{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XHJOMDX66ZF4U4MCGO6G3YUSSO","short_pith_number":"pith:XHJOMDX6","canonical_record":{"source":{"id":"2404.04601","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T11:59:35Z","cross_cats_sorted":[],"title_canon_sha256":"496cf0b05597ec01d6a16a80f2eded639f3a583779a6bd754f7f8b3fb0053a87","abstract_canon_sha256":"7a8f3bbe03483c57e7fbacd43c7c3db813fdc543595840d471d22c4142d54647"},"schema_version":"1.0"},"canonical_sha256":"b9d2e60efef64bca718233bc6de2929392e29fbab550a8cad29441f261a693b7","source":{"kind":"arxiv","id":"2404.04601","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.04601","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"arxiv_version","alias_value":"2404.04601v1","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.04601","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_12","alias_value":"XHJOMDX66ZF4","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_16","alias_value":"XHJOMDX66ZF4U4MC","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_8","alias_value":"XHJOMDX6","created_at":"2026-07-05T08:05:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XHJOMDX66ZF4U4MCGO6G3YUSSO","target":"record","payload":{"canonical_record":{"source":{"id":"2404.04601","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T11:59:35Z","cross_cats_sorted":[],"title_canon_sha256":"496cf0b05597ec01d6a16a80f2eded639f3a583779a6bd754f7f8b3fb0053a87","abstract_canon_sha256":"7a8f3bbe03483c57e7fbacd43c7c3db813fdc543595840d471d22c4142d54647"},"schema_version":"1.0"},"canonical_sha256":"b9d2e60efef64bca718233bc6de2929392e29fbab550a8cad29441f261a693b7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:05:18.948064Z","signature_b64":"IfuiEctbEKGoT86aFGbDBpy1Vg9zmeVyC9BHhMcBTffg+9JyeEEAqT2TGfK/PDC3b/yj8yTI1kr4gR++u22JDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b9d2e60efef64bca718233bc6de2929392e29fbab550a8cad29441f261a693b7","last_reissued_at":"2026-07-05T08:05:18.947653Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:05:18.947653Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.04601","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:05:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7FcY4NLHil2dDpZgYUDPOMK+dCZv6i6dd1cP7w14GQk0hmiDKwDGs7+euwKO5G7kjByBZoIWTQeKLtgmxdyOCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:36:42.070636Z"},"content_sha256":"b31ce93ad77a23bd32088757d26e7999b95b6dfda248781502277b50b7f88fd8","schema_version":"1.0","event_id":"sha256:b31ce93ad77a23bd32088757d26e7999b95b6dfda248781502277b50b7f88fd8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XHJOMDX66ZF4U4MCGO6G3YUSSO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ke Xu, Kun Sun, Qi Li, Xuewei Feng, Yuxiang Yang, Ziqiang Wang","submitted_at":"2024-04-06T11:59:35Z","abstract_excerpt":"In this paper, we uncover a new side-channel vulnerability in the widely used NAT port preservation strategy and an insufficient reverse path validation strategy of Wi-Fi routers, which allows an off-path attacker to infer if there is one victim client in the same network communicating with another host on the Internet using TCP. After detecting the presence of TCP connections between the victim client and the server, the attacker can evict the original NAT mapping and reconstruct a new mapping at the router by sending fake TCP packets due to the routers' vulnerability of disabling TCP window "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.04601","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.04601/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:05:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7/yW62m8YZ8G798C81pRKuCsWuSjqLwWE9crUN4+Z+Zecqj2AuVhG0Idef70sT9T+4PpKSfqSRrBySq50NSMCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:36:42.071428Z"},"content_sha256":"6d1733b41279f67b5ab8614b3f14b97247bfe2b9e02d7b079a48fbdb6b12648d","schema_version":"1.0","event_id":"sha256:6d1733b41279f67b5ab8614b3f14b97247bfe2b9e02d7b079a48fbdb6b12648d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/bundle.json","state_url":"https://pith.science/