{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2009:52BRT4AHAV2NEJD5ANEP6SHIGU","short_pith_number":"pith:52BRT4AH","canonical_record":{"source":{"id":"0904.0682","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DB","submitted_at":"2009-04-04T05:49:00Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"a3f4c5f6c535a920c62d6e64f7d48341c41d39b19811a2d75e36d3f283d555e4","abstract_canon_sha256":"428b2397b1148db99bb1e420e84fbcc48a515b2993fe8015235f711ca57221ff"},"schema_version":"1.0"},"canonical_sha256":"ee8319f0070574d2247d0348ff48e835276fbea52892cd8a74f31544718d772c","source":{"kind":"arxiv","id":"0904.0682","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"0904.0682","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"arxiv_version","alias_value":"0904.0682v4","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.0904.0682","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"pith_short_12","alias_value":"52BRT4AHAV2N","created_at":"2026-05-18T12:25:58Z"},{"alias_kind":"pith_short_16","alias_value":"52BRT4AHAV2NEJD5","created_at":"2026-05-18T12:25:58Z"},{"alias_kind":"pith_short_8","alias_value":"52BRT4AH","created_at":"2026-05-18T12:25:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2009:52BRT4AHAV2NEJD5ANEP6SHIGU","target":"record","payload":{"canonical_record":{"source":{"id":"0904.0682","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DB","submitted_at":"2009-04-04T05:49:00Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"a3f4c5f6c535a920c62d6e64f7d48341c41d39b19811a2d75e36d3f283d555e4","abstract_canon_sha256":"428b2397b1148db99bb1e420e84fbcc48a515b2993fe8015235f711ca57221ff"},"schema_version":"1.0"},"canonical_sha256":"ee8319f0070574d2247d0348ff48e835276fbea52892cd8a74f31544718d772c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T04:22:11.610963Z","signature_b64":"8+1lSNj8ZoArh7f5H2+OARPtgQvLNhB+mmQrxB/f0B6uAP28gIvS8q8e0fTrYZnlmNkdvdcJ+g6UNgworubbDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee8319f0070574d2247d0348ff48e835276fbea52892cd8a74f31544718d772c","last_reissued_at":"2026-05-18T04:22:11.610596Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T04:22:11.610596Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"0904.0682","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T04:22:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kRdr46sxZjT3mQRRRvYC7UDelCGXRS0s7VrD4WZGUZrUSQYjBei1H3HEXyxZErzVYfGI7rRS1epvvcGen/igBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T04:25:37.178721Z"},"content_sha256":"c82f91bff22a509329c3bf2f1b4ac63bd228c901499fcd22b0a02ae912c53fdd","schema_version":"1.0","event_id":"sha256:c82f91bff22a509329c3bf2f1b4ac63bd228c901499fcd22b0a02ae912c53fdd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2009:52BRT4AHAV2NEJD5ANEP6SHIGU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy in Search Logs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.DB","authors_text":"Ashwin Machanavajjhala, Guozhang Wang, Johannes Gehrke, Michaela Goetz, Xiaokui Xiao","submitted_at":"2009-04-04T05:49:00Z","abstract_excerpt":"Search engine companies collect the \"database of intentions\", the histories of their users' search queries. These search logs are a gold mine for researchers. Search engine companies, however, are wary of publishing search logs in order not to disclose sensitive information. In this paper we analyze algorithms for publishing frequent keywords, queries and clicks of a search log. We first show how methods that achieve variants of $k$-anonymity are vulnerable to active attacks. We then demonstrate that the stronger guarantee ensured by $\\epsilon$-differential privacy unfortunately does not