{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:XUDMW66RAJV3H2VBZD7YNEZFPM","short_pith_number":"pith:XUDMW66R","canonical_record":{"source":{"id":"2204.10920","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-22T20:21:21Z","cross_cats_sorted":[],"title_canon_sha256":"3410e26192265d376b50d0723da7df3e3e0c295044783edefb2a8288e44d8147","abstract_canon_sha256":"571ac84190890bfd19cc82bd278935b0ec96535a39f51beb50e5552b4224f4e3"},"schema_version":"1.0"},"canonical_sha256":"bd06cb7bd1026bb3eaa1c8ff8693257b0289cd6506965f692020692e92c7b22c","source":{"kind":"arxiv","id":"2204.10920","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.10920","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"2204.10920v5","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.10920","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"XUDMW66RAJV3","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_16","alias_value":"XUDMW66RAJV3H2VB","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_8","alias_value":"XUDMW66R","created_at":"2026-07-05T07:00:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:XUDMW66RAJV3H2VBZD7YNEZFPM","target":"record","payload":{"canonical_record":{"source":{"id":"2204.10920","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-22T20:21:21Z","cross_cats_sorted":[],"title_canon_sha256":"3410e26192265d376b50d0723da7df3e3e0c295044783edefb2a8288e44d8147","abstract_canon_sha256":"571ac84190890bfd19cc82bd278935b0ec96535a39f51beb50e5552b4224f4e3"},"schema_version":"1.0"},"canonical_sha256":"bd06cb7bd1026bb3eaa1c8ff8693257b0289cd6506965f692020692e92c7b22c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:00:42.736058Z","signature_b64":"bxzhg2bgxYVSS2wu54jx7d3pnQI13g/k4X4QM08EeIsDexrVZ1PAJaN4SZpGBJfdDX62IXS8C01DZ2iS/GLtBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bd06cb7bd1026bb3eaa1c8ff8693257b0289cd6506965f692020692e92c7b22c","last_reissued_at":"2026-07-05T07:00:42.735567Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:00:42.735567Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2204.10920","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2fagWY9u5ik9YrrlRzN3FhxCVSPX8yLETtZjyzGxNXNh0q6kQKuzjE/X19yRFQMFdNsXjBfXurauzZzpegr0Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:21:49.353155Z"},"content_sha256":"92cb44e8eafbdc0f2a3621aa6168aff0a5427fd7c78216d00bbee35e01453acc","schema_version":"1.0","event_id":"sha256:92cb44e8eafbdc0f2a3621aa6168aff0a5427fd7c78216d00bbee35e01453acc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:XUDMW66RAJV3H2VBZD7YNEZFPM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tracking, Profiling, and Ad Targeting in the Alexa Echo Smart Speaker Ecosystem","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Gamero-Garrido, Athina Markopoulou, Daniel Dubois, David Choffnes, Franziska Roesner, Hao Cui, Pouneh Nikkhah Bahrami, Rahmadi Trimananda, Umar Iqbal, Zubair Shafiq","submitted_at":"2022-04-22T20:21:21Z","abstract_excerpt":"Smart speakers collect voice commands, which can be used to infer sensitive information about users. Given the potential for privacy harms, there is a need for greater transparency and control over the data collected, used, and shared by smart speaker platforms as well as third party skills supported on them. To bridge this gap, we build a framework to measure data collection, usage, and sharing by the smart speaker platforms. We apply our framework to the Amazon smart speaker ecosystem. Our results show that Amazon and third parties, including advertising and tracking services that are unique"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.10920","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.10920/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6VUdDpmaWHj8+FV20DpCOL9T7R3aemxaX/QnItbBFIRMWOYvtQAPDGoD3RfOyMiwJw5+s+GkKPIBibxkpIbNCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T10:21:49.353545Z"},"content_sha256":"12c8a6b48aab595b29ca7eebec58f833f90108248a81adf18842fe5f01ca991c","schema_version":"1.0","event_id":"sha256:12c8a6b48aab595b29ca7eebec58f833f90108248a81adf18842fe5f01ca991c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/bundle.json","state_url":"https://pith.science/