{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2014:HEBPHV2E2T5DXRFNWWWQK3PB4N","short_pith_number":"pith:HEBPHV2E","canonical_record":{"source":{"id":"1404.2637","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","primary_cat":"cs.NI","submitted_at":"2014-04-09T21:40:07Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"50196c6bc52ac714569a65c0895a4c908972951a360057b51f5fd03e8b4d4122","abstract_canon_sha256":"41c1525e98a1f5353441945cb5aab4f7440a3ec9b5cae532558d3963862a1aa3"},"schema_version":"1.0"},"canonical_sha256":"3902f3d744d4fa3bc4adb5ad056de1e371d2c0bcf49695ab85fad59d1ff46595","source":{"kind":"arxiv","id":"1404.2637","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1404.2637","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"arxiv_version","alias_value":"1404.2637v1","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1404.2637","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"pith_short_12","alias_value":"HEBPHV2E2T5D","created_at":"2026-05-18T12:28:30Z"},{"alias_kind":"pith_short_16","alias_value":"HEBPHV2E2T5DXRFN","created_at":"2026-05-18T12:28:30Z"},{"alias_kind":"pith_short_8","alias_value":"HEBPHV2E","created_at":"2026-05-18T12:28:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2014:HEBPHV2E2T5DXRFNWWWQK3PB4N","target":"record","payload":{"canonical_record":{"source":{"id":"1404.2637","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","primary_cat":"cs.NI","submitted_at":"2014-04-09T21:40:07Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"50196c6bc52ac714569a65c0895a4c908972951a360057b51f5fd03e8b4d4122","abstract_canon_sha256":"41c1525e98a1f5353441945cb5aab4f7440a3ec9b5cae532558d3963862a1aa3"},"schema_version":"1.0"},"canonical_sha256":"3902f3d744d4fa3bc4adb5ad056de1e371d2c0bcf49695ab85fad59d1ff46595","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:54:29.965292Z","signature_b64":"Joxe/Qtf76jVnE+XJIAjV5CmTmEkzW4gJXic3meRajNA7PU7UT0NWqILDoFrt2FN7jdQSA++GUUewbBIz2/LAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3902f3d744d4fa3bc4adb5ad056de1e371d2c0bcf49695ab85fad59d1ff46595","last_reissued_at":"2026-05-18T02:54:29.964809Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:54:29.964809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1404.2637","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:54:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lozxnDsIJCLRXHbR2U/5ezG1n96p5cDTU9d9+iPGcOVqyPpyEzRhWAXegWdaJUBJwu8B6B61kES2cr+KfC7ZBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T21:01:19.502141Z"},"content_sha256":"a3e388f73e42287d7a31379f6abb75008780a101a4dd96f4364019b0ea3f30c3","schema_version":"1.0","event_id":"sha256:a3e388f73e42287d7a31379f6abb75008780a101a4dd96f4364019b0ea3f30c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2014:HEBPHV2E2T5DXRFNWWWQK3PB4N","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Bypassing Cloud Providers' Data Validation to Store Arbitrary Data","license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.NI","authors_text":"Burkhard Stiller, Fabio Hecht, Guilherme Sperb Machado, Martin Waldburger","submitted_at":"2014-04-09T21:40:07Z","abstract_excerpt":"A fundamental Software-as-a-Service (SaaS) characteristic in Cloud Computing is to be application-specific; depending on the application, Cloud Providers (CPs) restrict data formats and attributes allowed into their servers via a data validation process. An ill-defined data validation process may directly impact both security (e.g. application failure, legal issues) and accounting and charging (e.g. trusting metadata in file headers). Therefore, this paper investigates, evaluates (by means of tests), and discusses data validation processes of popular CPs. A proof of concept system was thus