{"as_of":"2026-08-13T04:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b52bee32121bcd87391b4b14dd1f1928c312e1cd52681ff5279de5ffaecd6852","coverage":[{"denominator":64,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":64,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T04:26:55.190633Z","state":"measured"},{"denominator":65,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":65,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-26T04:35:51.583460Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"cited_work":{"arxiv_id":"2412.01440","doi":"10.48550/arxiv.2412.01440","metadata_source":"arxiv_reference","pith_arxiv_id":"2412.01440","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"BadPatch:Diffusion-basedgenerationofphysicaladversarialpatches","venue":"arXiv (Cornell University)","work_id":"0fed37ec-a337-46d9-bddf-9dfbc1a0b07a","year":null},"citing_paper":{"arxiv_id":"2606.26566","last_updated":"2026-06-25T03:32:12Z","snapshot_observed_at":"2026-08-12T21:54:41.598451Z","submitted_at":"2026-06-25T03:32:12Z","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-06-26T04:35:51.583460Z"},"links":{"cited_paper":"/paper/2412.01440","citing_paper":"/paper/2606.26566"},"observation_digest":"sha256:3ebfd381554cdbcd79f9b71f4135c80b55f1e4052bd33aff9ed122331d8c2021","observation_id":"c123a101-e3eb-48f2-beb5-d86e16ba3d08","resolution":{"observed_at":"2026-06-26T04:38:59.130159Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.01440/citation-record","integrity":"/paper/2412.01440/integrity","json":"/paper/2412.01440/citation-record.json","paper":"/paper/2412.01440"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-12T04:26:54.901459Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.901459Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:f9acf98df9e5d234dc5b6f33d1a3d692b12bd8ebdbddf3075428b96c3664befe","observation_id":"03844ddd-c38d-4872-882e-259b371ea618","resolution":{"observed_at":"2026-08-12T04:26:54.901459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.250105Z","title":"2d human pose estimation: New benchmark and state of the art analysis","venue":null,"work_id":"8fcfceba-11ab-450b-a0a2-42873a5cb5a7","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.906732Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:48285012a687d82b38a2d41171a51bd5376a74c50995011d6d583c6c993265c5","observation_id":"64134a61-afff-4672-a611-6904b15b3554","resolution":{"observed_at":"2026-08-12T04:26:56.254689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.235449Z","title":"Synthesizing robust adversarial examples","venue":null,"work_id":"d3dc7314-6398-488f-9107-6957ece56056","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.911251Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:80891224f496ed055ecb80aad8596361bd9508ea1b912d046c920fae23db9720","observation_id":"8927b149-7a1e-49e9-8821-c83424d1afea","resolution":{"observed_at":"2026-08-12T04:26:56.240616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.915984Z","title":"Blended diffusion for text-driven editing of natural images","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.915984Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:4f99a460757065b29bfa28ed935b8eae6b2182b2e23e4cc1580530074b79ac93","observation_id":"7d1f9013-00d5-4feb-a910-fb55f249febd","resolution":{"observed_at":"2026-08-12T04:26:54.915984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2004.10934","last_updated":"2020-04-23T02:10:02Z","snapshot_observed_at":"2026-07-06T09:14:32.318388Z","submitted_at":"2020-04-23T02:10:02Z","title":"YOLOv4: Optimal Speed and Accuracy of Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.10934","snapshot_observed_at":"2026-08-12T04:26:54.920519Z","title":"Yolov4: Optimal speed and accuracy of object detection","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.920519Z"},"links":{"cited_paper":"/paper/2004.10934","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:f33cada1afed36cb4fd0bf1d2e240a546cd8f5f4f22f4061f63238bb92e8b6b8","observation_id":"06acdf48-beb0-4a86-9ef4-e8cd77fcbfa4","resolution":{"observed_at":"2026-08-12T04:26:54.920519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T04:26:54.925430Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.925430Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:d2cf5890ef4d02f0a281788497a38dfec0d8b7876410074c8c934750ce2dc01c","observation_id":"b4b4b6a1-16db-4753-b34c-09ea133c326f","resolution":{"observed_at":"2026-08-12T04:26:54.925430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.210714Z","title":"End- to-end