{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:F4H5TSFECWINSMDS7TGX7KPBY3","short_pith_number":"pith:F4H5TSFE","schema_version":"1.0","canonical_sha256":"2f0fd9c8a41590d93072fccd7fa9e1c6d97229fe94b08601a1b6248f6a6bf4a5","source":{"kind":"arxiv","id":"2010.09853","version":1},"attestation_state":"computed","paper":{"title":"(How) Do people change their passwords after a breach?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Apu Kapadia, Lujo Bauer, Sruti Bhagavatula","submitted_at":"2020-10-19T20:44:25Z","abstract_excerpt":"To protect against misuse of passwords compromised in a breach, consumers should promptly change affected passwords and any similar passwords on other accounts. Ideally, affected companies should strongly encourage this behavior and have mechanisms in place to mitigate harm. In order to make recommendations to companies about how to help their users perform these and other security-enhancing actions after breaches, we must first have some understanding of the current effectiveness of companies' post-breach practices. To study the effectiveness of password-related breach notifications and pract"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2010.09853","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-19T20:44:25Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"e81cfbafe02677033fbe5b1fa16c32c22d5ac1157b40999ba51f3b77db022a4b","abstract_canon_sha256":"265e8807260f792e7c146262e9a78561c369d71969d5ef65489f7c729230a2c7"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:44:24.638502Z","signature_b64":"xQstvmZapRIyLAQZG6mTjXRUMlYlZpwXXxW1vwln9PseclCNvCyvM7i+sC7o1l1L1lsprBSlUNDVeDe754BKDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2f0fd9c8a41590d93072fccd7fa9e1c6d97229fe94b08601a1b6248f6a6bf4a5","last_reissued_at":"2026-07-05T01:44:24.638102Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:44:24.638102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"(How) Do people change their passwords after a breach?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Apu Kapadia, Lujo Bauer, Sruti Bhagavatula","submitted_at":"2020-10-19T20:44:25Z","abstract_excerpt":"To protect against misuse of passwords compromised in a breach, consumers should promptly change affected passwords and any similar passwords on other accounts. Ideally, affected companies should strongly encourage this behavior and have mechanisms in place to mitigate harm. In order to make recommendations to companies about how to help their users perform these and other security-enhancing actions after breaches, we must first have some understanding of the current effectiveness of companies' post-breach practices. To study the effectiveness of password-related breach notifications and pract"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.09853","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.09853/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2010.09853","created_at":"2026-07-05T01:44:24.638160+00:00"},{"alias_kind":"arxiv_version","alias_value":"2010.09853v1","created_at":"2026-07-05T01:44:24.638160+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.09853","created_at":"2026-07-05T01:44:24.638160+00:00"},{"alias_kind":"pith_short_12","alias_value":"F4H5TSFECWIN","created_at":"2026-07-05T01:44:24.638160+00:00"},{"alias_kind":"pith_short_16","alias_value":"F4H5TSFECWINSMDS","created_at":"2026-07-05T01:44:24.638160+00:00"},{"alias_kind":"pith_short_8","alias_value":"F4H5TSFE","created_at":"2026-07-05T01:44:24.638160+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3","json":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3.json","graph_json":"https://pith.science/api/pith-number/F4H5TSFECWINSMDS7TGX7KPBY3/graph.json","events_json":"https://pith.science/api/pith-number/F4H5TSFECWINSMDS7TGX7KPBY3/events.json","paper":"https://pith.science/paper/F4H5TSFE"},"agent_actions":{"view_html":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3","download_json":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3.json","view_paper":"https://pith.science/paper/F4H5TSFE","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2010.09853&json=true","fetch_graph":"https://pith.science/api/pith-number/F4H5TSFECWINSMDS7TGX7KPBY3/graph.json","fetch_events":"https://pith.science/api/pith-number/F4H5TSFECWINSMDS7TGX7KPBY3/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3/action/timestamp_anchor","attest_storage":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3/action/storage_attestation","attest_author":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3/action/author_attestation","sign_citation":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3/action/citation_signature","submit_replication":"https://pith.science/pith/F4H5TSFECWINSMDS7TGX7KPBY3/action/replication_record"}},"created_at":"2026-07-05T01:44:24.638160+00:00","updated_at":"2026-07-05T01:44:24.638160+00:00"}