{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:UU7F3ZVFTZ56NAFRD2QKWTUDCN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"95a302c82affe0d12835229dfe95b9ff31377e21632cfd860f227cde095db16d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:11:59Z","title_canon_sha256":"6c45beb9d96bbedb95dbd50039d15b06f2b7140710ef67edd29aa32a087e3eed"},"schema_version":"1.0","source":{"id":"1908.02204","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.02204","created_at":"2026-07-05T00:37:28Z"},{"alias_kind":"arxiv_version","alias_value":"1908.02204v2","created_at":"2026-07-05T00:37:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.02204","created_at":"2026-07-05T00:37:28Z"},{"alias_kind":"pith_short_12","alias_value":"UU7F3ZVFTZ56","created_at":"2026-07-05T00:37:28Z"},{"alias_kind":"pith_short_16","alias_value":"UU7F3ZVFTZ56NAFR","created_at":"2026-07-05T00:37:28Z"},{"alias_kind":"pith_short_8","alias_value":"UU7F3ZVF","created_at":"2026-07-05T00:37:28Z"}],"graph_snapshots":[{"event_id":"sha256:b3fc8b0f54239a31eb738f505b7cb53bb2de88a9f1f1b5a9401224e1158939f4","target":"graph","created_at":"2026-07-05T00:37:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.02204/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In a Cross-Origin State Inference (COSI) attack, an attacker convinces a victim into visiting an attack web page, which leverages the cross-origin interaction features of the victim's web browser to infer the victim's state at a target web site. Multiple instances of COSI attacks have been found in the past under different names such as login detection or access detection attacks. But, those attacks only consider two states (e.g., logged in or not) and focus on a specific browser leak method (or XS-Leak). This work shows that mounting more complex COSI attacks such as deanonymizing the owner o","authors_text":"Avinash Sudhodanan, Juan Caballero, Soheil Khodayari","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:11:59Z","title":"Cross-Origin State Inference (COSI) Attacks: Leaking Web Site States through XS-Leaks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.02204","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f8da3dc9502a3649f04d86abf489bbf22421821214fe435bf2d1d460f2065bf8","target":"record","created_at":"2026-07-05T00:37:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"95a302c82affe0d12835229dfe95b9ff31377e21632cfd860f227cde095db16d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-06T15:11:59Z","title_canon_sha256":"6c45beb9d96bbedb95dbd50039d15b06f2b7140710ef67edd29aa32a087e3eed"},"schema_version":"1.0","source":{"id":"1908.02204","kind":"arxiv","version":2}},"canonical_sha256":"a53e5de6a59e7be680b11ea0ab4e83137c6e1e559e26e238dd6d762a5d5546dd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a53e5de6a59e7be680b11ea0ab4e83137c6e1e559e26e238dd6d762a5d5546dd","first_computed_at":"2026-07-05T00:37:28.181216Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:37:28.181216Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cl3YhBSRAqhTKuPSA2mZrQGk9Pcl3YbPkBNCEa4mIDHKhpYU00zwvrnrS5aDQMrOkjvuwbIDMHqwAPbpSjcCBw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:37:28.181752Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.02204","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f8da3dc9502a3649f04d86abf489bbf22421821214fe435bf2d1d460f2065bf8","sha256:b3fc8b0f54239a31eb738f505b7cb53bb2de88a9f1f1b5a9401224e1158939f4"],"state_sha256":"d0bcb97461bd442635d0ab95e58c18eda11ee7d655520cd5c81754d2b8c46fce"}