{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RWUYYFVGNI4Z46PLVWGPXVA3MX","short_pith_number":"pith:RWUYYFVG","canonical_record":{"source":{"id":"2403.15607","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-22T20:34:41Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"6f58f4d60c04ad66a3dc3096db6cfce18ea853228a29009b4d9ea6548be1834e","abstract_canon_sha256":"3c29de00c0fea8aee970eb510e4c8f9d614ff77a0300a348b75fa5af567de6cc"},"schema_version":"1.0"},"canonical_sha256":"8da98c16a66a399e79ebad8cfbd41b65ed867a8cf594be352577aed66ec3e158","source":{"kind":"arxiv","id":"2403.15607","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15607","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15607v1","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15607","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_12","alias_value":"RWUYYFVGNI4Z","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_16","alias_value":"RWUYYFVGNI4Z46PL","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_8","alias_value":"RWUYYFVG","created_at":"2026-07-05T07:59:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RWUYYFVGNI4Z46PLVWGPXVA3MX","target":"record","payload":{"canonical_record":{"source":{"id":"2403.15607","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-22T20:34:41Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"6f58f4d60c04ad66a3dc3096db6cfce18ea853228a29009b4d9ea6548be1834e","abstract_canon_sha256":"3c29de00c0fea8aee970eb510e4c8f9d614ff77a0300a348b75fa5af567de6cc"},"schema_version":"1.0"},"canonical_sha256":"8da98c16a66a399e79ebad8cfbd41b65ed867a8cf594be352577aed66ec3e158","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:59:39.154018Z","signature_b64":"MCn0hf7v+fLgGM5V9pBCnXziYdIqSqJudKO886C+iI0CueZxefL901Ev6PuMSMZ+SHrTQ/iSAa1GVOJgIQ2tBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8da98c16a66a399e79ebad8cfbd41b65ed867a8cf594be352577aed66ec3e158","last_reissued_at":"2026-07-05T07:59:39.153556Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:59:39.153556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.15607","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:59:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p676e57XKMYAh5wqC9yoatYv/Af5d4JWC/MCRkKJBQ2PzE+2Wd11LzGepcdpjDUB8MYOZR8HUMSuiLZJuIl+DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:33:58.491033Z"},"content_sha256":"f8e093fc44a26789a2add64182dbaa4385e164a4923c041d490394facdbf6441","schema_version":"1.0","event_id":"sha256:f8e093fc44a26789a2add64182dbaa4385e164a4923c041d490394facdbf6441"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RWUYYFVGNI4Z46PLVWGPXVA3MX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Assessing Web Fingerprinting Risk","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Antonio Sartori, Asanka Herath, Enrico Bacis, Igor Bilogrevic, Robert Busa-Fekete, Umar Syed","submitted_at":"2024-03-22T20:34:41Z","abstract_excerpt":"Modern Web APIs allow developers to provide extensively customized experiences for website visitors, but the richness of the device information they provide also make them vulnerable to being abused to construct browser fingerprints, device-specific identifiers that enable covert tracking of users even when cookies are disabled.\n  Previous research has established entropy, a measure of information, as the key metric for quantifying fingerprinting risk. However, earlier studies had two major limitations. First, their entropy estimates were based on either a single website or a very small sample"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15607","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.15607/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:59:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EPS6Bd4FQX4nx7m4X5H14SupJA5K0/gNaYUn3vjYGD1Y2+Yw+LtmpQsXeMOzTc1Q1b8MaB9rOOYAt84Z6d56Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:33:58.491668Z"},"content_sha256":"129fe368fb9e629a917d7e6cc1803afcad2f292126b79223020a71434e171853","schema_version":"1.0","event_id":"sha256:129fe368fb9e629a917d7e6cc1803afcad2f292126b79223020a71434e171853"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/bundle.json","state_url":"https://pith.science/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T06:33:58Z","links":{"resolver":"https://pith.science/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX","bundle":"https://pith.science/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/bundle.json","state":"https://pith.science/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RWUYYFVGNI4Z46PLVWGPXVA3MX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RWUYYFVGNI4Z46PLVWGPXVA3MX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3c29de00c0fea8aee970eb510e4c8f9d614ff77a0300a348b75fa5af567de6cc","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-22T20:34:41Z","title_canon_sha256":"6f58f4d60c04ad66a3dc3096db6cfce18ea853228a29009b4d9ea6548be1834e"},"schema_version":"1.0","source":{"id":"2403.15607","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15607","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15607v1","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15607","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_12","alias_value":"RWUYYFVGNI4Z","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_16","alias_value":"RWUYYFVGNI4Z46PL","created_at":"2026-07-05T07:59:39Z"},{"alias_kind":"pith_short_8","alias_value":"RWUYYFVG","created_at":"2026-07-05T07:59:39Z"}],"graph_snapshots":[{"event_id":"sha256:129fe368fb9e629a917d7e6cc1803afcad2f292126b79223020a71434e171853","target":"graph","created_at":"2026-07-05T07:59:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.15607/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern Web APIs allow developers to provide extensively customized experiences for website visitors, but the richness of the device information they provide also make them vulnerable to being abused to construct browser fingerprints, device-specific identifiers that enable covert tracking of users even when cookies are disabled.\n  Previous research has established entropy, a measure of information, as the key metric for quantifying fingerprinting risk. However, earlier studies had two major limitations. First, their entropy estimates were based on either a single website or a very small sample","authors_text":"Antonio Sartori, Asanka Herath, Enrico Bacis, Igor Bilogrevic, Robert Busa-Fekete, Umar Syed","cross_cats":["cs.CY"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-22T20:34:41Z","title":"Assessing Web Fingerprinting Risk"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15607","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f8e093fc44a26789a2add64182dbaa4385e164a4923c041d490394facdbf6441","target":"record","created_at":"2026-07-05T07:59:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3c29de00c0fea8aee970eb510e4c8f9d614ff77a0300a348b75fa5af567de6cc","cross_cats_sorted":["cs.CY"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-22T20:34:41Z","title_canon_sha256":"6f58f4d60c04ad66a3dc3096db6cfce18ea853228a29009b4d9ea6548be1834e"},"schema_version":"1.0","source":{"id":"2403.15607","kind":"arxiv","version":1}},"canonical_sha256":"8da98c16a66a399e79ebad8cfbd41b65ed867a8cf594be352577aed66ec3e158","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8da98c16a66a399e79ebad8cfbd41b65ed867a8cf594be352577aed66ec3e158","first_computed_at":"2026-07-05T07:59:39.153556Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:59:39.153556Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MCn0hf7v+fLgGM5V9pBCnXziYdIqSqJudKO886C+iI0CueZxefL901Ev6PuMSMZ+SHrTQ/iSAa1GVOJgIQ2tBg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:59:39.154018Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.15607","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f8e093fc44a26789a2add64182dbaa4385e164a4923c041d490394facdbf6441","sha256:129fe368fb9e629a917d7e6cc1803afcad2f292126b79223020a71434e171853"],"state_sha256":"2fb49e7f3e641833accff4417dcf042b6eaeaf7bec47498a4a656713f880e48a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uT/JbuLbQnsiC7csveqWchbYn+7gvVQLJC80Cl63K8Zj3nKuUwtcuLBJLZ6MfInX1Mq8H2ApgiJzYLQtNkSvAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T06:33:58.498869Z","bundle_sha256":"c53fc73686e7c40f12a4e8859a62ed483d5cc0bdfec3668d5927e43e69edf269"}}