{"as_of":"2026-08-18T01:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0ead6022c154c38b61e77c7a02a6057f9c87f207ea20b0625dcef79344fbd9f2","coverage":[{"denominator":64,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":64,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T04:26:55.190633Z","state":"measured"},{"denominator":65,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":65,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T04:35:51.583460Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"cited_work":{"arxiv_id":"2412.01440","doi":"10.48550/arxiv.2412.01440","metadata_source":"arxiv_reference","pith_arxiv_id":"2412.01440","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"BadPatch:Diffusion-basedgenerationofphysicaladversarialpatches","venue":"arXiv (Cornell University)","work_id":"0fed37ec-a337-46d9-bddf-9dfbc1a0b07a","year":null},"citing_paper":{"arxiv_id":"2606.26566","last_updated":"2026-06-25T03:32:12Z","snapshot_observed_at":"2026-08-12T21:54:41.598451Z","submitted_at":"2026-06-25T03:32:12Z","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-06-26T04:35:51.583460Z"},"links":{"cited_paper":"/paper/2412.01440","citing_paper":"/paper/2606.26566"},"observation_digest":"sha256:55da4fc8355a73157685e92d98e1bcb7b311cfaf5590a8d8490ea6a52ae3da28","observation_id":"c123a101-e3eb-48f2-beb5-d86e16ba3d08","resolution":{"observed_at":"2026-06-26T04:38:59.130159Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.01440/citation-record","integrity":"/paper/2412.01440/integrity","json":"/paper/2412.01440/citation-record.json","paper":"/paper/2412.01440"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-17T09:58:46.058102Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-12T04:26:54.901459Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.901459Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:7e781610d4c8f57e663c4ebca1b153bb4df7e2adce2e45d6baf6035be99c6a20","observation_id":"03844ddd-c38d-4872-882e-259b371ea618","resolution":{"observed_at":"2026-08-12T04:26:54.901459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.250105Z","title":"2d human pose estimation: New benchmark and state of the art analysis","venue":null,"work_id":"8fcfceba-11ab-450b-a0a2-42873a5cb5a7","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.906732Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:04d46758327a1ac5a2e467375edc26cc23cea1ff91f66953db4ef372a443f90c","observation_id":"64134a61-afff-4672-a611-6904b15b3554","resolution":{"observed_at":"2026-08-12T04:26:56.254689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.235449Z","title":"Synthesizing robust adversarial examples","venue":null,"work_id":"d3dc7314-6398-488f-9107-6957ece56056","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.911251Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:53dedb96527a9a42a5f378e8465da4f52feed10826d941d132cafbb42bf000b1","observation_id":"8927b149-7a1e-49e9-8821-c83424d1afea","resolution":{"observed_at":"2026-08-12T04:26:56.240616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.915984Z","title":"Blended diffusion for text-driven editing of natural images","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.915984Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:fd2af70af9104b63ec93f78444f5a183e32c9e83ec48c458967dcacfcd6ddc23","observation_id":"7d1f9013-00d5-4feb-a910-fb55f249febd","resolution":{"observed_at":"2026-08-12T04:26:54.915984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.10934","last_updated":"2020-04-23T02:10:02Z","snapshot_observed_at":"2026-08-16T04:20:57.069798Z","submitted_at":"2020-04-23T02:10:02Z","title":"YOLOv4: Optimal Speed and Accuracy of Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.10934","snapshot_observed_at":"2026-08-12T04:26:54.920519Z","title":"Yolov4: Optimal speed and accuracy of object detection","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.920519Z"},"links":{"cited_paper":"/paper/2004.10934","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:1e1f0007a286854201514a4a967885aaaeffcffea9c926d3d6e8f881d1ada3a6","observation_id":"06acdf48-beb0-4a86-9ef4-e8cd77fcbfa4","resolution":{"observed_at":"2026-08-12T04:26:54.920519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T04:26:54.925430Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.925430Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e77535134b7ef715b28b737e51e6c60e7ed72723cb7789566d303d69d7634985","observation_id":"b4b4b6a1-16db-4753-b34c-09ea133c326f","resolution":{"observed_at":"2026-08-12T04:26:54.925430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.210714Z","title":"End- to-end object detection with