{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:WWLNFECWH2RDISBSQEWYGZBYJH","short_pith_number":"pith:WWLNFECW","canonical_record":{"source":{"id":"1808.05579","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-02T21:37:29Z","cross_cats_sorted":["cs.HC","cs.OS"],"title_canon_sha256":"c80c406da5d94898cabfb5e114fff80ffed332fa3be98c70cad6fa25f6791dc0","abstract_canon_sha256":"2ad2aa3f7ae5a90738dc28f083cd21ae8d6fcdb8e8138471edc2992dc3724145"},"schema_version":"1.0"},"canonical_sha256":"b596d290563ea2344832812d83643849ca8899b124eb0277cd9e720dcfaca6ac","source":{"kind":"arxiv","id":"1808.05579","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.05579","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"arxiv_version","alias_value":"1808.05579v1","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.05579","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"pith_short_12","alias_value":"WWLNFECWH2RD","created_at":"2026-05-18T12:33:01Z"},{"alias_kind":"pith_short_16","alias_value":"WWLNFECWH2RDISBS","created_at":"2026-05-18T12:33:01Z"},{"alias_kind":"pith_short_8","alias_value":"WWLNFECW","created_at":"2026-05-18T12:33:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:WWLNFECWH2RDISBSQEWYGZBYJH","target":"record","payload":{"canonical_record":{"source":{"id":"1808.05579","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-02T21:37:29Z","cross_cats_sorted":["cs.HC","cs.OS"],"title_canon_sha256":"c80c406da5d94898cabfb5e114fff80ffed332fa3be98c70cad6fa25f6791dc0","abstract_canon_sha256":"2ad2aa3f7ae5a90738dc28f083cd21ae8d6fcdb8e8138471edc2992dc3724145"},"schema_version":"1.0"},"canonical_sha256":"b596d290563ea2344832812d83643849ca8899b124eb0277cd9e720dcfaca6ac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:07:56.560838Z","signature_b64":"dquE8pTdZew6dogfGH2ZM+VnpJT1pAy0yQeKgrD71ms2VRYS3h4LBAilnONdB0O8D+THXsbW4vUzwGSO/5mLCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b596d290563ea2344832812d83643849ca8899b124eb0277cd9e720dcfaca6ac","last_reissued_at":"2026-05-18T00:07:56.560233Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:07:56.560233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1808.05579","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:07:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oqswU5ZKmLbrVZQiPUoZI7ymEh1Bt2Yps3oIrTRNmlzz6F0nQq0fZ52E/WGmBglWoPrAEQxT2i+MA16POSRtDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-22T10:35:09.932875Z"},"content_sha256":"856a920734999c5aa7f1a8c1598f9835d01d1dc2f593f63b6b04531a432423e8","schema_version":"1.0","event_id":"sha256:856a920734999c5aa7f1a8c1598f9835d01d1dc2f593f63b6b04531a432423e8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:WWLNFECWH2RDISBSQEWYGZBYJH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Regulating Access to System Sensors in Cooperating Programs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.HC","cs.OS"],"primary_cat":"cs.CR","authors_text":"Giuseppe Petracca, Jens Grossklags, Patrick McDaniel, Trent Jaeger","submitted_at":"2018-08-02T21:37:29Z","abstract_excerpt":"Modern operating systems such as Android, iOS, Windows Phone, and Chrome OS support a cooperating program abstraction. Instead of placing all functionality into a single program, programs cooperate to complete tasks requested by users. However, untrusted programs may exploit interactions with other programs to obtain unauthorized access to system sensors either directly or through privileged services. Researchers have proposed that programs should only be authorized to access system sensors on a user-approved input event, but these methods do not account for possible delegation done by the pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.05579","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:07:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"73y+RhE9YY+xnnzMgYc81+7uFVSqg3TuZ2fDbpX91kRI0N8Z4Ded9ejDfbVRmQA6Pwb/2N9qmRYy9rFQz8kNCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-22T10:35:09.933233Z"},"content_sha256":"e833b3813a267458b4c2ba3873e64cbef0ec5e841f6b602e5c9862a54046334d","schema_version":"1.0","event_id":"sha256:e833b3813a267458b4c2ba3873e64cbef0ec5e841f6b602e5c9862a54046334d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WWLNFECWH2RDISBSQEWYGZBYJH/bundle.json","state_url":"https://pith.science/pith/WWLNFECWH2RDISBSQEWYGZBYJH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WWLNFECWH2RDISBSQEWYGZBYJH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-22T10:35:09Z","links":{"resolver":"https://pith.science/pith/WWLNFECWH2RDISBSQEWYGZBYJH","bundle":"https://pith.science/pith/WWLNFECWH2RDISBSQEWYGZBYJH/bundle.json","state":"https://pith.science/pith/WWLNFECWH2RDISBSQEWYGZBYJH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WWLNFECWH2RDISBSQEWYGZBYJH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:WWLNFECWH2RDISBSQEWYGZBYJH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2ad2aa3f7ae5a90738dc28f083cd21ae8d6fcdb8e8138471edc2992dc3724145","cross_cats_sorted":["cs.HC","cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-02T21:37:29Z","title_canon_sha256":"c80c406da5d94898cabfb5e114fff80ffed332fa3be98c70cad6fa25f6791dc0"},"schema_version":"1.0","source":{"id":"1808.05579","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.05579","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"arxiv_version","alias_value":"1808.05579v1","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.05579","created_at":"2026-05-18T00:07:56Z"},{"alias_kind":"pith_short_12","alias_value":"WWLNFECWH2RD","created_at":"2026-05-18T12:33:01Z"},{"alias_kind":"pith_short_16","alias_value":"WWLNFECWH2RDISBS","created_at":"2026-05-18T12:33:01Z"},{"alias_kind":"pith_short_8","alias_value":"WWLNFECW","created_at":"2026-05-18T12:33:01Z"}],"graph_snapshots":[{"event_id":"sha256:e833b3813a267458b4c2ba3873e64cbef0ec5e841f6b602e5c9862a54046334d","target":"graph","created_at":"2026-05-18T00:07:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Modern operating systems such as Android, iOS, Windows Phone, and Chrome OS support a cooperating program abstraction. Instead of placing all functionality into a single program, programs cooperate to complete tasks requested by users. However, untrusted programs may exploit interactions with other programs to obtain unauthorized access to system sensors either directly or through privileged services. Researchers have proposed that programs should only be authorized to access system sensors on a user-approved input event, but these methods do not account for possible delegation done by the pro","authors_text":"Giuseppe Petracca, Jens Grossklags, Patrick McDaniel, Trent Jaeger","cross_cats":["cs.HC","cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-02T21:37:29Z","title":"Regulating Access to System Sensors in Cooperating Programs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.05579","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:856a920734999c5aa7f1a8c1598f9835d01d1dc2f593f63b6b04531a432423e8","target":"record","created_at":"2026-05-18T00:07:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2ad2aa3f7ae5a90738dc28f083cd21ae8d6fcdb8e8138471edc2992dc3724145","cross_cats_sorted":["cs.HC","cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-02T21:37:29Z","title_canon_sha256":"c80c406da5d94898cabfb5e114fff80ffed332fa3be98c70cad6fa25f6791dc0"},"schema_version":"1.0","source":{"id":"1808.05579","kind":"arxiv","version":1}},"canonical_sha256":"b596d290563ea2344832812d83643849ca8899b124eb0277cd9e720dcfaca6ac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b596d290563ea2344832812d83643849ca8899b124eb0277cd9e720dcfaca6ac","first_computed_at":"2026-05-18T00:07:56.560233Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:07:56.560233Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dquE8pTdZew6dogfGH2ZM+VnpJT1pAy0yQeKgrD71ms2VRYS3h4LBAilnONdB0O8D+THXsbW4vUzwGSO/5mLCw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:07:56.560838Z","signed_message":"canonical_sha256_bytes"},"source_id":"1808.05579","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:856a920734999c5aa7f1a8c1598f9835d01d1dc2f593f63b6b04531a432423e8","sha256:e833b3813a267458b4c2ba3873e64cbef0ec5e841f6b602e5c9862a54046334d"],"state_sha256":"e824d702bb9ab1672e54015c70900f049f5825484e46bad04c85e411d2f0b19b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"max19PjLe8rzItAATCj24rHzS7Pj53+607m1KIC91v4j9H+pQsZZGQsAshAIDjB+nF3NkawNAuYOPEE003eWBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-22T10:35:09.935281Z","bundle_sha256":"ca95249f6f9abb909e3ac3869ccde371e2f262f63aa1a19fee6e279f92059d16"}}