provi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"0904.0682","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T04:22:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6JSKtileAs1W0Jkgikr6X39de8PB/OKaY/NrUKdUcyrno/jUTD1sgxZZ7tjGHFan0U9OpOxoQoYAh/mK/eN+Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T04:25:37.179093Z"},"content_sha256":"459319e048eaf575247464bff937eb6612ab0b560a1c00f22b7e388a5142e50e","schema_version":"1.0","event_id":"sha256:459319e048eaf575247464bff937eb6612ab0b560a1c00f22b7e388a5142e50e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/bundle.json","state_url":"https://pith.science/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-04T04:25:37Z","links":{"resolver":"https://pith.science/pith/52BRT4AHAV2NEJD5ANEP6SHIGU","bundle":"https://pith.science/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/bundle.json","state":"https://pith.science/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/52BRT4AHAV2NEJD5ANEP6SHIGU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2009:52BRT4AHAV2NEJD5ANEP6SHIGU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"428b2397b1148db99bb1e420e84fbcc48a515b2993fe8015235f711ca57221ff","cross_cats_sorted":["cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DB","submitted_at":"2009-04-04T05:49:00Z","title_canon_sha256":"a3f4c5f6c535a920c62d6e64f7d48341c41d39b19811a2d75e36d3f283d555e4"},"schema_version":"1.0","source":{"id":"0904.0682","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"0904.0682","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"arxiv_version","alias_value":"0904.0682v4","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.0904.0682","created_at":"2026-05-18T04:22:11Z"},{"alias_kind":"pith_short_12","alias_value":"52BRT4AHAV2N","created_at":"2026-05-18T12:25:58Z"},{"alias_kind":"pith_short_16","alias_value":"52BRT4AHAV2NEJD5","created_at":"2026-05-18T12:25:58Z"},{"alias_kind":"pith_short_8","alias_value":"52BRT4AH","created_at":"2026-05-18T12:25:58Z"}],"graph_snapshots":[{"event_id":"sha256:459319e048eaf575247464bff937eb6612ab0b560a1c00f22b7e388a5142e50e","target":"graph","created_at":"2026-05-18T04:22:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Search engine companies collect the \"database of intentions\", the histories of their users' search queries. These search logs are a gold mine for researchers. Search engine companies, however, are wary of publishing search logs in order not to disclose sensitive information. In this paper we analyze algorithms for publishing frequent keywords, queries and clicks of a search log. We first show how methods that achieve variants of $k$-anonymity are vulnerable to active attacks. We then demonstrate that the stronger guarantee ensured by $\\epsilon$-differential privacy unfortunately does not provi","authors_text":"Ashwin Machanavajjhala, Guozhang Wang, Johannes Gehrke, Michaela Goetz, Xiaokui Xiao","cross_cats":["cs.IR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DB","submitted_at":"2009-04-04T05:49:00Z","title":"Privacy in Search Logs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"0904.0682","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c82f91bff22a509329c3bf2f1b4ac63bd228c901499fcd22b0a02ae912c53fdd","target":"record","created_at":"2026-05-18T04:22:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"428b2397b1148db99bb1e420e84fbcc48a515b2993fe8015235f711ca57221ff","cross_cats_sorted":["cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DB","submitted_at":"2009-04-04T05:49:00Z","title_canon_sha256":"a3f4c5f6c535a920c62d6e64f7d48341c41d39b19811a2d75e36d3f283d555e4"},"schema_version":"1.0","source":{"id":"0904.0682","kind":"arxiv","version":4}},"canonical_sha256":"ee8319f0070574d2247d0348ff48e835276fbea52892cd8a74f31544718d772c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee8319f0070574d2247d0348ff48e835276fbea52892cd8a74f31544718d772c","first_computed_at":"2026-05-18T04:22:11.610596Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T04:22:11.610596Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8+1lSNj8ZoArh7f5H2+OARPtgQvLNhB+mmQrxB/f0B6uAP28gIvS8q8e0fTrYZnlmNkdvdcJ+g6UNgworubbDA==","signature_status":"signed_v1","signed_at":"2026-05-18T04:22:11.610963Z","signed_message":"canonical_sha256_bytes"},"source_id":"0904.0682","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c82f91bff22a509329c3bf2f1b4ac63bd228c901499fcd22b0a02ae912c53fdd","sha256:459319e048eaf575247464bff937eb6612ab0b560a1c00f22b7e388a5142e50e"],"state_sha256":"41c074a487b3fb02bc2842201212df18ec02630479313f9df40e70c20e6a9430"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dI4PBFUfYVOvAY03udt2j7eXuG40uoHGs4G3dW58VnKzqZyG3/KnYbQ5/kG6thguDXBvIYeJUmel9AzjQhKJBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-04T04:25:37.181008Z","bundle_sha256":"6ae55acd5d207b26af878d7cbd6de6d6ab2b0b52168ffbdd4e7842792c424f77"}}