bui"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1404.2637","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:54:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FDzzkEIjl9c4Kycdj9EUXj46TKwluhkpY/LE+Fwtj2axnaOvQeuXMSdywxpCwv98QZcvTccvqcbPIXLjsiA8BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-02T21:01:19.502495Z"},"content_sha256":"16bc4a550d70ba605c80bf20d5a25874c772872dd9457853a937a2845e7fd7ea","schema_version":"1.0","event_id":"sha256:16bc4a550d70ba605c80bf20d5a25874c772872dd9457853a937a2845e7fd7ea"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/bundle.json","state_url":"https://pith.science/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-02T21:01:19Z","links":{"resolver":"https://pith.science/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N","bundle":"https://pith.science/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/bundle.json","state":"https://pith.science/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HEBPHV2E2T5DXRFNWWWQK3PB4N/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:HEBPHV2E2T5DXRFNWWWQK3PB4N","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"41c1525e98a1f5353441945cb5aab4f7440a3ec9b5cae532558d3963862a1aa3","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","primary_cat":"cs.NI","submitted_at":"2014-04-09T21:40:07Z","title_canon_sha256":"50196c6bc52ac714569a65c0895a4c908972951a360057b51f5fd03e8b4d4122"},"schema_version":"1.0","source":{"id":"1404.2637","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1404.2637","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"arxiv_version","alias_value":"1404.2637v1","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1404.2637","created_at":"2026-05-18T02:54:29Z"},{"alias_kind":"pith_short_12","alias_value":"HEBPHV2E2T5D","created_at":"2026-05-18T12:28:30Z"},{"alias_kind":"pith_short_16","alias_value":"HEBPHV2E2T5DXRFN","created_at":"2026-05-18T12:28:30Z"},{"alias_kind":"pith_short_8","alias_value":"HEBPHV2E","created_at":"2026-05-18T12:28:30Z"}],"graph_snapshots":[{"event_id":"sha256:16bc4a550d70ba605c80bf20d5a25874c772872dd9457853a937a2845e7fd7ea","target":"graph","created_at":"2026-05-18T02:54:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"A fundamental Software-as-a-Service (SaaS) characteristic in Cloud Computing is to be application-specific; depending on the application, Cloud Providers (CPs) restrict data formats and attributes allowed into their servers via a data validation process. An ill-defined data validation process may directly impact both security (e.g. application failure, legal issues) and accounting and charging (e.g. trusting metadata in file headers). Therefore, this paper investigates, evaluates (by means of tests), and discusses data validation processes of popular CPs. A proof of concept system was thus bui","authors_text":"Burkhard Stiller, Fabio Hecht, Guilherme Sperb Machado, Martin Waldburger","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","primary_cat":"cs.NI","submitted_at":"2014-04-09T21:40:07Z","title":"Bypassing Cloud Providers' Data Validation to Store Arbitrary Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1404.2637","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a3e388f73e42287d7a31379f6abb75008780a101a4dd96f4364019b0ea3f30c3","target":"record","created_at":"2026-05-18T02:54:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"41c1525e98a1f5353441945cb5aab4f7440a3ec9b5cae532558d3963862a1aa3","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/3.0/","primary_cat":"cs.NI","submitted_at":"2014-04-09T21:40:07Z","title_canon_sha256":"50196c6bc52ac714569a65c0895a4c908972951a360057b51f5fd03e8b4d4122"},"schema_version":"1.0","source":{"id":"1404.2637","kind":"arxiv","version":1}},"canonical_sha256":"3902f3d744d4fa3bc4adb5ad056de1e371d2c0bcf49695ab85fad59d1ff46595","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3902f3d744d4fa3bc4adb5ad056de1e371d2c0bcf49695ab85fad59d1ff46595","first_computed_at":"2026-05-18T02:54:29.964809Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:54:29.964809Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Joxe/Qtf76jVnE+XJIAjV5CmTmEkzW4gJXic3meRajNA7PU7UT0NWqILDoFrt2FN7jdQSA++GUUewbBIz2/LAw==","signature_status":"signed_v1","signed_at":"2026-05-18T02:54:29.965292Z","signed_message":"canonical_sha256_bytes"},"source_id":"1404.2637","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a3e388f73e42287d7a31379f6abb75008780a101a4dd96f4364019b0ea3f30c3","sha256:16bc4a550d70ba605c80bf20d5a25874c772872dd9457853a937a2845e7fd7ea"],"state_sha256":"2f36d17aee68bd2674c50842c00254c6301c9e2886a1e156cf0f7bb3a3518741"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NeLkObugf1hg6ZfdPbpj04wGWhO1EA6+/Liq1YQgSi4MwLuxPvt6ugd/X5nr4/ImnCw6R+uzZEjL9yRKv1lIBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-02T21:01:19.504444Z","bundle_sha256":"e46fbfc520a0c2d9cc364f5ea72d1340190c91397a1aa7b6760f937f313b30c0"}}