transformers","venue":null,"work_id":"98ce7274-86f6-430a-adf2-fb5c5ea98686","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.930236Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:23d4dfb92cf29d88a5521ec00da528bd7f43e55d40a6e34dcab5ba9c75a4f93b","observation_id":"42bebf5a-5c0e-4a79-bce8-169931536f61","resolution":{"observed_at":"2026-08-12T04:26:56.215600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.934698Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.934698Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:aa466d205b40faa8415dc0c25260079c16224153d56528d246cef9d28737a601","observation_id":"75d8df91-c694-4d5d-88a2-9b84b62e8c7e","resolution":{"observed_at":"2026-08-12T04:26:54.934698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.186939Z","title":"Deepdriving: Learning affordance for direct percep- tion in autonomous driving","venue":null,"work_id":"57a9944e-cf0d-474f-9427-4c7e5689b040","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.939482Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0715ec5437a6aae1d35a5df5ebb85077ad0641c22bb4c6ff15d5a3be3555c0da","observation_id":"19d93927-db4f-452f-80c8-b708bffe54db","resolution":{"observed_at":"2026-08-12T04:26:56.191540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.16401","last_updated":"2023-12-27T04:09:44Z","snapshot_observed_at":"2026-08-16T14:31:28.724130Z","submitted_at":"2023-12-27T04:09:44Z","title":"Natural Adversarial Patch Generation Method Based on Latent Diffusion Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.16401","snapshot_observed_at":"2026-08-12T04:26:54.943744Z","title":"Natural adversarial patch generation method based on latent diffu- sion model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.943744Z"},"links":{"cited_paper":"/paper/2312.16401","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:59ba4605afd97b436f67e6b68bc413c70c6203eb4468815423c2f79e4c22134e","observation_id":"3d6d99fb-a6fa-40f2-a458-d7f43e2060a3","resolution":{"observed_at":"2026-08-12T04:26:54.943744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.171456Z","title":"Content-based unrestricted ad- versarial attack","venue":null,"work_id":"baab6e60-f370-4c74-91da-91f7061d547e","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.948609Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c9f0f7eda4bde36d86e1d52453d1ce15ea5d0a6079e83b12dfb854b613384f9d","observation_id":"567632d0-14e7-4e3f-86b8-250e5e1beac4","resolution":{"observed_at":"2026-08-12T04:26:56.176485Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.156720Z","title":"Histograms of oriented gra- dients for human detection","venue":null,"work_id":"c8c98fab-25e5-4815-9ad0-f69cdf5fe7c1","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.953229Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e0d01f3153539adba76716f3a59db8c04e63a270cfde5ac8dee0c79d09d0e185","observation_id":"b1d09a65-8735-46c4-a302-2dafbdeba471","resolution":{"observed_at":"2026-08-12T04:26:56.161610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.957914Z","title":"Diffusion mod- els beat gans on image synthesis","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.957914Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:03e6ad0363f24cd992d5f0151ae78b3957084d0ef4cd9bec4bc838c09a7c7c7f","observation_id":"939f4e08-b4e2-4736-ad45-368aaefdd56d","resolution":{"observed_at":"2026-08-12T04:26:54.957914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.131343Z","title":"Tnt attacks! universal naturalis- tic adversarial patches against deep neural network systems","venue":null,"work_id":"a100b96b-0bdb-4648-8754-6344581d323b","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.962471Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:bdf0833679c6f6aaa0ebc04b37a5bf6bd8a89fe45cfabe44b4701c736641c3b5","observation_id":"9f875f74-1367-4d97-8b9a-4743ee840461","resolution":{"observed_at":"2026-08-12T04:26:56.136864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-14T20:44:49.961329Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-12T04:26:54.966717Z","title":"Robust physical-world attacks on machine learning models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.966717Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ccfc52603d45a8f0647a67affdea1e67325c07cbe85f4b4a1aa96bb77866d8cd","observation_id":"6aa83886-430e-4315-a4f4-352da66ab4c7","resolution":{"observed_at":"2026-08-12T04:26:54.966717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.115948Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"bfce3a6b-cc73-4d3b-9def-acea5846fe06","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.972367Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:cb7424e53f4e2f8021cc1e9647ae4b434ec595f8a04a2bd1d07474bb41fd79cb","observation_id":"d04f10d5-40bd-4001-92e6-3fd68461e4c7","resolution":{"observed_at":"2026-08-12T04:26:56.120774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.976660Z","title":"Generative adversarial