{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:W6EF25ZOOMLBHX34Q4ZP6255UW","short_pith_number":"pith:W6EF25ZO","canonical_record":{"source":{"id":"1807.02719","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-07T21:25:50Z","cross_cats_sorted":[],"title_canon_sha256":"82a21d7352c84e5edc8ac44d0f0fd18ace3e93d2a4ed5fb2f7b7644df5ee8f54","abstract_canon_sha256":"761e5183cd8c8ef8b9bc1c4bcde01dd4e455978b927ad512bc3d74b676dfeeb4"},"schema_version":"1.0"},"canonical_sha256":"b7885d772e731613df7c8732ff6bbda58c7f2e6fcf40675bda0f6477737717f6","source":{"kind":"arxiv","id":"1807.02719","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.02719","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"arxiv_version","alias_value":"1807.02719v1","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.02719","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"pith_short_12","alias_value":"W6EF25ZOOMLB","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"W6EF25ZOOMLBHX34","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"W6EF25ZO","created_at":"2026-05-18T12:32:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:W6EF25ZOOMLBHX34Q4ZP6255UW","target":"record","payload":{"canonical_record":{"source":{"id":"1807.02719","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-07T21:25:50Z","cross_cats_sorted":[],"title_canon_sha256":"82a21d7352c84e5edc8ac44d0f0fd18ace3e93d2a4ed5fb2f7b7644df5ee8f54","abstract_canon_sha256":"761e5183cd8c8ef8b9bc1c4bcde01dd4e455978b927ad512bc3d74b676dfeeb4"},"schema_version":"1.0"},"canonical_sha256":"b7885d772e731613df7c8732ff6bbda58c7f2e6fcf40675bda0f6477737717f6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:11:16.210712Z","signature_b64":"NS99Ibeau63qzxM1QTXpM1wPBYc6jqXE0jq21Uzv2wSJtycbDxqhE2/YEiujlSVWJ0gMixumLnxfYQfHNhuuDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b7885d772e731613df7c8732ff6bbda58c7f2e6fcf40675bda0f6477737717f6","last_reissued_at":"2026-05-18T00:11:16.209938Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:11:16.209938Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1807.02719","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:11:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UMiSAfG1UfIXC/I9vJS7gyAdbEngsjbpyleHzSTGmowoySczwO5iCvnexnDBnX59tqSzMEfeYw5beiUst5EgCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T20:57:16.494600Z"},"content_sha256":"08599423ae156f70b8e6e3ea3bce8f0dee927e224f96472633afb8c481d54a0b","schema_version":"1.0","event_id":"sha256:08599423ae156f70b8e6e3ea3bce8f0dee927e224f96472633afb8c481d54a0b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:W6EF25ZOOMLBHX34Q4ZP6255UW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Nothing But Net: Invading Android User Privacy Using Only Network Access Patterns","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ari Trachtenberg, Arkady Yerukhimovich, Avi Klausner, Mikhail Andreev, Trishita Tiwari","submitted_at":"2018-07-07T21:25:50Z","abstract_excerpt":"We evaluate the power of simple networks side-channels to violate user privacy on Android devices. Specifically, we show that, using blackbox network metadata alone (i.e., traffic statistics such as transmission time and size of packets) it is possible to infer several elements of a user's location and also identify their web browsing history (i.e, which sites they visited). We do this with relatively simple learning and classification methods and basic network statistics. For most Android phones currently on the market, such process-level traffic statistics are available for any running