object detection with transformers","venue":null,"work_id":"98ce7274-86f6-430a-adf2-fb5c5ea98686","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.930236Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e273ceeba3ab97bae45c93c9227c399c8e16a04e2741ec3520ad0cb9afff6364","observation_id":"42bebf5a-5c0e-4a79-bce8-169931536f61","resolution":{"observed_at":"2026-08-12T04:26:56.215600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.934698Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.934698Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ec0c3c494702a33741c22e7c795cfe5d68e1b98c43a630d701ea5c3444bcff31","observation_id":"75d8df91-c694-4d5d-88a2-9b84b62e8c7e","resolution":{"observed_at":"2026-08-12T04:26:54.934698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.186939Z","title":"Deepdriving: Learning affordance for direct percep- tion in autonomous driving","venue":null,"work_id":"57a9944e-cf0d-474f-9427-4c7e5689b040","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.939482Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:8ed1bfe61f094910d160d5df780129561245cd166a310d09908de22f8cdc4025","observation_id":"19d93927-db4f-452f-80c8-b708bffe54db","resolution":{"observed_at":"2026-08-12T04:26:56.191540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.16401","last_updated":"2023-12-27T04:09:44Z","snapshot_observed_at":"2026-08-12T06:57:15.219566Z","submitted_at":"2023-12-27T04:09:44Z","title":"Natural Adversarial Patch Generation Method Based on Latent Diffusion Model","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.16401","snapshot_observed_at":"2026-08-12T04:26:54.943744Z","title":"Natural adversarial patch generation method based on latent diffu- sion model","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.943744Z"},"links":{"cited_paper":"/paper/2312.16401","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:d87c8bcd1ae3d2fc68122b3bedb6ba11716f5bb73c4dbd52e31ad2edfe5fbf7f","observation_id":"3d6d99fb-a6fa-40f2-a458-d7f43e2060a3","resolution":{"observed_at":"2026-08-12T04:26:54.943744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.171456Z","title":"Content-based unrestricted ad- versarial attack","venue":null,"work_id":"baab6e60-f370-4c74-91da-91f7061d547e","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.948609Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:39eecf94dc1537c23eb1ad762f92d86c4171d509de19f4ba0f01d74f75f21b57","observation_id":"567632d0-14e7-4e3f-86b8-250e5e1beac4","resolution":{"observed_at":"2026-08-12T04:26:56.176485Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.156720Z","title":"Histograms of oriented gra- dients for human detection","venue":null,"work_id":"c8c98fab-25e5-4815-9ad0-f69cdf5fe7c1","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.953229Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ed98b4ea3a143671d7c19c13ec8fc6c912f8d7cfc3ca1f180d3279fac3fd4121","observation_id":"b1d09a65-8735-46c4-a302-2dafbdeba471","resolution":{"observed_at":"2026-08-12T04:26:56.161610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.957914Z","title":"Diffusion mod- els beat gans on image synthesis","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.957914Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:34d44bdf166a2b2213f0045d533d58a03d02d708d620b5087ed8dfc3aeb5a2fc","observation_id":"939f4e08-b4e2-4736-ad45-368aaefdd56d","resolution":{"observed_at":"2026-08-12T04:26:54.957914Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.131343Z","title":"Tnt attacks! universal naturalis- tic adversarial patches against deep neural network systems","venue":null,"work_id":"a100b96b-0bdb-4648-8754-6344581d323b","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.962471Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:34a4125b8b25137c5bfa769c1d6de4330f8608d603343aea39dc79983e9dc407","observation_id":"9f875f74-1367-4d97-8b9a-4743ee840461","resolution":{"observed_at":"2026-08-12T04:26:56.136864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-10T08:54:14.665687Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-12T04:26:54.966717Z","title":"Robust physical-world attacks on machine learning