nets","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.976660Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:424e5dad58f6ae2f7e8b7b5d43565c0d090152a0c4ba014edea790cb7e8c78aa","observation_id":"316f14e8-97b7-45cb-afcb-a4363da1d7dd","resolution":{"observed_at":"2026-08-12T04:26:54.976660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T04:26:54.981001Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.981001Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:5918e9902e6066d8dcf52d10085614ba368b6ae62a3e09b988baf1601194757c","observation_id":"27c5bf9b-e235-4cfe-b12f-cb425a8cc8b4","resolution":{"observed_at":"2026-08-12T04:26:54.981001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.090634Z","title":"Advart: Adversarial art for camouflaged object detection attacks","venue":null,"work_id":"40b533b1-16f0-46e2-bd4b-57ec1d8995a0","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.986525Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:d46723cfa3777408bbac1c3783a6704c45d682c65603b2816dc1e19ab871f8fb","observation_id":"d6ff5bac-14ed-40b2-a0c8-03827155f627","resolution":{"observed_at":"2026-08-12T04:26:56.095419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.076131Z","title":"Dap: A dynamic adversarial patch for evading person detectors","venue":null,"work_id":"c0843b16-7f4a-4bd2-85bf-7c4c8318a14d","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.991052Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b9577b59d888fb55790166d1ad7b48b33364584ef572ab98f90e0e37949d39bb","observation_id":"2df801be-d906-410e-bbf7-42cd6e8b5e5e","resolution":{"observed_at":"2026-08-12T04:26:56.080880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.01626","last_updated":"2022-08-02T17:55:41Z","snapshot_observed_at":"2026-08-17T00:44:11.103098Z","submitted_at":"2022-08-02T17:55:41Z","title":"Prompt-to-Prompt Image Editing with Cross Attention Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.01626","snapshot_observed_at":"2026-08-12T04:26:54.995173Z","title":"Prompt-to-prompt im- age editing with cross attention control","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.995173Z"},"links":{"cited_paper":"/paper/2208.01626","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:71721970d20ceb25664307441651beac9379b5776ce272ed5f0f6e2840547600","observation_id":"469dcb4b-2226-4110-afb7-4bd0ac0c0794","resolution":{"observed_at":"2026-08-12T04:26:54.995173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.12598","last_updated":"2022-07-26T01:42:07Z","snapshot_observed_at":"2026-08-14T06:37:15.299690Z","submitted_at":"2022-07-26T01:42:07Z","title":"Classifier-Free Diffusion Guidance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.12598","snapshot_observed_at":"2026-08-12T04:26:54.999524Z","title":"Classifier-free diffusion guidance","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.999524Z"},"links":{"cited_paper":"/paper/2207.12598","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:11120b8930cf77151ff971f90671a43a547de98875c64a6343f43037972d8c44","observation_id":"e779a124-6c2e-42fb-902a-32dd9ab659bb","resolution":{"observed_at":"2026-08-12T04:26:54.999524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.004103Z","title":"Denoising dif- fusion probabilistic models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.004103Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:2477a8a49a571605bff6d9d486bf5cada46fe6a12c049bd15a650cb9c755f630","observation_id":"73c3d641-0f46-47d6-8f8b-a047a2ef566e","resolution":{"observed_at":"2026-08-12T04:26:55.004103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.050068Z","title":"Nat- uralistic physical adversarial patch for object detectors","venue":null,"work_id":"08ab3a95-861b-4f38-a38d-2cf62201474d","year":2021},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.008395Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a1e64d3f3307c8dab7651474ae55ae42af19ffb3af386c8a2fe7f86023ea6cdd","observation_id":"8a0a7bbe-02f6-481e-8aea-b04d2743ac12","resolution":{"observed_at":"2026-08-12T04:26:56.055057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.034296Z","title":"T-sea: Transfer-based self-ensemble attack on object detection","venue":null,"work_id":"d13dc892-93fc-4d0e-81d3-298d037906d1","year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.012684Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:42c14b2788d79d2bbdec9d071b6c9243df31478591a18b21bf8c35a65dff1e12","observation_id":"1740060e-3fc7-4f11-8f8a-d939bd7388fe","resolution":{"observed_at":"2026-08-12T04:26:56.040010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.018386Z","title":"Universal physical camouflage attacks on object detectors","venue":null,"work_id":"78cab7b5-6fd9-4c43-b14b-e173da36b7cf","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.016808Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:2ef83dd5be702c77f04ac4d12a80b1846d2cf20d31a8425e4313cf54cf8b7ac6","observation_id":"e6ecfabc-0f4b-4b24-b13f-a3c5f846721a","resolution":{"observed_at":"2026-08-12T04:26:56.023431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.003438Z","title":"Connecting the digital and phys- ical world: Improving the robustness of adversarial