{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:WD3DVPBQWNVLJ7DKEKDH7ZZSHD","short_pith_number":"pith:WD3DVPBQ","canonical_record":{"source":{"id":"1709.05395","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-15T20:41:03Z","cross_cats_sorted":[],"title_canon_sha256":"dbf9dc3e24b36552612ff6c66333a1272696dc0b3a663a7c43ae3f7fe8cbc801","abstract_canon_sha256":"5ac0553f3f0c51dd5523008bfb5cb8eed8c33ae8885589c9662f07cf61a7bd9a"},"schema_version":"1.0"},"canonical_sha256":"b0f63abc30b36ab4fc6a22867fe73238cb1f7f08d4550ce21773741004dd7d8d","source":{"kind":"arxiv","id":"1709.05395","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.05395","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"arxiv_version","alias_value":"1709.05395v1","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.05395","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"pith_short_12","alias_value":"WD3DVPBQWNVL","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_16","alias_value":"WD3DVPBQWNVLJ7DK","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_8","alias_value":"WD3DVPBQ","created_at":"2026-05-18T12:31:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:WD3DVPBQWNVLJ7DKEKDH7ZZSHD","target":"record","payload":{"canonical_record":{"source":{"id":"1709.05395","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-15T20:41:03Z","cross_cats_sorted":[],"title_canon_sha256":"dbf9dc3e24b36552612ff6c66333a1272696dc0b3a663a7c43ae3f7fe8cbc801","abstract_canon_sha256":"5ac0553f3f0c51dd5523008bfb5cb8eed8c33ae8885589c9662f07cf61a7bd9a"},"schema_version":"1.0"},"canonical_sha256":"b0f63abc30b36ab4fc6a22867fe73238cb1f7f08d4550ce21773741004dd7d8d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:35:00.912682Z","signature_b64":"pWqO/UUNt59uOpVegsNX+GlMartioMWrEjBynbNsxrH9R+TOY79vwH6X5g/TZgj3Ywyi3LNkJywRrZ1zeQwQCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0f63abc30b36ab4fc6a22867fe73238cb1f7f08d4550ce21773741004dd7d8d","last_reissued_at":"2026-05-18T00:35:00.912140Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:35:00.912140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.05395","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:35:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wzDPk0MxJIdm9R5Ft+zewgRghylebDKlfzVrGEMZyegcK7PkyOx14WIulHx7DNP/f9tZoQYGX8vCRm3zO3vPAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T18:17:40.233977Z"},"content_sha256":"d4420f2eabf1d2d0ff0787151d734416cafa8254e5e0d33f8fa459be87a7a8c0","schema_version":"1.0","event_id":"sha256:d4420f2eabf1d2d0ff0787151d734416cafa8254e5e0d33f8fa459be87a7a8c0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:WD3DVPBQWNVLJ7DKEKDH7ZZSHD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"One Leak Will Sink A Ship: WebRTC IP Address Leaks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Nasser Mohammed Al-Fannah","submitted_at":"2017-09-15T20:41:03Z","abstract_excerpt":"The introduction of the WebRTC API to modern browsers has brought about a new threat to user privacy. This API causes a range of client IP addresses to become available to a visited website via JavaScript even if a VPN is in use. This a potentially serious problem for users utilizing VPN services for anonymity. In order to better understand the magnitude of this issue, we tested widely used browsers and VPN services to discover which client IP addresses can be revealed and in what circumstances. In most cases, at least one of the client addresses is leaked. The number and type of leaked IP