models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.966717Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:190b258397f29ba3884f048e9434272560fcbb411c42cff0e6a824ef7696be3b","observation_id":"6aa83886-430e-4315-a4f4-352da66ab4c7","resolution":{"observed_at":"2026-08-12T04:26:54.966717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.115948Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"bfce3a6b-cc73-4d3b-9def-acea5846fe06","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.972367Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:217de9119138d74274a06f51b0660d0978b3bfee17a8704f081444f077a8c2d4","observation_id":"d04f10d5-40bd-4001-92e6-3fd68461e4c7","resolution":{"observed_at":"2026-08-12T04:26:56.120774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:54.976660Z","title":"Generative adversarial nets","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.976660Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b51114fee92cf3862c39a311af7f21f19ba54d9591822b6984019ba0ff71753d","observation_id":"316f14e8-97b7-45cb-afcb-a4363da1d7dd","resolution":{"observed_at":"2026-08-12T04:26:54.976660Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T04:26:54.981001Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.981001Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b9397842023f22f87250d78eecab8af9c6c717949bedb7ec4c197ed9f1c3878d","observation_id":"27c5bf9b-e235-4cfe-b12f-cb425a8cc8b4","resolution":{"observed_at":"2026-08-12T04:26:54.981001Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.090634Z","title":"Advart: Adversarial art for camouflaged object detection attacks","venue":null,"work_id":"40b533b1-16f0-46e2-bd4b-57ec1d8995a0","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.986525Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:3607658496e3e3d9a6c14dba525ff3d39efef6336b9078b765c5ef8ff1c57a51","observation_id":"d6ff5bac-14ed-40b2-a0c8-03827155f627","resolution":{"observed_at":"2026-08-12T04:26:56.095419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.076131Z","title":"Dap: A dynamic adversarial patch for evading person detectors","venue":null,"work_id":"c0843b16-7f4a-4bd2-85bf-7c4c8318a14d","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.991052Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0cc78fdb9b045d4036227f6bd1805ac2c096dab34b3b3b3388cc49c69e787839","observation_id":"2df801be-d906-410e-bbf7-42cd6e8b5e5e","resolution":{"observed_at":"2026-08-12T04:26:56.080880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2208.01626","last_updated":"2022-08-02T17:55:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-08-02T17:55:41Z","title":"Prompt-to-Prompt Image Editing with Cross Attention Control","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2208.01626","snapshot_observed_at":"2026-08-12T04:26:54.995173Z","title":"Prompt-to-prompt im- age editing with cross attention control","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.995173Z"},"links":{"cited_paper":"/paper/2208.01626","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:48377f9f7b6f836d95f8237162085faf825ac9a4b4464ea7078194cc0212aa2a","observation_id":"469dcb4b-2226-4110-afb7-4bd0ac0c0794","resolution":{"observed_at":"2026-08-12T04:26:54.995173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2207.12598","last_updated":"2022-07-26T01:42:07Z","snapshot_observed_at":"2026-08-12T19:28:23.372660Z","submitted_at":"2022-07-26T01:42:07Z","title":"Classifier-Free Diffusion Guidance","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2207.12598","snapshot_observed_at":"2026-08-12T04:26:54.999524Z","title":"Classifier-free diffusion guidance","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:54.999524Z"},"links":{"cited_paper":"/paper/2207.12598","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:3a2a8e8eed73f08863df6540c40e666921480faaea36ec1a996399dd5a19a8f9","observation_id":"e779a124-6c2e-42fb-902a-32dd9ab659bb","resolution":{"observed_at":"2026-08-12T04:26:54.999524Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.004103Z","title":"Denoising dif- fusion probabilistic models","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.004103Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:61d4b236aaec2aaf05fcd5ae3f63f7f92688943f446826b51f3af8184bd0fee7","observation_id":"73c3d641-0f46-47d6-8f8b-a047a2ef566e","resolution":{"observed_at":"2026-08-12T04:26:55.004103Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.050068Z","title":"Nat- uralistic physical adversarial patch for object detectors","venue":null,"work_id":"08ab3a95-861b-4f38-a38d-2cf62201474d","year":2021},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.008395Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:8e0e0f929c0f66b16e16aeb7da33c3604af3a6c91e5c819f64d15007f67e9e63","observation_id":"8a0a7bbe-02f6-481e-8aea-b04d2743ac12","resolution":{"observed_at":"2026-08-12T04:26:56.055057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.034296Z","title":"T-sea: