{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2014:YE2UGADIQCEXK5OYHC3VVTSJOC","short_pith_number":"pith:YE2UGADI","canonical_record":{"source":{"id":"1410.7754","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-10-28T19:23:26Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"0c50375738bddef5e81a309c863051d1bc9aeed718cab0a43b2e24a2e1e77ac0","abstract_canon_sha256":"c5770e22282219bf8dc561ea3554a9f6aa2f5305b49302c7c33ab4b64ca2a6e7"},"schema_version":"1.0"},"canonical_sha256":"c13543006880897575d838b75ace4970be4639f3a227ec468a782575cf6acb01","source":{"kind":"arxiv","id":"1410.7754","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1410.7754","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"arxiv_version","alias_value":"1410.7754v1","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1410.7754","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"pith_short_12","alias_value":"YE2UGADIQCEX","created_at":"2026-05-18T12:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"YE2UGADIQCEXK5OY","created_at":"2026-05-18T12:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"YE2UGADI","created_at":"2026-05-18T12:28:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2014:YE2UGADIQCEXK5OYHC3VVTSJOC","target":"record","payload":{"canonical_record":{"source":{"id":"1410.7754","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-10-28T19:23:26Z","cross_cats_sorted":["cs.OS"],"title_canon_sha256":"0c50375738bddef5e81a309c863051d1bc9aeed718cab0a43b2e24a2e1e77ac0","abstract_canon_sha256":"c5770e22282219bf8dc561ea3554a9f6aa2f5305b49302c7c33ab4b64ca2a6e7"},"schema_version":"1.0"},"canonical_sha256":"c13543006880897575d838b75ace4970be4639f3a227ec468a782575cf6acb01","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:39:09.489954Z","signature_b64":"nZ5Q/xkubKorvlwYwzadb85mFcVBk7hzI/69QftVIM9fs7mqM5NO4EVMty3aDxyRIap0jcIVCZSHLmuwvR8gCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c13543006880897575d838b75ace4970be4639f3a227ec468a782575cf6acb01","last_reissued_at":"2026-05-18T02:39:09.489415Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:39:09.489415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1410.7754","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:39:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GMov2kbNjJtf4eDjTD7K73JYwVwipMygGua2/qUhbYmms3o7JMFmo5fbyYYS90NgsSPrG90gJQCKM8o9vzWmAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T19:55:34.176057Z"},"content_sha256":"b5732ae3e0c7c0adb5bc0bae9370792b1ed300417697c87cec84d98b14b76de2","schema_version":"1.0","event_id":"sha256:b5732ae3e0c7c0adb5bc0bae9370792b1ed300417697c87cec84d98b14b76de2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2014:YE2UGADIQCEXK5OYHC3VVTSJOC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A First Look at Firefox OS Security","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.OS"],"primary_cat":"cs.CR","authors_text":"Bhargava Shastry, Daniel Defreez, Hao Chen, Jean-Pierre Seifert","submitted_at":"2014-10-28T19:23:26Z","abstract_excerpt":"With Firefox OS, Mozilla is making a serious push for an HTML5-based mobile platform. In order to assuage security concerns over providing hardware access to web applications, Mozilla has introduced a number of mechanisms that make the security landscape of Firefox OS distinct from both the desktop web and other mobile operating systems. From an application security perspective, the two most significant of these mechanisms are the the introduction of a default Content Security Policy and code review in the market. This paper describes how lightweight static analysis can augment these