{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:RU4MJDR4QQYNQBT7COYCYYX63E","short_pith_number":"pith:RU4MJDR4","canonical_record":{"source":{"id":"1904.10600","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2019-04-24T01:48:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"cab98f40fb68fb37f4eaf754bf30ae3b7f91e1006229f44fdf3b9d0b65bdd054","abstract_canon_sha256":"1675ec4ddfc1e319c93ac4fdf8b973c690f54423aa00314acc5a884047d48eeb"},"schema_version":"1.0"},"canonical_sha256":"8d38c48e3c8430d8067f13b02c62fed92ec8b03ad4ae07252d1fb23ce0ebcb21","source":{"kind":"arxiv","id":"1904.10600","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.10600","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"arxiv_version","alias_value":"1904.10600v2","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.10600","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"pith_short_12","alias_value":"RU4MJDR4QQYN","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"RU4MJDR4QQYNQBT7","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"RU4MJDR4","created_at":"2026-05-18T12:33:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:RU4MJDR4QQYNQBT7COYCYYX63E","target":"record","payload":{"canonical_record":{"source":{"id":"1904.10600","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2019-04-24T01:48:23Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"cab98f40fb68fb37f4eaf754bf30ae3b7f91e1006229f44fdf3b9d0b65bdd054","abstract_canon_sha256":"1675ec4ddfc1e319c93ac4fdf8b973c690f54423aa00314acc5a884047d48eeb"},"schema_version":"1.0"},"canonical_sha256":"8d38c48e3c8430d8067f13b02c62fed92ec8b03ad4ae07252d1fb23ce0ebcb21","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:43:14.461810Z","signature_b64":"vY5vvTysiTIZwTFkmzq1k7ALxaEwKjvfdikXYsrnKqaB9Bi5Hw7wg9oNfjZwxdCbwgXpmzdyyCsDVztCSkyfDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8d38c48e3c8430d8067f13b02c62fed92ec8b03ad4ae07252d1fb23ce0ebcb21","last_reissued_at":"2026-05-17T23:43:14.461198Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:43:14.461198Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.10600","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:43:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ebA/2q9BMME1OEznDk3UURcKKE7cEejPRoACKhvdpiUyu+UypGp3VlwGVIXEmuD/kXA6AfvlwohYtJ0If5nWAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T22:36:38.725465Z"},"content_sha256":"e90274717eaf3d790739d76e6408518021929d0e42a82f4bc579c12875715a44","schema_version":"1.0","event_id":"sha256:e90274717eaf3d790739d76e6408518021929d0e42a82f4bc579c12875715a44"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:RU4MJDR4QQYNQBT7COYCYYX63E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Handoff All Your Privacy: A Review of Apple's Bluetooth Low Energy Continuity Protocol","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.NI","authors_text":"Brandon Sipes, Douglas Alpuche, Ellis Fenske, Erik C. Rye, Jeremy Martin, Kristina Bodeman, Lamont Brown, Lucas Foppe, Sam Teplov, Travis Mayberry","submitted_at":"2019-04-24T01:48:23Z","abstract_excerpt":"We investigate Apple's Bluetooth Low Energy (BLE) Continuity protocol, designed to support interoperability and communication between iOS and macOS devices, and show that the price for this seamless experience is leakage of identifying information and behavioral data to passive adversaries. First, we reverse engineer numerous Continuity protocol message types and identify data fields that are transmitted unencrypted. We show that Continuity messages are broadcast over BLE in response to actions such as locking and unlocking a device's screen, copying and pasting information, making and accepti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.10600","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:43:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M+dGOCsYOcuS1gC8XO07UDF+camVUqAOcXXe0Sm1nPa3cvUkOtm7Pt1CcxDLCPtE2kqpevNQYIxKYjbjcLJ6AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T22:36:38.726143Z"},"content_sha256":"3525ced8ec571754bcd3599d07719643ecbbaea18a0fe3393fd804d5a8a46dc3","schema_version":"1.0","event_id":"sha256:3525ced8ec571754bcd3599d07719643ecbbaea18a0fe3393fd804d5a8a46dc3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RU4MJDR4QQYNQBT7COYCYYX63E/bundle.json","state_url":"https://pith.science