{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:5IPOUE7OVBFUYI5BVZUFTLSOLY","short_pith_number":"pith:5IPOUE7O","canonical_record":{"source":{"id":"2606.17562","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-16T06:07:41Z","cross_cats_sorted":["cs.SY","eess.SY"],"title_canon_sha256":"2f4e1002d0fdcca3b771d4a829d101440f9db08b1a82f0b7ad01d1ef857376e4","abstract_canon_sha256":"59e1b5be2e4f4f497fa8f5dc2b4c8ad17efac1e0003bf389f4166821d948bf68"},"schema_version":"1.0"},"canonical_sha256":"ea1eea13eea84b4c23a1ae6859ae4e5e08c777051e4f18b71d2048436f5f9fdf","source":{"kind":"arxiv","id":"2606.17562","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17562","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17562v1","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17562","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_12","alias_value":"5IPOUE7OVBFU","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_16","alias_value":"5IPOUE7OVBFUYI5B","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_8","alias_value":"5IPOUE7O","created_at":"2026-06-19T16:10:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:5IPOUE7OVBFUYI5BVZUFTLSOLY","target":"record","payload":{"canonical_record":{"source":{"id":"2606.17562","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-16T06:07:41Z","cross_cats_sorted":["cs.SY","eess.SY"],"title_canon_sha256":"2f4e1002d0fdcca3b771d4a829d101440f9db08b1a82f0b7ad01d1ef857376e4","abstract_canon_sha256":"59e1b5be2e4f4f497fa8f5dc2b4c8ad17efac1e0003bf389f4166821d948bf68"},"schema_version":"1.0"},"canonical_sha256":"ea1eea13eea84b4c23a1ae6859ae4e5e08c777051e4f18b71d2048436f5f9fdf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-19T16:10:16.017955Z","signature_b64":"IZlXaQHfSTiJ5p2S38YLToe9tH3P0kCYYs5N4VSv+Smwl4ud6RMD4seAcavo4f2uNcRupZEZ82FhljXLMVKOCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea1eea13eea84b4c23a1ae6859ae4e5e08c777051e4f18b71d2048436f5f9fdf","last_reissued_at":"2026-06-19T16:10:16.017613Z","signature_status":"signed_v1","first_computed_at":"2026-06-19T16:10:16.017613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.17562","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FAlPKKMl8KI7i2nPs8k5ExaDEw9FlMe7EuI9704qu8aodCnVUgcAUSQK6A8QgF6pYGJXXgQq/91JXQqohnRiAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T09:48:19.652041Z"},"content_sha256":"8b7a31ed7e70aac5983a76491422f3a7fa44da63ba8b6c9901760dae183c64b7","schema_version":"1.0","event_id":"sha256:8b7a31ed7e70aac5983a76491422f3a7fa44da63ba8b6c9901760dae183c64b7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:5IPOUE7OVBFUYI5BVZUFTLSOLY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Anywhere, Any-Stymie: Remote Activation of Trojan Malware on LiDAR with Modulated Signals","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SY","eess.SY"],"primary_cat":"cs.CR","authors_text":"Miroslav Pajic, R. Spencer Hallyburton","submitted_at":"2026-06-16T06:07:41Z","abstract_excerpt":"LiDAR sensors are widely deployed in autonomous systems for 3D perception and safety-critical decision-making. We identify a previously unexplored attack surface in which dormant malware embedded in the LiDAR sensing pipeline remains inactive during normal operation and can be externally triggered after deployment, without requiring access to sensor hardware or networking at attack time. To operationalize this threat, we design malware capable of low-level point-cloud manipulation and embed it into LiDAR firmware. This malware was developed in a closed research test environment with vendor tec"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17562","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.17562/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-19T16:10:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ox9676gJKZ1+vqq/TsQKCJJzquU2nK/lnlEafwJUWErZMW3tQuHBK/2IzGPEcjcfpMkYFRe6KMaysI3S8b5+CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-04T09:48:19.652444Z"},"content_sha256":"bdd0bb4c2d0a5c65b620450043a9b6e4872a7ef0cf4e829d33cd1a1340354d45","schema_version":"1.0","event_id":"sha256:bdd0bb4c2d0a5c65b620450043a9b6e4872a7ef0cf4e829d33cd1a1340354d45"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/bundle.json","state_url":"https://pith.science/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-04T09:48:19Z","links":{"resolver":"https://pith.science/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY","bundle":"https://pith.science/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/bundle.json","state":"https://pith.science/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5IPOUE7OVBFUYI5BVZUFTLSOLY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:5IPOUE7OVBFUYI5BVZUFTLSOLY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"59e1b5be2e4f4f497fa8f5dc2b4c8ad17efac1e0003bf389f4166821d948bf68","cross_cats_sorted":["cs.SY","eess.