{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:KGLCJ6S4CKHWF5GBB3K7BY66ZO","short_pith_number":"pith:KGLCJ6S4","canonical_record":{"source":{"id":"1901.03397","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-10T21:11:07Z","cross_cats_sorted":[],"title_canon_sha256":"b5a7ede7f12fafc434998fae8e034b9baa13b3ee317b4366ccc1b85dce2fd13a","abstract_canon_sha256":"4a2ba7163e162c48eb902bc34d243a163a3e7a04a8e155fb5aa012c728ce11d6"},"schema_version":"1.0"},"canonical_sha256":"519624fa5c128f62f4c10ed5f0e3decb9a13abb11972e2e80649421dd00455be","source":{"kind":"arxiv","id":"1901.03397","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.03397","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"arxiv_version","alias_value":"1901.03397v1","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.03397","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"pith_short_12","alias_value":"KGLCJ6S4CKHW","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"KGLCJ6S4CKHWF5GB","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"KGLCJ6S4","created_at":"2026-05-18T12:33:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:KGLCJ6S4CKHWF5GBB3K7BY66ZO","target":"record","payload":{"canonical_record":{"source":{"id":"1901.03397","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-10T21:11:07Z","cross_cats_sorted":[],"title_canon_sha256":"b5a7ede7f12fafc434998fae8e034b9baa13b3ee317b4366ccc1b85dce2fd13a","abstract_canon_sha256":"4a2ba7163e162c48eb902bc34d243a163a3e7a04a8e155fb5aa012c728ce11d6"},"schema_version":"1.0"},"canonical_sha256":"519624fa5c128f62f4c10ed5f0e3decb9a13abb11972e2e80649421dd00455be","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:56:31.344730Z","signature_b64":"DGZjCVR3su7RJT4+mn1by8OBfru0TBLwvG0sFtqxPiaYEH+aiEH74xH6zKFSCp8MoepcULLYtX2hgUVcAnrsDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"519624fa5c128f62f4c10ed5f0e3decb9a13abb11972e2e80649421dd00455be","last_reissued_at":"2026-05-17T23:56:31.344244Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:56:31.344244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1901.03397","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:56:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pjk7IJGIXZPyXKvOg1yvgFbAHRpXUSBuaiXADhyGQVojxd/bxXZ85U5ihVrACOLpiUX0iDJebo9jsrJEq1IOAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T04:43:37.251019Z"},"content_sha256":"5e500c6df2418b3c0e01f564bed306138bea442d98753765f84562938afdb585","schema_version":"1.0","event_id":"sha256:5e500c6df2418b3c0e01f564bed306138bea442d98753765f84562938afdb585"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:KGLCJ6S4CKHWF5GBB3K7BY66ZO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EmPoWeb: Empowering Web Applications with Browser Extensions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Doli\\`ere Francis Som\\'e","submitted_at":"2019-01-10T21:11:07Z","abstract_excerpt":"Browser extensions are third party programs, tightly integrated to browsers, where they execute with elevated privileges in order to provide users with additional functionalities. Unlike web applications, extensions are not subject to the Same Origin Policy (SOP) and therefore can read and write user data on any web application. They also have access to sensitive user information including browsing history, bookmarks, cookies and list of installed extensions. Extensions have a permanent storage in which they can store data and can trigger the download of arbitrary files on the user's device. F"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.03397","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:56:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZbH/935zquQ4W6aKASymNh5gjw4iVNolLFIxfBEuP6FqCL2qtbU25TQgBJopSF5KMj0AN0J8t9qcn4RR4jFfDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-29T04:43:37.251374Z"},"content_sha256":"d7d9c3389d24d18d358e6d9cb63ae2fd026e6f82004217f7f7736d3c59cf68fa","schema_version":"1.0","event_id":"sha256:d7d9c3389d24d18d358e6d9cb63ae2fd026e6f82004217f7f7736d3c59cf68fa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/bundle.json","state_url":"https://pith.science/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-29T04:43:37Z","links":{"resolver":"https://pith.science/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO","bundle":"https://pith.science/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/bundle.json","state":"https://pith.science/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KGLCJ6S4CKHWF5GBB3K7BY66ZO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:KGLCJ6S4CKHWF5GBB3K7BY66ZO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4a2ba7163e162c48eb902bc34d243a163a3e7a04a8e155fb5aa012c728ce11d6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-10T21:11:07Z","title_canon_sha256":"b5a7ede7f12fafc434998fae8e034b9baa13b3ee317b4366ccc1b85dce2fd13a"},"schema_version":"1.0","source":{"id":"1901.03397","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.03397","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"arxiv_version","alias_value":"1901.03397v1","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.03397","created_at":"2026-05-17T23:56:31Z"},{"alias_kind":"pith_short_12","alias_value":"KGLCJ6S4CKHW","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"KGLCJ6S4CKHWF5GB","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"KGLCJ6S4","created_at":"2026-05-18T12:33:21Z"}],"graph_snapshots":[{"event_id":"sha256:d7d9c3389d24d18d358e6d9cb63ae2fd026e6f82004217f7f7736d3c59cf68fa","target":"graph","created_at":"2026-05-17T23:56:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Browser extensions are third party programs, tightly integrated to browsers, where they execute with elevated privileges in order to provide users with additional functionalities. Unlike web applications, extensions are not subject to the Same Origin Policy (SOP) and therefore can read and write user data on any web application. They also have access to sensitive user information including browsing history, bookmarks, cookies and list of installed extensions. Extensions have a permanent storage in which they can store data and can trigger the download of arbitrary files on the user's device. F","authors_text":"Doli\\`ere Francis Som\\'e","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-10T21:11:07Z","title":"EmPoWeb: Empowering Web Applications with Browser Extensions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.03397","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5e500c6df2418b3c0e01f564bed306138bea442d98753765f84562938afdb585","target":"record","created_at":"2026-05-17T23:56:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4a2ba7163e162c48eb902bc34d243a163a3e7a04a8e155fb5aa012c728ce11d6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-10T21:11:07Z","title_canon_sha256":"b5a7ede7f12fafc434998fae8e034b9baa13b3ee317b4366ccc1b85dce2fd13a"},"schema_version":"1.0","source":{"id":"1901.03397","kind":"arxiv","version":1}},"canonical_sha256":"519624fa5c128f62f4c10ed5f0e3decb9a13abb11972e2e80649421dd00455be","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"519624fa5c128f62f4c10ed5f0e3decb9a13abb11972e2e80649421dd00455be","first_computed_at":"2026-05-17T23:56:31.344244Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:56:31.344244Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DGZjCVR3su7RJT4+mn1by8OBfru0TBLwvG0sFtqxPiaYEH+aiEH74xH6zKFSCp8MoepcULLYtX2hgUVcAnrsDA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:56:31.344730Z","signed_message":"canonical_sha256_bytes"},"source_id":"1901.03397","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5e500c6df2418b3c0e01f564bed306138bea442d98753765f84562938afdb585","sha256:d7d9c3389d24d18d358e6d9cb63ae2fd026e6f82004217f7f7736d3c59cf68fa"],"state_sha256":"35e04400799952add2f6d888177c9c7303196a165cffa95f49d345b9c4caa65d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o3yIDBIFQHgLE0NJWZzYhsoVIqZrNlpn2uicJ2UlfBXVUoiiKdVJi2Q17Yjx/BWKC8sCQ6yO8TcGd8Lghn1VAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-29T04:43:37.253241Z","bundle_sha256":"18fcf80a94dbbe18020eb01e44b25faa5a8d24482eff48337368fcbb360d634e"}}