{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5CSAC4UIZQ3LGSHX2736WGVZT3","short_pith_number":"pith:5CSAC4UI","canonical_record":{"source":{"id":"2301.03118","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a","abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8"},"schema_version":"1.0"},"canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","source":{"kind":"arxiv","id":"2301.03118","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"arxiv_version","alias_value":"2301.03118v2","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_12","alias_value":"5CSAC4UIZQ3L","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_16","alias_value":"5CSAC4UIZQ3LGSHX","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_8","alias_value":"5CSAC4UI","created_at":"2026-07-05T08:30:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5CSAC4UIZQ3LGSHX2736WGVZT3","target":"record","payload":{"canonical_record":{"source":{"id":"2301.03118","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a","abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8"},"schema_version":"1.0"},"canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:30:28.304721Z","signature_b64":"qJDNLXek4qrEDr2QAT8WUdOPYyLv8/Zp75rMQXb9smsHSM+lOj3Iqp8w9NnGLGVRm7JEwcq1oi1PGGpHPnevBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","last_reissued_at":"2026-07-05T08:30:28.304279Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:30:28.304279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.03118","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:30:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Zi8RS7BG9muF+k6iP5ShMk/BP2cNAroYa6bG+YOAABOpJPn2OrlHbey/LIXRtWAjLcik0DDggInZWx9A0kcRCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:53:00.049576Z"},"content_sha256":"ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f","schema_version":"1.0","event_id":"sha256:ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5CSAC4UIZQ3LGSHX2736WGVZT3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Adi Shamir, Irad Zehavi, Roee Nitzan","submitted_at":"2023-01-08T23:11:00Z","abstract_excerpt":"In this paper, we describe how to plant novel types of backdoors in any facial recognition model based on the popular architecture of deep Siamese neural networks. These backdoors force the system to err only on natural images of specific persons who are preselected by the attacker, without controlling their appearance or inserting any triggers. For example, we show how such a backdoored system can classify any two images of a particular person as different people, or any two images of a particular pair of persons as the same person, with almost no effect on the correctness of its decisions fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.03118","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.03118/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:30:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PE5Xah8z71V/tvIdeL8t9Aqx8IUDuWg4kMqPHjboSltMcM//PkKIxPip8pMwa3Xp5PoGydxkCGheaORJTQ8mCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T16:53:00.049954Z"},"content_sha256":"6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402","schema_version":"1.0","event_id":"sha256:6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/bundle.json","state_url":"https://pith.science/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T16:53:00Z","links":{"resolver":"https://pith.science/pith/5CSAC4UIZQ3LGSHX2736WGVZT3","bundle":"https://pith.science/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/bundle.json","state":"https://pith.science/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CSAC4UIZQ3LGSHX2736WGVZT3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5CSAC4UIZQ3LGSHX2736WGVZT3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a"},"schema_version":"1.0","source":{"id":"2301.03118","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"arxiv_version","alias_value":"2301.03118v2","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_12","alias_value":"5CSAC4UIZQ3L","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_16","alias_value":"5CSAC4UIZQ3LGSHX","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_8","alias_value":"5CSAC4UI","created_at":"2026-07-05T08:30:28Z"}],"graph_snapshots":[{"event_id":"sha256:6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402","target":"graph","created_at":"2026-07-05T08:30:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.03118/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we describe how to plant novel types of backdoors in any facial recognition model based on the popular architecture of deep Siamese neural networks. These backdoors force the system to err only on natural images of specific persons who are preselected by the attacker, without controlling their appearance or inserting any triggers. For example, we show how such a backdoored system can classify any two images of a particular person as different people, or any two images of a particular pair of persons as the same person, with almost no effect on the correctness of its decisions fo","authors_text":"Adi Shamir, Irad Zehavi, Roee Nitzan","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title":"Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.03118","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f","target":"record","created_at":"2026-07-05T08:30:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a"},"schema_version":"1.0","source":{"id":"2301.03118","kind":"arxiv","version":2}},"canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","first_computed_at":"2026-07-05T08:30:28.304279Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:30:28.304279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qJDNLXek4qrEDr2QAT8WUdOPYyLv8/Zp75rMQXb9smsHSM+lOj3Iqp8w9NnGLGVRm7JEwcq1oi1PGGpHPnevBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:30:28.304721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.03118","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f","sha256:6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402"],"state_sha256":"634e9f0297c9ee0524f5844db601cb7a1f60c64ecacff322558e44ff146efbde"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CG9FA8nmpUCjdyH/IEY4Rmg+81QMw57+tuwrg7d5mIyYHrwX8/lhP8yTcppTxRmKtCelLrrF93B0o1Ys0hJdDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T16:53:00.052879Z","bundle_sha256":"5130cebc9eae090cc54bdcdba6f6aae3804418b59cc12c881fa26664fa408b00"}}