attacks","venue":null,"work_id":"5d1c5faf-1ac9-4ca0-963b-2dcd652b4da0","year":2019},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.021140Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:5a9af59f779e5fdffab24d4a58e068a3dd4aa233ad495a3ffabf1699a5249adc","observation_id":"c115e840-1996-44c7-a0bc-5deadcf293c2","resolution":{"observed_at":"2026-08-12T04:26:56.008326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.988304Z","title":"ultralytics/yolov5, 2020","venue":null,"work_id":"cbf55646-6eae-484d-8666-eb4f3bceaf85","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.025606Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:9500db1d1ffebd3f2ba0ee20c8363ada84015e7d87c444b3762b3162d30f8032","observation_id":"1793ff06-362f-4fce-8148-3e0f99fcfacf","resolution":{"observed_at":"2026-08-12T04:26:55.992875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-08-17T19:26:44.032537Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-12T04:26:55.029953Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.029953Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b7334f0f9333c833c37c94496966d74c1db12b63f5bff2a9e753ce9b45da4647","observation_id":"79de2481-a009-44a4-8039-8dc17555f9f4","resolution":{"observed_at":"2026-08-12T04:26:55.029953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.972544Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"a71f54ba-c73d-46d2-8c9d-bdfa1edb9621","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.034371Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a22b12e6707a303c6f7716816f49bdfcd2a7d7e6a0fad79c8835a009867dc8c0","observation_id":"8f235450-8050-4c78-af5f-ab47dbe6584f","resolution":{"observed_at":"2026-08-12T04:26:55.977436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.038945Z","title":"Patch of invisibility: Natural- istic black-box adversarial attacks on object de-tectors.arXiv preprint arXiv:2303.04238, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.038945Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:aa731d5a02c556c6bfda263bb29d12be86c9c83cfa2044314dd6c1835a550954","observation_id":"0099e7ec-3a68-410f-8137-deff73c2bf2a","resolution":{"observed_at":"2026-08-12T04:26:55.038945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07253","last_updated":"2024-12-10T07:24:24Z","snapshot_observed_at":"2026-08-17T14:10:30.686063Z","submitted_at":"2024-12-10T07:24:24Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.07253","snapshot_observed_at":"2026-08-12T04:26:55.043260Z","title":"Capgen: An environment-adaptive generator of adversarial patches","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.043260Z"},"links":{"cited_paper":"/paper/2412.07253","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0fd02643b1e412978216890454fbc9ab4643986cd3946bba31cc905b2d40f728","observation_id":"e93b978c-a26d-4c5e-abcc-f554b5521b48","resolution":{"observed_at":"2026-08-12T04:26:55.043260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.956111Z","title":"Blip: Bootstrapping language-image pre-training for unified vision-language understanding and generation","venue":null,"work_id":"0728c05d-f0f3-4422-b647-aa68f767527d","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.048078Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:274389acdb69a55687250151ebf5aba01132379ac14b2e586941fcdb1f463afc","observation_id":"756c1b01-41c6-4317-9790-3a6f040b7f77","resolution":{"observed_at":"2026-08-12T04:26:55.961270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08076","last_updated":"2023-07-16T15:22:30Z","snapshot_observed_at":"2026-08-16T15:15:53.610470Z","submitted_at":"2023-07-16T15:22:30Z","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08076","snapshot_observed_at":"2026-08-12T04:26:55.052237Z","title":"Diffusion to confusion: Naturalistic ad- versarial patch generation based on diffusion model for ob- ject detector","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.052237Z"},"links":{"cited_paper":"/paper/2307.08076","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:04fcc3b12ff495ab7493e085d82ce7a511798f742c9b3efb95e4c4a5a9c17dbc","observation_id":"c7667703-a1fb-4bba-a5d4-0a1dc74a4c85","resolution":{"observed_at":"2026-08-12T04:26:55.052237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.056639Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.056639Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ae302db1910a0db6cac8ad9cc6d64be8790a9789031b2e1e7c35190ace7931e2","observation_id":"1af587ea-d783-492a-b0b4-527c9b5acc44","resolution":{"observed_at":"2026-08-12T04:26:55.056639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.931311Z","title":"Beware of road markings: A new adversarial patch attack to monocular depth