mechanism"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1410.7754","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:39:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PhBLeP1zVIPmk8Q9qQ9TikpIWAE9fdKO8QxdY1z+qd8c1yA21jfxhRfnLPx196ebpta7fjscCLfGKaAlDe2lDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T19:55:34.176680Z"},"content_sha256":"e9d4e629a07ec0b15af6c180714efae6475060b0413b5a0322d58abe17d06b1d","schema_version":"1.0","event_id":"sha256:e9d4e629a07ec0b15af6c180714efae6475060b0413b5a0322d58abe17d06b1d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/bundle.json","state_url":"https://pith.science/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T19:55:34Z","links":{"resolver":"https://pith.science/pith/YE2UGADIQCEXK5OYHC3VVTSJOC","bundle":"https://pith.science/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/bundle.json","state":"https://pith.science/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YE2UGADIQCEXK5OYHC3VVTSJOC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:YE2UGADIQCEXK5OYHC3VVTSJOC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c5770e22282219bf8dc561ea3554a9f6aa2f5305b49302c7c33ab4b64ca2a6e7","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-10-28T19:23:26Z","title_canon_sha256":"0c50375738bddef5e81a309c863051d1bc9aeed718cab0a43b2e24a2e1e77ac0"},"schema_version":"1.0","source":{"id":"1410.7754","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1410.7754","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"arxiv_version","alias_value":"1410.7754v1","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1410.7754","created_at":"2026-05-18T02:39:09Z"},{"alias_kind":"pith_short_12","alias_value":"YE2UGADIQCEX","created_at":"2026-05-18T12:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"YE2UGADIQCEXK5OY","created_at":"2026-05-18T12:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"YE2UGADI","created_at":"2026-05-18T12:28:57Z"}],"graph_snapshots":[{"event_id":"sha256:e9d4e629a07ec0b15af6c180714efae6475060b0413b5a0322d58abe17d06b1d","target":"graph","created_at":"2026-05-18T02:39:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"With Firefox OS, Mozilla is making a serious push for an HTML5-based mobile platform. In order to assuage security concerns over providing hardware access to web applications, Mozilla has introduced a number of mechanisms that make the security landscape of Firefox OS distinct from both the desktop web and other mobile operating systems. From an application security perspective, the two most significant of these mechanisms are the the introduction of a default Content Security Policy and code review in the market. This paper describes how lightweight static analysis can augment these mechanism","authors_text":"Bhargava Shastry, Daniel Defreez, Hao Chen, Jean-Pierre Seifert","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-10-28T19:23:26Z","title":"A First Look at Firefox OS Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1410.7754","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b5732ae3e0c7c0adb5bc0bae9370792b1ed300417697c87cec84d98b14b76de2","target":"record","created_at":"2026-05-18T02:39:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c5770e22282219bf8dc561ea3554a9f6aa2f5305b49302c7c33ab4b64ca2a6e7","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-10-28T19:23:26Z","title_canon_sha256":"0c50375738bddef5e81a309c863051d1bc9aeed718cab0a43b2e24a2e1e77ac0"},"schema_version":"1.0","source":{"id":"1410.7754","kind":"arxiv","version":1}},"canonical_sha256":"c13543006880897575d838b75ace4970be4639f3a227ec468a782575cf6acb01","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c13543006880897575d838b75ace4970be4639f3a227ec468a782575cf6acb01","first_computed_at":"2026-05-18T02:39:09.489415Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:39:09.489415Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nZ5Q/xkubKorvlwYwzadb85mFcVBk7hzI/69QftVIM9fs7mqM5NO4EVMty3aDxyRIap0jcIVCZSHLmuwvR8gCg==","signature_status":"signed_v1","signed_at":"2026-05-18T02:39:09.489954Z","signed_message":"canonical_sha256_bytes"},"source_id":"1410.7754","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b5732ae3e0c7c0adb5bc0bae9370792b1ed300417697c87cec84d98b14b76de2","sha256:e9d4e629a07ec0b15af6c180714efae6475060b0413b5a0322d58abe17d06b1d"],"state_sha256":"e5509c8e19b35b83646c74ea06d03387f6cbead6d5906eb6f70bf38cc02fcb3a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0rILv+e43cXrewP1qZNjgsIBptEhznAQHSZYcOTNTSQOylMl8gc4e2pJ5zbzheio1D6zLPNL8a+NMlvT5NdqBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T19:55:34.180008Z","bundle_sha256":"f1fe6c8ff4adedb90c4c285889367623e0fd2d3b84d119f290223d2a985091a7"}}