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T10:21:49Z","links":{"resolver":"https://pith.science/pith/XUDMW66RAJV3H2VBZD7YNEZFPM","bundle":"https://pith.science/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/bundle.json","state":"https://pith.science/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XUDMW66RAJV3H2VBZD7YNEZFPM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:XUDMW66RAJV3H2VBZD7YNEZFPM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"571ac84190890bfd19cc82bd278935b0ec96535a39f51beb50e5552b4224f4e3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-22T20:21:21Z","title_canon_sha256":"3410e26192265d376b50d0723da7df3e3e0c295044783edefb2a8288e44d8147"},"schema_version":"1.0","source":{"id":"2204.10920","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2204.10920","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"2204.10920v5","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.10920","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"XUDMW66RAJV3","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_16","alias_value":"XUDMW66RAJV3H2VB","created_at":"2026-07-05T07:00:42Z"},{"alias_kind":"pith_short_8","alias_value":"XUDMW66R","created_at":"2026-07-05T07:00:42Z"}],"graph_snapshots":[{"event_id":"sha256:12c8a6b48aab595b29ca7eebec58f833f90108248a81adf18842fe5f01ca991c","target":"graph","created_at":"2026-07-05T07:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2204.10920/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Smart speakers collect voice commands, which can be used to infer sensitive information about users. Given the potential for privacy harms, there is a need for greater transparency and control over the data collected, used, and shared by smart speaker platforms as well as third party skills supported on them. To bridge this gap, we build a framework to measure data collection, usage, and sharing by the smart speaker platforms. We apply our framework to the Amazon smart speaker ecosystem. Our results show that Amazon and third parties, including advertising and tracking services that are unique","authors_text":"Alexander Gamero-Garrido, Athina Markopoulou, Daniel Dubois, David Choffnes, Franziska Roesner, Hao Cui, Pouneh Nikkhah Bahrami, Rahmadi Trimananda, Umar Iqbal, Zubair Shafiq","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-22T20:21:21Z","title":"Tracking, Profiling, and Ad Targeting in the Alexa Echo Smart Speaker Ecosystem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.10920","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:92cb44e8eafbdc0f2a3621aa6168aff0a5427fd7c78216d00bbee35e01453acc","target":"record","created_at":"2026-07-05T07:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"571ac84190890bfd19cc82bd278935b0ec96535a39f51beb50e5552b4224f4e3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-22T20:21:21Z","title_canon_sha256":"3410e26192265d376b50d0723da7df3e3e0c295044783edefb2a8288e44d8147"},"schema_version":"1.0","source":{"id":"2204.10920","kind":"arxiv","version":5}},"canonical_sha256":"bd06cb7bd1026bb3eaa1c8ff8693257b0289cd6506965f692020692e92c7b22c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bd06cb7bd1026bb3eaa1c8ff8693257b0289cd6506965f692020692e92c7b22c","first_computed_at":"2026-07-05T07:00:42.735567Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:00:42.735567Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bxzhg2bgxYVSS2wu54jx7d3pnQI13g/k4X4QM08EeIsDexrVZ1PAJaN4SZpGBJfdDX62IXS8C01DZ2iS/GLtBw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:00:42.736058Z","signed_message":"canonical_sha256_bytes"},"source_id":"2204.10920","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:92cb44e8eafbdc0f2a3621aa6168aff0a5427fd7c78216d00bbee35e01453acc","sha256:12c8a6b48aab595b29ca7eebec58f833f90108248a81adf18842fe5f01ca991c"],"state_sha256":"24155a4bdecf12802649c47e963b50665c5a20abb8052a545915a6576376b1ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ulYpoaKXAAgpu6QaEcKU4hHj7tGfYTwEpfkGm2A31Fv1AL4WUUuqHSEjgO1qN6FMruAmvpWi6XDZxNf9jNZXDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T10:21:49.355490Z","bundle_sha256":"89d80e8e95db816acaf36346b07f2281fa1533f757bbaef539404972b8f14fb0"}}