add"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.05395","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:35:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oOH2pAmogGUsHwzUSdWSWz8inBIuO4Ms+NvEEPiXnhDDfa/4slAzkfC1RMIn/1w/uoqB/Mfawtn1iUf2ZZjEDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T18:17:40.234311Z"},"content_sha256":"ca29962e4601ce676a135d94e89e5a0fd11d7ed58ccfc5a33669c653dfbe4aeb","schema_version":"1.0","event_id":"sha256:ca29962e4601ce676a135d94e89e5a0fd11d7ed58ccfc5a33669c653dfbe4aeb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/bundle.json","state_url":"https://pith.science/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-29T18:17:40Z","links":{"resolver":"https://pith.science/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD","bundle":"https://pith.science/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/bundle.json","state":"https://pith.science/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WD3DVPBQWNVLJ7DKEKDH7ZZSHD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:WD3DVPBQWNVLJ7DKEKDH7ZZSHD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5ac0553f3f0c51dd5523008bfb5cb8eed8c33ae8885589c9662f07cf61a7bd9a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-15T20:41:03Z","title_canon_sha256":"dbf9dc3e24b36552612ff6c66333a1272696dc0b3a663a7c43ae3f7fe8cbc801"},"schema_version":"1.0","source":{"id":"1709.05395","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.05395","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"arxiv_version","alias_value":"1709.05395v1","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.05395","created_at":"2026-05-18T00:35:00Z"},{"alias_kind":"pith_short_12","alias_value":"WD3DVPBQWNVL","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_16","alias_value":"WD3DVPBQWNVLJ7DK","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_8","alias_value":"WD3DVPBQ","created_at":"2026-05-18T12:31:53Z"}],"graph_snapshots":[{"event_id":"sha256:ca29962e4601ce676a135d94e89e5a0fd11d7ed58ccfc5a33669c653dfbe4aeb","target":"graph","created_at":"2026-05-18T00:35:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The introduction of the WebRTC API to modern browsers has brought about a new threat to user privacy. This API causes a range of client IP addresses to become available to a visited website via JavaScript even if a VPN is in use. This a potentially serious problem for users utilizing VPN services for anonymity. In order to better understand the magnitude of this issue, we tested widely used browsers and VPN services to discover which client IP addresses can be revealed and in what circumstances. In most cases, at least one of the client addresses is leaked. The number and type of leaked IP add","authors_text":"Nasser Mohammed Al-Fannah","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-15T20:41:03Z","title":"One Leak Will Sink A Ship: WebRTC IP Address Leaks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.05395","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d4420f2eabf1d2d0ff0787151d734416cafa8254e5e0d33f8fa459be87a7a8c0","target":"record","created_at":"2026-05-18T00:35:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5ac0553f3f0c51dd5523008bfb5cb8eed8c33ae8885589c9662f07cf61a7bd9a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-15T20:41:03Z","title_canon_sha256":"dbf9dc3e24b36552612ff6c66333a1272696dc0b3a663a7c43ae3f7fe8cbc801"},"schema_version":"1.0","source":{"id":"1709.05395","kind":"arxiv","version":1}},"canonical_sha256":"b0f63abc30b36ab4fc6a22867fe73238cb1f7f08d4550ce21773741004dd7d8d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0f63abc30b36ab4fc6a22867fe73238cb1f7f08d4550ce21773741004dd7d8d","first_computed_at":"2026-05-18T00:35:00.912140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:35:00.912140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pWqO/UUNt59uOpVegsNX+GlMartioMWrEjBynbNsxrH9R+TOY79vwH6X5g/TZgj3Ywyi3LNkJywRrZ1zeQwQCA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:35:00.912682Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.05395","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d4420f2eabf1d2d0ff0787151d734416cafa8254e5e0d33f8fa459be87a7a8c0","sha256:ca29962e4601ce676a135d94e89e5a0fd11d7ed58ccfc5a33669c653dfbe4aeb"],"state_sha256":"4700c02ce82c0aa8cd24280d8ba9c1e2ca08ea0a6bba3af71e1f5714a691ea71"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sSCNdBi3MF5/A1bH6sHNYGnc1s/WJA6Xww2i074wdkDRC7jPwGarx7iZoZsyzH1eAqthZsXjLULaZXze5mMfCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-29T18:17:40.236205Z","bundle_sha256":"897a05137604ff93bacf67fadf60ccad3856fe41ba40970810e13fe2fe85ae8e"}}