estimation","venue":null,"work_id":"7f1c0bf1-27b5-4660-9775-5d868a1bdc8f","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.061437Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:48ac68e1f1ee1e482b2f3fd3c57e07dd51d9a40fddae292083fb5c137fd3a22c","observation_id":"9d4b828b-62d3-4e82-82ba-3a1091e6e605","resolution":{"observed_at":"2026-08-12T04:26:55.936034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.915951Z","title":"Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection","venue":null,"work_id":"2e849ca7-f0a1-4d5e-a09b-effdc5f59485","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.065924Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:d0d057c3f415e7b0fd7f42902a0c21cb3567d614fb0d8b064cac42d2502d19f0","observation_id":"c642ac43-1051-4cc9-9cd9-82fd1b319fa5","resolution":{"observed_at":"2026-08-12T04:26:55.920774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-08-15T21:07:34.234107Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-12T04:26:55.070309Z","title":"Safety at scale: A comprehensive sur- vey of large model safety","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.070309Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c817bcfbc88c6424533215fa2c12ae9baedf3a1c55553481dc89ed386673a2d3","observation_id":"ff16fc77-fa44-46d1-b35a-d84863296d0e","resolution":{"observed_at":"2026-08-12T04:26:55.070309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.074863Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.074863Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ce486115d49100c3dd677269b744c5f12a1e4d3dd9ee6dffef99685845fae136","observation_id":"855c5479-908e-4e23-942b-0c8f46b26ae1","resolution":{"observed_at":"2026-08-12T04:26:55.074863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.891641Z","title":"Deep learning for healthcare: review, opportunities and challenges","venue":null,"work_id":"a44667d9-1827-4375-b79a-ef0dd0d1a819","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.079169Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:4dc2b9d064d0eaba9ab3dd0998c66bb6f9b8d94c6b7f16d6a5209c6caf9efea1","observation_id":"42e9658c-2ca6-4f4d-a085-d756979a84b2","resolution":{"observed_at":"2026-08-12T04:26:55.896496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.083527Z","title":"Null-text inversion for editing real images using guided diffusion models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.083527Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:d481bcf5b1b796b4ce1060ac79990207f60c6b9470be2dc888eb1e66a1ebe510","observation_id":"07d106f3-439b-4444-bf1e-6cb06de62109","resolution":{"observed_at":"2026-08-12T04:26:55.083527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.087835Z","title":"Learn- ing transferable visual models from natural language super- vision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.087835Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:67f3f545084e171d1b32230dc85886a88b406a944408096f0c2ce3288134007e","observation_id":"a0cc8827-6f5e-40a8-9b1e-d736124a1cc1","resolution":{"observed_at":"2026-08-12T04:26:55.087835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-08-15T12:50:58.405488Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-08-12T04:26:55.091981Z","title":"Hierarchical text-conditional image gener- ation with clip latents","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.091981Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c98f5c40127cbc4a49b056d197c6361b2f9a58c48c88365c5db58f2e1bd8c337","observation_id":"45f33e89-fad1-45d0-98b9-5a10a839b130","resolution":{"observed_at":"2026-08-12T04:26:55.091981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-15T16:54:48.034047Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-12T04:26:55.097007Z","title":"Yolov3: An incremental improvement","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.097007Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:296fe911daa22d824c119ad99fb3a056df154f6f686fdbfc642aa2968dc95a9f","observation_id":"ead4b7a5-6833-4d6c-9861-6b439efc1d17","resolution":{"observed_at":"2026-08-12T04:26:55.097007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.858088Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks","venue":null,"work_id":"5ba52cf5-921a-4ad7-b100-f165c145a74d","year":2015},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.101699Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0a79432f72d82754ac16f5d8226abb00668ba04b7fd57c90f8e3c5957b181681","observation_id":"786c1de7-388b-4194-aa8a-91c20df78249","resolution":{"observed_at":"2026-08-12T04:26:55.862596Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.844348Z","title":"High-resolution image syn- thesis with latent diffusion models","venue":null,"work_id":"56da3fee-8d5a-4fce-aa4b-19fcd466c227","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.106093Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c5095d6beefc764878767b885565109f2131f1d2d9054e8d22193ec34d2a7181","observation_id":"335ee805-57eb-4d64-92aa-2fcd3a49d6a3","resolution":{"observed_at":"2026-08-12T04:26:55.848725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.110530Z","title":"Photorealistic text-to-image diffusion models with deep language