'ol, Qasim Lone, Yevheniya Nosyk","submitted_at":"2024-05-30T09:23:53Z","abstract_excerpt":"DNS dynamic updates represent an inherently vulnerable mechanism deliberately granting the potential for any host to dynamically modify DNS zone files. Consequently, this feature exposes domains to various security risks such as domain hijacking, compromise of domain control validation, and man-in-the-middle attacks. Originally devised without the implementation of authentication mechanisms, non-secure DNS updates were widely adopted in DNS software, subsequently leaving domains susceptible to a novel form of attack termed zone poisoning. In order to gauge the extent of this issue, our analysi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19871","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.19871/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:27:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kxl8mN9yzt0Fb/B2siPNu2DoewcvHqtByf4QPznLsQfdVeoUflMzazmtZr21PeQaNE7jK8jPZ66B3RyJAQAEDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T15:00:27.916471Z"},"content_sha256":"225dd0241346cce27b4c9b11c72ca057d23d821f9f22f86d87237a8253c9d488","schema_version":"1.0","event_id":"sha256:225dd0241346cce27b4c9b11c72ca057d23d821f9f22f86d87237a8253c9d488"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/bundle.json","state_url":"https://pith.science/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T15:00:27Z","links":{"resolver":"https://pith.science/pith/RH5HVCLNKF4NMNJBF3DA42SDM2","bundle":"https://pith.science/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/bundle.json","state":"https://pith.science/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RH5HVCLNKF4NMNJBF3DA42SDM2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RH5HVCLNKF4NMNJBF3DA42SDM2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"49bcc277933c9bd083a619b86d9b5ef1f8973df40394281e8471553d58371de1","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T09:23:53Z","title_canon_sha256":"5908c26cabf5f56b9eb023bf5d4465e027774f30af37beb37dc314dcbb3d1869"},"schema_version":"1.0","source":{"id":"2405.19871","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.19871","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"arxiv_version","alias_value":"2405.19871v1","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.19871","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_12","alias_value":"RH5HVCLNKF4N","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_16","alias_value":"RH5HVCLNKF4NMNJB","created_at":"2026-07-05T08:27:49Z"},{"alias_kind":"pith_short_8","alias_value":"RH5HVCLN","created_at":"2026-07-05T08:27:49Z"}],"graph_snapshots":[{"event_id":"sha256:225dd0241346cce27b4c9b11c72ca057d23d821f9f22f86d87237a8253c9d488","target":"graph","created_at":"2026-07-05T08:27:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.19871/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DNS dynamic updates represent an inherently vulnerable mechanism deliberately granting the potential for any host to dynamically modify DNS zone files. Consequently, this feature exposes domains to various security risks such as domain hijacking, compromise of domain control validation, and man-in-the-middle attacks. Originally devised without the implementation of authentication mechanisms, non-secure DNS updates were widely adopted in DNS software, subsequently leaving domains susceptible to a novel form of attack termed zone poisoning. In order to gauge the extent of this issue, our analysi","authors_text":"Andrzej Duda, Carlos H. Ga\\~n\\'an, Maciej Korczy\\'nski, Micha{\\l} Kr\\'ol, Qasim Lone, Yevheniya Nosyk","cross_cats":["cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T09:23:53Z","title":"Don't Get Hijacked: Prevalence, Mitigation, and Impact of Non-Secure DNS Dynamic Updates"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.19871","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cfb628cac67854406db705204a0627d81409ee23c5de2b27f1856d12cf466a0f","target":"record","created_at":"2026-07-05T08:27:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"49bcc277933c9bd083a619b86d9b5ef1f8973df40394281e8471553d58371de1","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-30T09:23:53Z","title_canon_sha256":"5908c26cabf5f56b9eb023bf5d4465e027774f30af37beb37dc314dcbb3d1869"},"schema_version":"1.0","source":{"id":"2405.19871","kind":"arxiv","version":1}},"canonical_sha256":"89fa7a896d5178d635212ec60e6a4366be0b4b5ba80dbf0fc60bf4024f654c53","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"89fa7a896d5178d635212ec60e6a4366be0b4b5ba80dbf0fc60bf4024f654c53","first_computed_at":"2026-07-05T08:27:49.194494Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:27:49.194494Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d2ts/NJ3TGSQuH7L92hgmw07yaEALqTYpRbzXBmmEcVlCKY2Z7dKuigcqXBg+P8dzZjtT3Ckfu5WQMRXK4gBAw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:27:49.194986Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.19871","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cfb628cac67854406db705204a0627d81409ee23c5de2b27f1856d12cf466a0f","sha256:225dd0241346cce27b4c9b11c72ca057d23d821f9f22f86d87237a8253c9d488"],"state_sha256":"06244366ffeed7ce56a1bfd13ec0674a8cc9441631827afcf25e8940e409f77c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uG/8N/fe/UnE7ApPgZftCpjA0Y0CCeeLv0Tqub68RQIlsAdMWBrvAYAm6WaYjZvl8AZg+U8uqc5LuMy0xoR/Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T15:00:27.929427Z","bundle_sha256":"f4904db697df40afc1c60526c54437e8a3d3233191b31751c95c8cb4ca5e7ffa"}}