{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XRBAJYUBIJMUQPWNL7RR5D6HTY","short_pith_number":"pith:XRBAJYUB","canonical_record":{"source":{"id":"2511.10111","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T09:18:07Z","cross_cats_sorted":[],"title_canon_sha256":"5dcae7bcb19b0da49ff231108414e25e3e524c146a3220a68c4f90e6e83c390a","abstract_canon_sha256":"428e18790f264b063d39a56445f0ac0374874d1604951bd49917ec38bc62d733"},"schema_version":"1.0"},"canonical_sha256":"bc4204e2814259483ecd5fe31e8fc79e2187d0c17c030c6f79bc6e0955824c6e","source":{"kind":"arxiv","id":"2511.10111","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.10111","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"arxiv_version","alias_value":"2511.10111v3","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.10111","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_12","alias_value":"XRBAJYUBIJMU","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_16","alias_value":"XRBAJYUBIJMUQPWN","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_8","alias_value":"XRBAJYUB","created_at":"2026-06-23T01:11:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XRBAJYUBIJMUQPWNL7RR5D6HTY","target":"record","payload":{"canonical_record":{"source":{"id":"2511.10111","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T09:18:07Z","cross_cats_sorted":[],"title_canon_sha256":"5dcae7bcb19b0da49ff231108414e25e3e524c146a3220a68c4f90e6e83c390a","abstract_canon_sha256":"428e18790f264b063d39a56445f0ac0374874d1604951bd49917ec38bc62d733"},"schema_version":"1.0"},"canonical_sha256":"bc4204e2814259483ecd5fe31e8fc79e2187d0c17c030c6f79bc6e0955824c6e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T01:11:58.699074Z","signature_b64":"oG0iqWBSSyG6/Przj54sMd6VI6lMQY9edZQ++VWYXDJkPeI6y0O0z409vgDBicCHF7P/hCv+wIJvywuBWCbQBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bc4204e2814259483ecd5fe31e8fc79e2187d0c17c030c6f79bc6e0955824c6e","last_reissued_at":"2026-06-23T01:11:58.698538Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T01:11:58.698538Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2511.10111","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:11:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"K3FkJHYaSrSbiB3qhBPqi08AC3+vvbdbhZhwmMJd9FibGR/xfkLvsnIHm6izDFx0MOd0vksRTLwhcB23H7gvBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T19:12:06.460096Z"},"content_sha256":"cc7c41faec0833211328578f83f8960a46def1cb954701ea3af07c4ebeb7c860","schema_version":"1.0","event_id":"sha256:cc7c41faec0833211328578f83f8960a46def1cb954701ea3af07c4ebeb7c860"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XRBAJYUBIJMUQPWNL7RR5D6HTY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Krause, Jacques Suray, Lea Schm\\\"user, Marten Oltrogge, Maximilian Golla, Oliver Wiese, Sascha Fahl","submitted_at":"2025-11-13T09:18:07Z","abstract_excerpt":"Password updates are a critical part of the password lifecycle and are recommended following exposure of reused passwords or suspected compromise. However, password update processes are often cumbersome, require manual password creation, and involve inconsistent website workflows that hinder reliable automation by password managers.\n  In this work, we conduct the first in-depth, systematic analysis of 111 password update processes deployed on top-ranked websites. We provide novel insights into their overall security, usability, and automation capabilities, and contribute to authentication secu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.10111","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2511.10111/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:11:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8PNNhqy9qkx/ap8H4EEVFVEwFHEf47ueN+5EUsVHnYtQuFod6OrxlfEuForcCWTLSnEg8bcof9tbZMx9SB0CCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T19:12:06.460486Z"},"content_sha256":"895399b9c4335d53049ca4ccb6627546fcd0a3443672162b1e4eaaa06e113244","schema_version":"1.0","event_id":"sha256:895399b9c4335d53049ca4ccb6627546fcd0a3443672162b1e4eaaa06e113244"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/bundle.json","state_url":"https://pith.science/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-02T19:12:06Z