{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:ZCMM7VRZABFG7HXK5PKZ2LW4UC","short_pith_number":"pith:ZCMM7VRZ","canonical_record":{"source":{"id":"2010.14023","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-27T03:02:40Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"64c589277b1c226d67604f02a79d8be0552081f2b899c12977bcd89658c56051","abstract_canon_sha256":"090fcdedc9afda55961caae2885de0e53d2d028f3d68e67d3838e8efa6190018"},"schema_version":"1.0"},"canonical_sha256":"c898cfd639004a6f9eeaebd59d2edca09e268c48bfd4fd5133de267878d46f2d","source":{"kind":"arxiv","id":"2010.14023","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.14023","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"arxiv_version","alias_value":"2010.14023v1","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.14023","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_12","alias_value":"ZCMM7VRZABFG","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_16","alias_value":"ZCMM7VRZABFG7HXK","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_8","alias_value":"ZCMM7VRZ","created_at":"2026-07-05T01:46:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:ZCMM7VRZABFG7HXK5PKZ2LW4UC","target":"record","payload":{"canonical_record":{"source":{"id":"2010.14023","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-27T03:02:40Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"64c589277b1c226d67604f02a79d8be0552081f2b899c12977bcd89658c56051","abstract_canon_sha256":"090fcdedc9afda55961caae2885de0e53d2d028f3d68e67d3838e8efa6190018"},"schema_version":"1.0"},"canonical_sha256":"c898cfd639004a6f9eeaebd59d2edca09e268c48bfd4fd5133de267878d46f2d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:46:30.488140Z","signature_b64":"m69bhKbt3ruHteseYQ52Nr4js8yd/mdTUiuXd5dobRExMoGNOc+mtdh0N3VyjfYb2HQp83HljahrFLU3vjcfCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c898cfd639004a6f9eeaebd59d2edca09e268c48bfd4fd5133de267878d46f2d","last_reissued_at":"2026-07-05T01:46:30.487755Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:46:30.487755Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.14023","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:46:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sScQ7cbYKqKkLAYsNGaJIidOBtVx+cHibcvPYdaYoZBRHryllMKp5G6cy44uBLcCPPXp41elZDmy42U42qwLAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:58:14.067687Z"},"content_sha256":"f16670960bf0bd87162bef2954fd0b6a6360b59392429a83b0dfdfb478558f78","schema_version":"1.0","event_id":"sha256:f16670960bf0bd87162bef2954fd0b6a6360b59392429a83b0dfdfb478558f78"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:ZCMM7VRZABFG7HXK5PKZ2LW4UC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FaceLeaks: Inference Attacks against Transfer Learning Models via Black-box Queries","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Seng Pei Liew, Tsubasa Takahashi","submitted_at":"2020-10-27T03:02:40Z","abstract_excerpt":"Transfer learning is a useful machine learning framework that allows one to build task-specific models (student models) without significantly incurring training costs using a single powerful model (teacher model) pre-trained with a large amount of data. The teacher model may contain private data, or interact with private inputs. We investigate if one can leak or infer such private information without interacting with the teacher model directly. We describe such inference attacks in the context of face recognition, an application of transfer learning that is highly sensitive to personal privacy"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.14023","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.14023/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:46:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3jxbVtwiBbqo+00RGnfADKzUsiMiIo109YHkaTQz8vKmzXAuuSCwkmAo1SRb8tmAbwX4pdTsumdqdPyh5nUOBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T19:58:14.068157Z"},"content_sha256":"9cf8cce2952f285c5f0385316a7c7c4ae5b8faa9394e39a0e551c2741e25698c","schema_version":"1.0","event_id":"sha256:9cf8cce2952f285c5f0385316a7c7c4ae5b8faa9394e39a0e551c2741e25698c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/bundle.json","state_url":"https://pith.science/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T19:58:14Z","links":{"resolver":"https://pith.science/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC","bundle":"https://pith.science/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/bundle.json","state":"https://pith.science/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZCMM7VRZABFG7HXK5PKZ2LW4UC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:ZCMM7VRZABFG7HXK5PKZ2LW4UC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"090fcdedc9afda55961caae2885de0e53d2d028f3d68e67d3838e8efa6190018","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-27T03:02:40Z","title_canon_sha256":"64c589277b1c226d67604f02a79d8be0552081f2b899c12977bcd89658c56051"},"schema_version":"1.0","source":{"id":"2010.14023","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.14023","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"arxiv_version","alias_value":"2010.14023v1","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.14023","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_12","alias_value":"ZCMM7VRZABFG","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_16","alias_value":"ZCMM7VRZABFG7HXK","created_at":"2026-07-05T01:46:30Z"},{"alias_kind":"pith_short_8","alias_value":"ZCMM7VRZ","created_at":"2026-07-05T01:46:30Z"}],"graph_snapshots":[{"event_id":"sha256:9cf8cce2952f285c5f0385316a7c7c4ae5b8faa9394e39a0e551c2741e25698c","target":"graph","created_at":"2026-07-05T01:46:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.14023/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Transfer learning is a useful machine learning framework that allows one to build task-specific models (student models) without significantly incurring training costs using a single powerful model (teacher model) pre-trained with a large amount of data. The teacher model may contain private data, or interact with private inputs. We investigate if one can leak or infer such private information without interacting with the teacher model directly. We describe such inference attacks in the context of face recognition, an application of transfer learning that is highly sensitive to personal privacy","authors_text":"Seng Pei Liew, Tsubasa Takahashi","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-27T03:02:40Z","title":"FaceLeaks: Inference Attacks against Transfer Learning Models via Black-box Queries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.14023","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f16670960bf0bd87162bef2954fd0b6a6360b59392429a83b0dfdfb478558f78","target":"record","created_at":"2026-07-05T01:46:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"090fcdedc9afda55961caae2885de0e53d2d028f3d68e67d3838e8efa6190018","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-10-27T03:02:40Z","title_canon_sha256":"64c589277b1c226d67604f02a79d8be0552081f2b899c12977bcd89658c56051"},"schema_version":"1.0","source":{"id":"2010.14023","kind":"arxiv","version":1}},"canonical_sha256":"c898cfd639004a6f9eeaebd59d2edca09e268c48bfd4fd5133de267878d46f2d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c898cfd639004a6f9eeaebd59d2edca09e268c48bfd4fd5133de267878d46f2d","first_computed_at":"2026-07-05T01:46:30.487755Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:46:30.487755Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m69bhKbt3ruHteseYQ52Nr4js8yd/mdTUiuXd5dobRExMoGNOc+mtdh0N3VyjfYb2HQp83HljahrFLU3vjcfCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:46:30.488140Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.14023","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f16670960bf0bd87162bef2954fd0b6a6360b59392429a83b0dfdfb478558f78","sha256:9cf8cce2952f285c5f0385316a7c7c4ae5b8faa9394e39a0e551c2741e25698c"],"state_sha256":"fcb5149eed99ca9044c59dbd6af54922f2ce744292a9458c836355ca414187c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CGybxaC0iS3MVMx3bpoi3oZGqrSed1TwiIB2aeNCRduUH1SIzz1axE5JXiQh8Rtlv4g3O6JGUAmJUS85SXkiBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T19:58:14.071171Z","bundle_sha256":"80db6d97d22a2f31ce3f6894f36c6439349a58ed3f6908dbafc50ca43b449304"}}