understanding","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.110530Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:11145188ab41fe6d20f105492b6174f3039c512492420e6aaf4095aea17ee283","observation_id":"10669cde-d07c-4db6-9b9d-b562b4744967","resolution":{"observed_at":"2026-08-12T04:26:55.110530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.821310Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"ec628b53-728f-41a1-bcb4-b4610abcc9e7","year":2016},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.114802Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:083b4fab8abf0f5eb32b67bab982446a626821e756f0e8a2b2d122f98c83150d","observation_id":"3d84208d-d184-482e-a058-6b2a9bbc3cde","resolution":{"observed_at":"2026-08-12T04:26:55.825712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14555","last_updated":"2024-06-20T17:58:52Z","snapshot_observed_at":"2026-08-16T13:40:59.928554Z","submitted_at":"2024-06-20T17:58:52Z","title":"A Survey of Multimodal-Guided Image Editing with Text-to-Image Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14555","snapshot_observed_at":"2026-08-12T04:26:55.119335Z","title":"A survey of multimodal-guided image editing with text-to-image diffu- sion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.119335Z"},"links":{"cited_paper":"/paper/2406.14555","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:49d9c1b9d09abd12c9ae34120dfeba4ef98f5fb77b97365c12a61e53027325fb","observation_id":"0eb85e0c-4e60-4fec-9d77-24ec06be32b3","resolution":{"observed_at":"2026-08-12T04:26:55.119335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-12T04:26:55.123995Z","title":"Denoising diffusion implicit models","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.123995Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a68ec7fc6ebe38ca3923a3887cacf19bd28fb2b3ce7c4eac7e77573b8731fd17","observation_id":"c27dd4c3-0a3d-4432-aa96-9c7e947b0208","resolution":{"observed_at":"2026-08-12T04:26:55.123995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.807867Z","title":"Fool- ing automated surveillance cameras: adversarial patches to attack person detection","venue":null,"work_id":"da73182b-171b-4249-8b69-fb77663294dc","year":2019},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.128627Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b2baa65a08eab59aea4fb62ae4c74a86f005cde7272e69d1e03af50226465507","observation_id":"6884f959-7884-4d82-8c9c-545755a4f8ce","resolution":{"observed_at":"2026-08-12T04:26:55.812319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12524","last_updated":"2025-02-18T04:20:14Z","snapshot_observed_at":"2026-08-16T15:45:10.515889Z","submitted_at":"2025-02-18T04:20:14Z","title":"YOLOv12: Attention-Centric Real-Time Object Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12524","snapshot_observed_at":"2026-08-12T04:26:55.133641Z","title":"Yolov12: Attention-centric real-time object detectors","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.133641Z"},"links":{"cited_paper":"/paper/2502.12524","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ac61b7613c40e3bca890c892e056cfd3e0b017c1f6836066a69e7d16b532201d","observation_id":"18fa73af-2c00-4cbd-a182-591437e84b4e","resolution":{"observed_at":"2026-08-12T04:26:55.133641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.793885Z","title":"Yolov10: Real-time end-to-end object de- tection","venue":null,"work_id":"ebb8facc-3504-47bb-b90a-686970746569","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.138360Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:6939c6a0a685e87934f43a3c042d313e0d6909b974e6426ea55fff6a4666918c","observation_id":"725709be-9f12-4c4a-b19c-fc24db3d3f50","resolution":{"observed_at":"2026-08-12T04:26:55.798567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.780250Z","title":"Yolov7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectors","venue":null,"work_id":"91cdd718-5ca9-4fba-adc7-9ee4dc7646aa","year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.142923Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:439cf1d30e10b5b5d7b123d7de00ac3695c342bf34c758deaa1091039bc4f95c","observation_id":"75fea814-3cea-4a16-b08f-0204fbd8b4ea","resolution":{"observed_at":"2026-08-12T04:26:55.784652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-17T21:55:02.668814Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-12T04:26:55.147561Z","title":"A comprehensive survey in llm (-agent) full stack safety: Data, training and deployment","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.147561Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c2ba7960945052de54019fe9fdd3b5350fc191a220e61d1e428283b25b333ff6","observation_id":"f0b58d28-5e3f-40dc-90c4-c2e05ab0f6a8","resolution":{"observed_at":"2026-08-12T04:26:55.147561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.765512Z","title":"Revisiting adversarial patches for designing camera-agnostic attacks against person