","links":{"resolver":"https://pith.science/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY","bundle":"https://pith.science/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/bundle.json","state":"https://pith.science/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XRBAJYUBIJMUQPWNL7RR5D6HTY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XRBAJYUBIJMUQPWNL7RR5D6HTY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"428e18790f264b063d39a56445f0ac0374874d1604951bd49917ec38bc62d733","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T09:18:07Z","title_canon_sha256":"5dcae7bcb19b0da49ff231108414e25e3e524c146a3220a68c4f90e6e83c390a"},"schema_version":"1.0","source":{"id":"2511.10111","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2511.10111","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"arxiv_version","alias_value":"2511.10111v3","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2511.10111","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_12","alias_value":"XRBAJYUBIJMU","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_16","alias_value":"XRBAJYUBIJMUQPWN","created_at":"2026-06-23T01:11:58Z"},{"alias_kind":"pith_short_8","alias_value":"XRBAJYUB","created_at":"2026-06-23T01:11:58Z"}],"graph_snapshots":[{"event_id":"sha256:895399b9c4335d53049ca4ccb6627546fcd0a3443672162b1e4eaaa06e113244","target":"graph","created_at":"2026-06-23T01:11:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2511.10111/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Password updates are a critical part of the password lifecycle and are recommended following exposure of reused passwords or suspected compromise. However, password update processes are often cumbersome, require manual password creation, and involve inconsistent website workflows that hinder reliable automation by password managers.\n  In this work, we conduct the first in-depth, systematic analysis of 111 password update processes deployed on top-ranked websites. We provide novel insights into their overall security, usability, and automation capabilities, and contribute to authentication secu","authors_text":"Alexander Krause, Jacques Suray, Lea Schm\\\"user, Marten Oltrogge, Maximilian Golla, Oliver Wiese, Sascha Fahl","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T09:18:07Z","title":"An Analysis of the Security, Usability, and Automation Capabilities of Password Update Processes on Top-Ranked Websites"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2511.10111","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cc7c41faec0833211328578f83f8960a46def1cb954701ea3af07c4ebeb7c860","target":"record","created_at":"2026-06-23T01:11:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"428e18790f264b063d39a56445f0ac0374874d1604951bd49917ec38bc62d733","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-11-13T09:18:07Z","title_canon_sha256":"5dcae7bcb19b0da49ff231108414e25e3e524c146a3220a68c4f90e6e83c390a"},"schema_version":"1.0","source":{"id":"2511.10111","kind":"arxiv","version":3}},"canonical_sha256":"bc4204e2814259483ecd5fe31e8fc79e2187d0c17c030c6f79bc6e0955824c6e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bc4204e2814259483ecd5fe31e8fc79e2187d0c17c030c6f79bc6e0955824c6e","first_computed_at":"2026-06-23T01:11:58.698538Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T01:11:58.698538Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oG0iqWBSSyG6/Przj54sMd6VI6lMQY9edZQ++VWYXDJkPeI6y0O0z409vgDBicCHF7P/hCv+wIJvywuBWCbQBg==","signature_status":"signed_v1","signed_at":"2026-06-23T01:11:58.699074Z","signed_message":"canonical_sha256_bytes"},"source_id":"2511.10111","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cc7c41faec0833211328578f83f8960a46def1cb954701ea3af07c4ebeb7c860","sha256:895399b9c4335d53049ca4ccb6627546fcd0a3443672162b1e4eaaa06e113244"],"state_sha256":"9dfde2b8b34d6f975fb4355916ff1740fb898daed1cb3d26f583b43d9b083abe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sYocnRNgsCpk0t9FcqH1QWHY9DQvM+GQTFjonJrW/Lry3/GOm/ljib+XLqmSY5PMPOuiu0BSsHm1xapg+8waCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-02T19:12:06.462598Z","bundle_sha256":"0de3283436fe85a6f7ea26caf543214217177375d19c0f304eed1b0739b88612"}}