Paper Citation Record · LEDGER

What Really is a Member? Discrediting Membership Inference via Poisoning

As of 10 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2506.06003.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.06003 v1

Coverage vector

measured 41 of 41 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T06:13:04.858860Z

measured 41 of 41 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

41 of 41 outbound references displayed

verified exact0
verified fuzzy33
unresolved7
parse uncertain1
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 39a837a7-ad8e-4c14-a0b9-47c42c6a3db0 · outbound

This paper cites Membership inference attacks against machine learning models.

What Really is a Member? Discrediting Membership Inference via Poisoning Membership inference attacks against machine learning models

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.500677Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation dc6318f2-8511-4b76-acf5-6dc20ef4bcbd · outbound

This paper cites Pythia: A suite for analyzing large language models across training and scaling.

What Really is a Member? Discrediting Membership Inference via Poisoning Pythia: A suite for analyzing large language models across training and scaling

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.487035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 93531645-fc3d-448b-8721-092b604d9d53 · outbound

This paper cites The times sues openai and microsoft over a.i.

What Really is a Member? Discrediting Membership Inference via Poisoning The times sues openai and microsoft over a.i

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.472996Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation bc6b76eb-6d73-4c07-aec4-63399430447f · outbound

This paper cites Us authors’ copyright lawsuits against openai and microsoft combined in new york with newspaper actions.

What Really is a Member? Discrediting Membership Inference via Poisoning Us authors’ copyright lawsuits against openai and microsoft combined in new york with newspaper actions

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.458610Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1ea4abce-1244-4243-80e4-39d8df9d9404 · outbound

This paper cites Publisher ziff davis sues openai for copyright infringement.

What Really is a Member? Discrediting Membership Inference via Poisoning Publisher ziff davis sues openai for copyright infringement

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.444141Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 25e2931d-7b4e-4ddf-916b-48f7ad7cc98d · outbound

This paper cites Understanding the eu ai act: Requirements and next steps.

What Really is a Member? Discrediting Membership Inference via Poisoning Understanding the eu ai act: Requirements and next steps

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.415551Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation aa3b5c36-ed82-4b4a-9679-91a2ad2c0a46 · outbound

This paper cites Transparency and accountability in ai systems: safeguarding wellbeing in the age of algorithmic decision-making.Frontiers in Human Dynamics, 6:1421273, 2024.

What Really is a Member? Discrediting Membership Inference via Poisoning Transparency and accountability in ai systems: safeguarding wellbeing in the age of algorithmic decision-making.Frontiers in Human Dynamics, 6:1421273, 2024

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.401178Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d11601b1-99a4-4464-a206-08c30c6e51b5 · outbound

This paper cites Artificial intelligence bias auditing–current approaches, challenges and lessons from practice.Review of Accounting and Finance, (ahead-of-print), 2025.

What Really is a Member? Discrediting Membership Inference via Poisoning Artificial intelligence bias auditing–current approaches, challenges and lessons from practice.Review of Accounting and Finance, (ahead-of-print), 2025

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.387247Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 72f3a480-2e86-4363-9476-bd60ae40f0eb · outbound

This paper cites Do Membership Inference Attacks Work on Large Language Models? InProc.

What Really is a Member? Discrediting Membership Inference via Poisoning Do Membership Inference Attacks Work on Large Language Models? InProc

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.372958Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 46da7838-d8a7-46bc-a8c6-f476d6370050 · outbound

This paper cites Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data.

What Really is a Member? Discrediting Membership Inference via Poisoning Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Data

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T06:13:04.724789Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8eaa5759-0314-41c5-a184-6b38f69dae84 · outbound

This paper cites Blind Baselines Beat Membership Inference Attacks for Foundation Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Blind Baselines Beat Membership Inference Attacks for Foundation Models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T06:13:04.729680Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a5914dc9-4666-4146-b146-7743bc0260bd · outbound

This paper cites What Does it Mean for a Language Model to Preserve Privacy? InProc.