/pith/RU4MJDR4QQYNQBT7COYCYYX63E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RU4MJDR4QQYNQBT7COYCYYX63E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T22:36:38Z","links":{"resolver":"https://pith.science/pith/RU4MJDR4QQYNQBT7COYCYYX63E","bundle":"https://pith.science/pith/RU4MJDR4QQYNQBT7COYCYYX63E/bundle.json","state":"https://pith.science/pith/RU4MJDR4QQYNQBT7COYCYYX63E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RU4MJDR4QQYNQBT7COYCYYX63E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:RU4MJDR4QQYNQBT7COYCYYX63E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1675ec4ddfc1e319c93ac4fdf8b973c690f54423aa00314acc5a884047d48eeb","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2019-04-24T01:48:23Z","title_canon_sha256":"cab98f40fb68fb37f4eaf754bf30ae3b7f91e1006229f44fdf3b9d0b65bdd054"},"schema_version":"1.0","source":{"id":"1904.10600","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.10600","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"arxiv_version","alias_value":"1904.10600v2","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.10600","created_at":"2026-05-17T23:43:14Z"},{"alias_kind":"pith_short_12","alias_value":"RU4MJDR4QQYN","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_16","alias_value":"RU4MJDR4QQYNQBT7","created_at":"2026-05-18T12:33:27Z"},{"alias_kind":"pith_short_8","alias_value":"RU4MJDR4","created_at":"2026-05-18T12:33:27Z"}],"graph_snapshots":[{"event_id":"sha256:3525ced8ec571754bcd3599d07719643ecbbaea18a0fe3393fd804d5a8a46dc3","target":"graph","created_at":"2026-05-17T23:43:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We investigate Apple's Bluetooth Low Energy (BLE) Continuity protocol, designed to support interoperability and communication between iOS and macOS devices, and show that the price for this seamless experience is leakage of identifying information and behavioral data to passive adversaries. First, we reverse engineer numerous Continuity protocol message types and identify data fields that are transmitted unencrypted. We show that Continuity messages are broadcast over BLE in response to actions such as locking and unlocking a device's screen, copying and pasting information, making and accepti","authors_text":"Brandon Sipes, Douglas Alpuche, Ellis Fenske, Erik C. Rye, Jeremy Martin, Kristina Bodeman, Lamont Brown, Lucas Foppe, Sam Teplov, Travis Mayberry","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2019-04-24T01:48:23Z","title":"Handoff All Your Privacy: A Review of Apple's Bluetooth Low Energy Continuity Protocol"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.10600","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e90274717eaf3d790739d76e6408518021929d0e42a82f4bc579c12875715a44","target":"record","created_at":"2026-05-17T23:43:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1675ec4ddfc1e319c93ac4fdf8b973c690f54423aa00314acc5a884047d48eeb","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2019-04-24T01:48:23Z","title_canon_sha256":"cab98f40fb68fb37f4eaf754bf30ae3b7f91e1006229f44fdf3b9d0b65bdd054"},"schema_version":"1.0","source":{"id":"1904.10600","kind":"arxiv","version":2}},"canonical_sha256":"8d38c48e3c8430d8067f13b02c62fed92ec8b03ad4ae07252d1fb23ce0ebcb21","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8d38c48e3c8430d8067f13b02c62fed92ec8b03ad4ae07252d1fb23ce0ebcb21","first_computed_at":"2026-05-17T23:43:14.461198Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:43:14.461198Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vY5vvTysiTIZwTFkmzq1k7ALxaEwKjvfdikXYsrnKqaB9Bi5Hw7wg9oNfjZwxdCbwgXpmzdyyCsDVztCSkyfDg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:43:14.461810Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.10600","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e90274717eaf3d790739d76e6408518021929d0e42a82f4bc579c12875715a44","sha256:3525ced8ec571754bcd3599d07719643ecbbaea18a0fe3393fd804d5a8a46dc3"],"state_sha256":"1b4da18f52009514f82c8a16232d92312e1e73af45f79ca61482cb7c66cf448d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wXvo6ol+ai7Vfd51KaAul+B0xO3pbEiJH3q9sDJHBb0nWLBqpm+oStm64l/A5hsMjo9AUWCMRFen5bTff1X8Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T22:36:38.729776Z","bundle_sha256":"2b12611adc0693ca2a75cf56be72fe608277568d1ffa5452a204b37248a22be0"}}