{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:VDNGDBPJBCSI5EG47QYGYMSYFC","short_pith_number":"pith:VDNGDBPJ","canonical_record":{"source":{"id":"1904.13071","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-30T06:52:05Z","cross_cats_sorted":[],"title_canon_sha256":"d754d21c81e08c3b5945453eced26e08218de131cdb34aab61853aa5ef50eda3","abstract_canon_sha256":"25b5a56775db4f1cd8862fcbf7a9ef5263df5b676050ef6bd01aebb1a40c8c05"},"schema_version":"1.0"},"canonical_sha256":"a8da6185e908a48e90dcfc306c32582882bfbe73c04a4f9b8d2b29ede38222c8","source":{"kind":"arxiv","id":"1904.13071","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.13071","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"arxiv_version","alias_value":"1904.13071v1","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.13071","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"pith_short_12","alias_value":"VDNGDBPJBCSI","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"VDNGDBPJBCSI5EG4","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"VDNGDBPJ","created_at":"2026-05-18T12:33:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:VDNGDBPJBCSI5EG47QYGYMSYFC","target":"record","payload":{"canonical_record":{"source":{"id":"1904.13071","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-30T06:52:05Z","cross_cats_sorted":[],"title_canon_sha256":"d754d21c81e08c3b5945453eced26e08218de131cdb34aab61853aa5ef50eda3","abstract_canon_sha256":"25b5a56775db4f1cd8862fcbf7a9ef5263df5b676050ef6bd01aebb1a40c8c05"},"schema_version":"1.0"},"canonical_sha256":"a8da6185e908a48e90dcfc306c32582882bfbe73c04a4f9b8d2b29ede38222c8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:47:24.018906Z","signature_b64":"1NbwIYDBl634xeDInIGUMkoMoZlTMAyrTIoMpbKuhMxjiXk8lGiVJVlgud1N5HVAltOVquSqFsZREwK1n+MoDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a8da6185e908a48e90dcfc306c32582882bfbe73c04a4f9b8d2b29ede38222c8","last_reissued_at":"2026-05-17T23:47:24.018384Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:47:24.018384Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.13071","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:47:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jEAGRfYhBJSsji+gTCbF7V/q+m+bj6ACrxCpuvxzg8+CFN/HQ/ljjxziA15Brrrs3zQdBY8/eOUhD4avJFzTCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T22:27:27.121263Z"},"content_sha256":"4c21b0fac9b06bae50f27723c8db274d9c75b5236e6c77106fd27d383861993c","schema_version":"1.0","event_id":"sha256:4c21b0fac9b06bae50f27723c8db274d9c75b5236e6c77106fd27d383861993c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:VDNGDBPJBCSI5EG47QYGYMSYFC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Risks of WebGL: Analysis, Evaluation and Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alex Belkin, Israel Cidon, Nethanel Gelernter","submitted_at":"2019-04-30T06:52:05Z","abstract_excerpt":"WebGL is a browser feature that enables JavaScript-based control of the graphics processing unit (GPU) to render interactive 3D and 2D graphics, without the use of plug-ins. Exploiting WebGL for attacks will affect billions of users since browsers serve as the main interaction mechanism with the world wide web. This paper explores the potential threats derived from the recent move by browsers from WebGL 1.0 to the more powerful WebGL 2.0. We focus on two possible abuses of this feature: distributed password cracking and distributed cryptocurrency mining. Our evaluation of the attacks also