What Really is a Member? Discrediting Membership Inference via Poisoning What Does it Mean for a Language Model to Preserve Privacy? InProc

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.358734Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation a4999c4f-6c4c-4440-8740-7768fcb79814 · outbound

This paper cites Language Models May Verbatim Complete Text They Were Not Explicitly Trained On.

What Really is a Member? Discrediting Membership Inference via Poisoning Language Models May Verbatim Complete Text They Were Not Explicitly Trained On

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.342629Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d948d55a-f131-4b39-8721-7cd707e6d854 · outbound

This paper cites Poisoning Web-scale Training Datasets is Practical.

What Really is a Member? Discrediting Membership Inference via Poisoning Poisoning Web-scale Training Datasets is Practical

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.327475Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation faa4b04c-aaad-4e54-bd54-535aee77829d · outbound

This paper cites Persistent Pre-Training Poisoning of LLMs.

What Really is a Member? Discrediting Membership Inference via Poisoning Persistent Pre-Training Poisoning of LLMs

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.312582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation d5190ea7-2b2d-4ee3-8d85-67f6eaafd35a · outbound

This paper cites Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting.

What Really is a Member? Discrediting Membership Inference via Poisoning Privacy Risk in Machine Learning: Analyzing the Connection to Overfitting

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.298081Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation ef95d0a0-d654-4640-aa4a-01eaa71b6582 · outbound

This paper cites Detecting Pretraining Data from Large Language Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Detecting Pretraining Data from Large Language Models

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.281876Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cc52e474-66d6-45c3-9878-98b2cae346e3 · outbound

This paper cites Extracting Training Data from Large Language Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Extracting Training Data from Large Language Models

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.265479Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5d6c831a-799a-440f-9ee3-9cfbbd48d061 · outbound

This paper cites Membership Inference Attacks against Language Models via Neighbourhood Comparison.

What Really is a Member? Discrediting Membership Inference via Poisoning Membership Inference Attacks against Language Models via Neighbourhood Comparison

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.249998Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 36482bbf-9ee1-4ec4-822c-a119c995ca9a · outbound

This paper cites LLM Dataset Inference: Did you train on my dataset? InProc.

What Really is a Member? Discrediting Membership Inference via Poisoning LLM Dataset Inference: Did you train on my dataset? InProc

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.234078Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 48ac5662-af71-4229-ab4d-58194b8a59dd · outbound

This paper cites On the Reliability of Membership Inference Attacks.

What Really is a Member? Discrediting Membership Inference via Poisoning On the Reliability of Membership Inference Attacks

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.218834Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 35e9b175-8018-41e9-94ad-7a36579b3ebe · outbound

This paper cites Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Privacy Backdoors: Enhancing Membership Inference through Poisoning Pre-trained Models

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.203508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 90d9cd11-6011-4654-8ccc-271e94702a7f · outbound

This paper cites Index for rating diagnostic tests.Cancer, 3(1):32–35, 1950.

What Really is a Member? Discrediting Membership Inference via Poisoning Index for rating diagnostic tests.Cancer, 3(1):32–35, 1950

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T06:13:04.781598Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1392c37e-d812-4923-a4ac-7a0b587ac919 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

What Really is a Member? Discrediting Membership Inference via Poisoning Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.178048Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 466717c2-70e4-4f78-859a-844f3fc24071 · outbound

This paper cites Intriguing Properties of Neural Networks.

What Really is a Member? Discrediting Membership Inference via Poisoning Intriguing Properties of Neural Networks

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.163291Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation abb0e583-3526-436f-998f-3911a460b749 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T06:13:04.795304Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ce2b49c1-81c7-4849-8085-586aff6d70e2 · outbound

This paper cites Enhanced Membership Inference Attacks against Machine Learning Models.

What Really is a Member? Discrediting Membership Inference via Poisoning Enhanced Membership Inference Attacks against Machine Learning Models

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.148300Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e6b1d89a-0305-464d-b4d7-83985592e72b · outbound

This paper cites Noisy Neighbors: Efficient membership inference attacks against LLMs.