detection","venue":null,"work_id":"e2aa1d9c-18ea-429c-8654-fa11fec8d02b","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.152786Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e25b069736bdd3a25311c87fb9fd2dbad2e95f7432cc39968d22934eda15c687","observation_id":"f1a34902-b9b7-4936-b916-fa6d81fd487a","resolution":{"observed_at":"2026-08-12T04:26:55.771249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12641","last_updated":"2019-05-13T07:22:16Z","snapshot_observed_at":"2026-08-14T17:50:49.224322Z","submitted_at":"2018-11-30T06:55:22Z","title":"Transferable Adversarial Attacks for Image and Video Object Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.12641","snapshot_observed_at":"2026-08-12T04:26:55.157557Z","title":"Transferable adversarial attacks for image and video object detection","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.157557Z"},"links":{"cited_paper":"/paper/1811.12641","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:6cd1fea8570ff2121b514aa815bf390317493a5abc13ceeeb334e5a9646f3283","observation_id":"63feb7ef-7ba7-4ff7-92cc-f066c0a58b5b","resolution":{"observed_at":"2026-08-12T04:26:55.157557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.751630Z","title":"Making an invisibility cloak: Real world adversarial attacks on object detectors","venue":null,"work_id":"3306102e-004f-4995-a47b-c58b8938cea3","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.162292Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:cc4e1b0c18a99deeacec081bd90241e2ad92a69f5af8e6a16144fe1ca8381ec7","observation_id":"6efcb6c8-5de5-47c2-bced-51083c2546ac","resolution":{"observed_at":"2026-08-12T04:26:55.756093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.736840Z","title":"Adversarial examples for se- mantic segmentation and object detection","venue":null,"work_id":"e57a36c2-dbd3-4608-88c9-b3f360c7ebcd","year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.166704Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:cb7c0742d046bbfaec7799464810897da55706bf01c5dc44e8bde03a8c30316b","observation_id":"f7d797b4-abb4-4eda-8ddd-d4c7877138d1","resolution":{"observed_at":"2026-08-12T04:26:55.741595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.721913Z","title":"Adversarial t-shirt! evading person detectors in a phys- ical world","venue":null,"work_id":"276c3013-3f2a-4eff-bfad-82cf7822f58b","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.171222Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:eaab92674318a98f10f59566835ae5aa1c2ef65348158035f88b28daf2edc4bc","observation_id":"4bc21c6f-9311-42e5-966a-00f278d55240","resolution":{"observed_at":"2026-08-12T04:26:55.726438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.707424Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability","venue":null,"work_id":"f4cc36d9-ab15-45a9-8143-cbbe6cde2aa0","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.176217Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c97de35d87556ef25446c68c317ecbe40ae20b2cc2ec5d8d7ad26763450eaed9","observation_id":"b6fc1715-ea2f-470c-8cf1-8e8d51d1a817","resolution":{"observed_at":"2026-08-12T04:26:55.712070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.692936Z","title":"Detrs beat yolos on real-time object detection","venue":null,"work_id":"9134ab53-d0a7-4d92-b7a1-b5088fc8a149","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.181393Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:1fe71d73e49f64693e761a96a9181ebd5df9567f9a078444f020bd9e4969731c","observation_id":"4350c5b2-f7bb-4e0b-9a35-d50dfaac3549","resolution":{"observed_at":"2026-08-12T04:26:55.698013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.678078Z","title":"Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phe- nomenon","venue":null,"work_id":"e691e994-73a9-4561-a014-ada34cc9683d","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.186430Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:64a4e1035b8c4c3c9bc547e53994c756d0e8b6144d90e4ed17fada306b7618f0","observation_id":"747d1f7d-8deb-4af5-a771-776b38a72e42","resolution":{"observed_at":"2026-08-12T04:26:55.682670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.660547Z","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","venue":null,"work_id":"946f70c2-ad06-4530-aa9e-8db187c750ea","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.190633Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a67fe2c70af23407b3d693c5c610449a88244eb258e9b49a1f06696db9422367","observation_id":"0391ddf9-3089-46eb-b468-519a17ed07b3","resolution":{"observed_at":"2026-08-12T04:26:55.667943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","latest_version":5,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-17T14:20:35.637875Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches"},"reference_resolution":{"displayed":64,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":0,"verified_fuzzy":34},"total_outbound_references":64},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 64 of 64 outbound references and 1 inbound Pith citation observation for arXiv:2412.01440."}