incl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.13071","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:47:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"207RMxEsEVw/e2DFG3hBu8bbyhPp+j+SEiC+dYcnMOTDXHC2DJvVK1FTA4X6OZN0JBFUmmmNWrB48KRhz0LfCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T22:27:27.121937Z"},"content_sha256":"5254ecc8815c071d7c53ccf423cabb5ace319266ab25514100c8972c6dc3f687","schema_version":"1.0","event_id":"sha256:5254ecc8815c071d7c53ccf423cabb5ace319266ab25514100c8972c6dc3f687"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/bundle.json","state_url":"https://pith.science/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T22:27:27Z","links":{"resolver":"https://pith.science/pith/VDNGDBPJBCSI5EG47QYGYMSYFC","bundle":"https://pith.science/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/bundle.json","state":"https://pith.science/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VDNGDBPJBCSI5EG47QYGYMSYFC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:VDNGDBPJBCSI5EG47QYGYMSYFC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"25b5a56775db4f1cd8862fcbf7a9ef5263df5b676050ef6bd01aebb1a40c8c05","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-30T06:52:05Z","title_canon_sha256":"d754d21c81e08c3b5945453eced26e08218de131cdb34aab61853aa5ef50eda3"},"schema_version":"1.0","source":{"id":"1904.13071","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.13071","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"arxiv_version","alias_value":"1904.13071v1","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.13071","created_at":"2026-05-17T23:47:24Z"},{"alias_kind":"pith_short_12","alias_value":"VDNGDBPJBCSI","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_16","alias_value":"VDNGDBPJBCSI5EG4","created_at":"2026-05-18T12:33:30Z"},{"alias_kind":"pith_short_8","alias_value":"VDNGDBPJ","created_at":"2026-05-18T12:33:30Z"}],"graph_snapshots":[{"event_id":"sha256:5254ecc8815c071d7c53ccf423cabb5ace319266ab25514100c8972c6dc3f687","target":"graph","created_at":"2026-05-17T23:47:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"WebGL is a browser feature that enables JavaScript-based control of the graphics processing unit (GPU) to render interactive 3D and 2D graphics, without the use of plug-ins. Exploiting WebGL for attacks will affect billions of users since browsers serve as the main interaction mechanism with the world wide web. This paper explores the potential threats derived from the recent move by browsers from WebGL 1.0 to the more powerful WebGL 2.0. We focus on two possible abuses of this feature: distributed password cracking and distributed cryptocurrency mining. Our evaluation of the attacks also incl","authors_text":"Alex Belkin, Israel Cidon, Nethanel Gelernter","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-30T06:52:05Z","title":"The Risks of WebGL: Analysis, Evaluation and Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.13071","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4c21b0fac9b06bae50f27723c8db274d9c75b5236e6c77106fd27d383861993c","target":"record","created_at":"2026-05-17T23:47:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"25b5a56775db4f1cd8862fcbf7a9ef5263df5b676050ef6bd01aebb1a40c8c05","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-30T06:52:05Z","title_canon_sha256":"d754d21c81e08c3b5945453eced26e08218de131cdb34aab61853aa5ef50eda3"},"schema_version":"1.0","source":{"id":"1904.13071","kind":"arxiv","version":1}},"canonical_sha256":"a8da6185e908a48e90dcfc306c32582882bfbe73c04a4f9b8d2b29ede38222c8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a8da6185e908a48e90dcfc306c32582882bfbe73c04a4f9b8d2b29ede38222c8","first_computed_at":"2026-05-17T23:47:24.018384Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:47:24.018384Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1NbwIYDBl634xeDInIGUMkoMoZlTMAyrTIoMpbKuhMxjiXk8lGiVJVlgud1N5HVAltOVquSqFsZREwK1n+MoDw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:47:24.018906Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.13071","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4c21b0fac9b06bae50f27723c8db274d9c75b5236e6c77106fd27d383861993c","sha256:5254ecc8815c071d7c53ccf423cabb5ace319266ab25514100c8972c6dc3f687"],"state_sha256":"22001a1b6b310540d03aee48d0db4ddc3cc55f99d44b51042f7a32bca808e44e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UtWKYiN8qh1zz1sl+StwAPif6jG0cjvTzRRH6abLhxOWNCKcXD4dRWgDHbe40d/OXClDHQZ9aMgct1p6EwO8CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T22:27:27.126249Z","bundle_sha256":"c8295498ea7eaee804806496b11edf1c44b329738330e10da60ad6f3dfde1e25"}}