What Really is a Member? Discrediting Membership Inference via Poisoning Noisy Neighbors: Efficient membership inference attacks against LLMs

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.133133Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 5e9afcd8-c247-464a-b3f7-01e5b9539674 · outbound

This paper cites Multilingual E5 Text Embeddings: A Technical Report.

What Really is a Member? Discrediting Membership Inference via Poisoning Multilingual E5 Text Embeddings: A Technical Report

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T06:13:04.808603Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c65ee1c-5106-4c11-8bff-be08e47dcf35 · outbound

This paper cites MTEB: Massive Text Embedding Benchmark.

What Really is a Member? Discrediting Membership Inference via Poisoning MTEB: Massive Text Embedding Benchmark

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.116746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 07208a3a-5d6d-4a19-aef6-0f58954c63aa · outbound

This paper cites PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models.

What Really is a Member? Discrediting Membership Inference via Poisoning PoisonedParrot: Subtle Data Poisoning Attacks to Elicit Copyright-Infringing Content from Large Language Models

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.102039Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation b20183ea-cf22-4012-8c0d-d615a4fafa50 · outbound

This paper cites Adversarial Example Defense: Ensembles of Weak Defenses are not Strong.

What Really is a Member? Discrediting Membership Inference via Poisoning Adversarial Example Defense: Ensembles of Weak Defenses are not Strong

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.086964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 8b7aa45a-f9ab-46d3-83be-339080ae0f58 · outbound

This paper cites Persistent pre-training poisoning of LLMs.

What Really is a Member? Discrediting Membership Inference via Poisoning Persistent pre-training poisoning of LLMs

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.072936Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 7d247dab-1097-4b0d-ba63-bded9b9ff916 · outbound

This paper cites semantics.

What Really is a Member? Discrediting Membership Inference via Poisoning semantics

Reference 35

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.058790Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation de96853b-cf98-4733-b002-573de533de4a · outbound

This paper cites Here we can setλ= 0since replacing tokens automatically breaks upn-grams for free.

What Really is a Member? Discrediting Membership Inference via Poisoning Here we can setλ= 0since replacing tokens automatically breaks upn-grams for free

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.043295Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 74084937-64f7-46d2-b8f1-e6ae0ddf5af5 · outbound

This paper cites an unresolved cited work.

What Really is a Member? Discrediting Membership Inference via Poisoning Unresolved cited work

Reference 37

Resolution: unresolved; raw_fallback, observed 2026-08-07T06:13:05.026702Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation c92cec4d-c53d-4fbe-96de-d9f81372ff93 · outbound

This paper cites 4.ExactMatch:Same procedure as that forn-grams, but only a single iteration.

What Really is a Member? Discrediting Membership Inference via Poisoning 4.ExactMatch:Same procedure as that forn-grams, but only a single iteration

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:05.011531Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 9e72fe54-29e1-48b4-9de2-156f13741521 · outbound

This paper cites (c) repeat until cosine similarity exceedsc.

What Really is a Member? Discrediting Membership Inference via Poisoning (c) repeat until cosine similarity exceedsc

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:04.995964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 96726526-0de8-4d06-9f93-81972c3b204d · outbound

This paper cites (c) repeat until edit distance drops belowl.

What Really is a Member? Discrediting Membership Inference via Poisoning (c) repeat until edit distance drops belowl

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T06:13:04.980815Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 4e0619ce-479d-45b7-a1de-e1248df71bee · outbound

This paper cites an unresolved cited work.

What Really is a Member? Discrediting Membership Inference via Poisoning Unresolved cited work

Reference 41

Resolution: unresolved; raw_fallback, observed 2026-08-07T06:13:04.964182Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 9609ca06-91bc-4c2f-bd06-694a38662fa8 · outbound

This paper cites an unresolved cited work.

What Really is a Member? Discrediting Membership Inference via Poisoning Unresolved cited work

Reference 2025

Resolution: parse uncertain; raw_fallback, observed 2026-08-07T06:13:05.429487Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Pith citing papers

No inbound Pith citation observations are available.