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-16T06:07:41Z","title_canon_sha256":"2f4e1002d0fdcca3b771d4a829d101440f9db08b1a82f0b7ad01d1ef857376e4"},"schema_version":"1.0","source":{"id":"2606.17562","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.17562","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"arxiv_version","alias_value":"2606.17562v1","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.17562","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_12","alias_value":"5IPOUE7OVBFU","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_16","alias_value":"5IPOUE7OVBFUYI5B","created_at":"2026-06-19T16:10:16Z"},{"alias_kind":"pith_short_8","alias_value":"5IPOUE7O","created_at":"2026-06-19T16:10:16Z"}],"graph_snapshots":[{"event_id":"sha256:bdd0bb4c2d0a5c65b620450043a9b6e4872a7ef0cf4e829d33cd1a1340354d45","target":"graph","created_at":"2026-06-19T16:10:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.17562/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LiDAR sensors are widely deployed in autonomous systems for 3D perception and safety-critical decision-making. We identify a previously unexplored attack surface in which dormant malware embedded in the LiDAR sensing pipeline remains inactive during normal operation and can be externally triggered after deployment, without requiring access to sensor hardware or networking at attack time. To operationalize this threat, we design malware capable of low-level point-cloud manipulation and embed it into LiDAR firmware. This malware was developed in a closed research test environment with vendor tec","authors_text":"Miroslav Pajic, R. Spencer Hallyburton","cross_cats":["cs.SY","eess.SY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-16T06:07:41Z","title":"Anywhere, Any-Stymie: Remote Activation of Trojan Malware on LiDAR with Modulated Signals"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.17562","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8b7a31ed7e70aac5983a76491422f3a7fa44da63ba8b6c9901760dae183c64b7","target":"record","created_at":"2026-06-19T16:10:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"59e1b5be2e4f4f497fa8f5dc2b4c8ad17efac1e0003bf389f4166821d948bf68","cross_cats_sorted":["cs.SY","eess.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-16T06:07:41Z","title_canon_sha256":"2f4e1002d0fdcca3b771d4a829d101440f9db08b1a82f0b7ad01d1ef857376e4"},"schema_version":"1.0","source":{"id":"2606.17562","kind":"arxiv","version":1}},"canonical_sha256":"ea1eea13eea84b4c23a1ae6859ae4e5e08c777051e4f18b71d2048436f5f9fdf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ea1eea13eea84b4c23a1ae6859ae4e5e08c777051e4f18b71d2048436f5f9fdf","first_computed_at":"2026-06-19T16:10:16.017613Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-19T16:10:16.017613Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IZlXaQHfSTiJ5p2S38YLToe9tH3P0kCYYs5N4VSv+Smwl4ud6RMD4seAcavo4f2uNcRupZEZ82FhljXLMVKOCA==","signature_status":"signed_v1","signed_at":"2026-06-19T16:10:16.017955Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.17562","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8b7a31ed7e70aac5983a76491422f3a7fa44da63ba8b6c9901760dae183c64b7","sha256:bdd0bb4c2d0a5c65b620450043a9b6e4872a7ef0cf4e829d33cd1a1340354d45"],"state_sha256":"18c164800a52044b9a324650d41d3741bf68104143d1c505b41d7b904d2fbf1e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r6MSmDwxlVWGycRHBNYgHRTjpPazomEk5qWOQuATMVN3fP60g3jyNIMqq2tiyTV7cCcf8uz/OoEYgLBVWsRzBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-04T09:48:19.654504Z","bundle_sha256":"8640245bdc5876d4f157ff1fe7714ada9cc4e8b8f23a49eb3fd47019843eedd3"}}