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:36:42Z","links":{"resolver":"https://pith.science/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO","bundle":"https://pith.science/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/bundle.json","state":"https://pith.science/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XHJOMDX66ZF4U4MCGO6G3YUSSO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XHJOMDX66ZF4U4MCGO6G3YUSSO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7a8f3bbe03483c57e7fbacd43c7c3db813fdc543595840d471d22c4142d54647","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T11:59:35Z","title_canon_sha256":"496cf0b05597ec01d6a16a80f2eded639f3a583779a6bd754f7f8b3fb0053a87"},"schema_version":"1.0","source":{"id":"2404.04601","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.04601","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"arxiv_version","alias_value":"2404.04601v1","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.04601","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_12","alias_value":"XHJOMDX66ZF4","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_16","alias_value":"XHJOMDX66ZF4U4MC","created_at":"2026-07-05T08:05:18Z"},{"alias_kind":"pith_short_8","alias_value":"XHJOMDX6","created_at":"2026-07-05T08:05:18Z"}],"graph_snapshots":[{"event_id":"sha256:6d1733b41279f67b5ab8614b3f14b97247bfe2b9e02d7b079a48fbdb6b12648d","target":"graph","created_at":"2026-07-05T08:05:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.04601/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we uncover a new side-channel vulnerability in the widely used NAT port preservation strategy and an insufficient reverse path validation strategy of Wi-Fi routers, which allows an off-path attacker to infer if there is one victim client in the same network communicating with another host on the Internet using TCP. After detecting the presence of TCP connections between the victim client and the server, the attacker can evict the original NAT mapping and reconstruct a new mapping at the router by sending fake TCP packets due to the routers' vulnerability of disabling TCP window ","authors_text":"Ke Xu, Kun Sun, Qi Li, Xuewei Feng, Yuxiang Yang, Ziqiang Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T11:59:35Z","title":"Exploiting Sequence Number Leakage: TCP Hijacking in NAT-Enabled Wi-Fi Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.04601","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b31ce93ad77a23bd32088757d26e7999b95b6dfda248781502277b50b7f88fd8","target":"record","created_at":"2026-07-05T08:05:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7a8f3bbe03483c57e7fbacd43c7c3db813fdc543595840d471d22c4142d54647","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-06T11:59:35Z","title_canon_sha256":"496cf0b05597ec01d6a16a80f2eded639f3a583779a6bd754f7f8b3fb0053a87"},"schema_version":"1.0","source":{"id":"2404.04601","kind":"arxiv","version":1}},"canonical_sha256":"b9d2e60efef64bca718233bc6de2929392e29fbab550a8cad29441f261a693b7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b9d2e60efef64bca718233bc6de2929392e29fbab550a8cad29441f261a693b7","first_computed_at":"2026-07-05T08:05:18.947653Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:05:18.947653Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IfuiEctbEKGoT86aFGbDBpy1Vg9zmeVyC9BHhMcBTffg+9JyeEEAqT2TGfK/PDC3b/yj8yTI1kr4gR++u22JDw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:05:18.948064Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.04601","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b31ce93ad77a23bd32088757d26e7999b95b6dfda248781502277b50b7f88fd8","sha256:6d1733b41279f67b5ab8614b3f14b97247bfe2b9e02d7b079a48fbdb6b12648d"],"state_sha256":"954e365ccc592c7718ab486d2036ff6f38343b9d1bafca542605a0a7492248fe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YE+8WipMz+ukoEVDYzxVOa6Yi67Ck6UYQV/fhP/vyxriuby7H6TvbwCCg+RcibVCjAkxUwvnC5sQomCmYUoHAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:36:42.137253Z","bundle_sha256":"ee927678000ea8044ba1c9812db9d9a12c5ff191b4903f8ff7c1d23f7d90850e"}}