proce"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.02719","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:11:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ATg2jx+yz7/nDaAgSK75pRprS0vqYlsuyEA29Oy39/uDTpcgCxV7zqVIB4QaiAxkZIFTiWlubi5ZnTG4l2F5DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T20:57:16.495232Z"},"content_sha256":"0588839ffcb6b1c2bd969bba7f76bd30405db5738c3600c2ea4fa446d10a980e","schema_version":"1.0","event_id":"sha256:0588839ffcb6b1c2bd969bba7f76bd30405db5738c3600c2ea4fa446d10a980e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/bundle.json","state_url":"https://pith.science/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T20:57:16Z","links":{"resolver":"https://pith.science/pith/W6EF25ZOOMLBHX34Q4ZP6255UW","bundle":"https://pith.science/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/bundle.json","state":"https://pith.science/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W6EF25ZOOMLBHX34Q4ZP6255UW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:W6EF25ZOOMLBHX34Q4ZP6255UW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"761e5183cd8c8ef8b9bc1c4bcde01dd4e455978b927ad512bc3d74b676dfeeb4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-07T21:25:50Z","title_canon_sha256":"82a21d7352c84e5edc8ac44d0f0fd18ace3e93d2a4ed5fb2f7b7644df5ee8f54"},"schema_version":"1.0","source":{"id":"1807.02719","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.02719","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"arxiv_version","alias_value":"1807.02719v1","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.02719","created_at":"2026-05-18T00:11:16Z"},{"alias_kind":"pith_short_12","alias_value":"W6EF25ZOOMLB","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"W6EF25ZOOMLBHX34","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"W6EF25ZO","created_at":"2026-05-18T12:32:59Z"}],"graph_snapshots":[{"event_id":"sha256:0588839ffcb6b1c2bd969bba7f76bd30405db5738c3600c2ea4fa446d10a980e","target":"graph","created_at":"2026-05-18T00:11:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We evaluate the power of simple networks side-channels to violate user privacy on Android devices. Specifically, we show that, using blackbox network metadata alone (i.e., traffic statistics such as transmission time and size of packets) it is possible to infer several elements of a user's location and also identify their web browsing history (i.e, which sites they visited). We do this with relatively simple learning and classification methods and basic network statistics. For most Android phones currently on the market, such process-level traffic statistics are available for any running proce","authors_text":"Ari Trachtenberg, Arkady Yerukhimovich, Avi Klausner, Mikhail Andreev, Trishita Tiwari","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-07T21:25:50Z","title":"Nothing But Net: Invading Android User Privacy Using Only Network Access Patterns"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.02719","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:08599423ae156f70b8e6e3ea3bce8f0dee927e224f96472633afb8c481d54a0b","target":"record","created_at":"2026-05-18T00:11:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"761e5183cd8c8ef8b9bc1c4bcde01dd4e455978b927ad512bc3d74b676dfeeb4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-07T21:25:50Z","title_canon_sha256":"82a21d7352c84e5edc8ac44d0f0fd18ace3e93d2a4ed5fb2f7b7644df5ee8f54"},"schema_version":"1.0","source":{"id":"1807.02719","kind":"arxiv","version":1}},"canonical_sha256":"b7885d772e731613df7c8732ff6bbda58c7f2e6fcf40675bda0f6477737717f6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b7885d772e731613df7c8732ff6bbda58c7f2e6fcf40675bda0f6477737717f6","first_computed_at":"2026-05-18T00:11:16.209938Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:11:16.209938Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NS99Ibeau63qzxM1QTXpM1wPBYc6jqXE0jq21Uzv2wSJtycbDxqhE2/YEiujlSVWJ0gMixumLnxfYQfHNhuuDw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:11:16.210712Z","signed_message":"canonical_sha256_bytes"},"source_id":"1807.02719","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:08599423ae156f70b8e6e3ea3bce8f0dee927e224f96472633afb8c481d54a0b","sha256:0588839ffcb6b1c2bd969bba7f76bd30405db5738c3600c2ea4fa446d10a980e"],"state_sha256":"b483e5ab7068ca6344dde267c3a73e6fb7fb2aae137fe414796aab5cc616c544"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lAw5JBp8xaEMPRQ+tkkFZxorBluepw7ILV3BAwhZCsT719qtxDW89oKLMXn1pr3u8uPcZBN84JJp0BsjsbxWAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T20:57:16.498287Z","bundle_sha256":"798d9ab63294c637bacb74add6404c9c563740009c86587da9ae36b78f22b236"}}