Transfer-based self-ensemble attack on object detection","venue":null,"work_id":"d13dc892-93fc-4d0e-81d3-298d037906d1","year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.012684Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ff947abdfa17611bf1222f6c4c03816282e10c8735c85b79825316122a607703","observation_id":"1740060e-3fc7-4f11-8f8a-d939bd7388fe","resolution":{"observed_at":"2026-08-12T04:26:56.040010Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.018386Z","title":"Universal physical camouflage attacks on object detectors","venue":null,"work_id":"78cab7b5-6fd9-4c43-b14b-e173da36b7cf","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.016808Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:42ef297cc5dee41c8f7a63fb7edd62c668301a342d4297ceaf344430188e7ce5","observation_id":"e6ecfabc-0f4b-4b24-b13f-a3c5f846721a","resolution":{"observed_at":"2026-08-12T04:26:56.023431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:56.003438Z","title":"Connecting the digital and phys- ical world: Improving the robustness of adversarial attacks","venue":null,"work_id":"5d1c5faf-1ac9-4ca0-963b-2dcd652b4da0","year":2019},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.021140Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:64be8a9926c165f7a7561d69ecb06bfc40946cded2977f61f3cca2d95bfbd972","observation_id":"c115e840-1996-44c7-a0bc-5deadcf293c2","resolution":{"observed_at":"2026-08-12T04:26:56.008326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.988304Z","title":"ultralytics/yolov5, 2020","venue":null,"work_id":"cbf55646-6eae-484d-8666-eb4f3bceaf85","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.025606Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:31095e84c4f858be020fc821fcedf460001187fc5b21a6f07c7c068abbc57d31","observation_id":"1793ff06-362f-4fce-8148-3e0f99fcfacf","resolution":{"observed_at":"2026-08-12T04:26:55.992875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-12T04:26:55.029953Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.029953Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b05624c1dbdcf9d47f9b2fa3adb79bcac3c6b636534838f805e7d8413bdfc49b","observation_id":"79de2481-a009-44a4-8039-8dc17555f9f4","resolution":{"observed_at":"2026-08-12T04:26:55.029953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.972544Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"a71f54ba-c73d-46d2-8c9d-bdfa1edb9621","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.034371Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:1d84fd9596088a60c172fef037f7e5ce35ba3a9fd29ff3c318080457434c154d","observation_id":"8f235450-8050-4c78-af5f-ab47dbe6584f","resolution":{"observed_at":"2026-08-12T04:26:55.977436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.038945Z","title":"Patch of invisibility: Natural- istic black-box adversarial attacks on object de-tectors.arXiv preprint arXiv:2303.04238, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.038945Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:9ff82ce0e057b6873a3413a18a6bffea466c6d561425d2b091f4b40415b4e66a","observation_id":"0099e7ec-3a68-410f-8137-deff73c2bf2a","resolution":{"observed_at":"2026-08-12T04:26:55.038945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.07253","last_updated":"2024-12-10T07:24:24Z","snapshot_observed_at":"2026-08-11T18:53:47.373715Z","submitted_at":"2024-12-10T07:24:24Z","title":"CapGen:An Environment-Adaptive Generator of Adversarial Patches","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.07253","snapshot_observed_at":"2026-08-12T04:26:55.043260Z","title":"Capgen: An environment-adaptive generator of adversarial patches","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.043260Z"},"links":{"cited_paper":"/paper/2412.07253","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:7af7a49b24a77b2c70663184174086aae03ee934fc21eb8fda9628971f8151c8","observation_id":"e93b978c-a26d-4c5e-abcc-f554b5521b48","resolution":{"observed_at":"2026-08-12T04:26:55.043260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.956111Z","title":"Blip: Bootstrapping language-image pre-training for unified vision-language understanding and generation","venue":null,"work_id":"0728c05d-f0f3-4422-b647-aa68f767527d","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.048078Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0f00cc0acaa4a07ca72fe281f0eced138a87e1839c3225d06d449e3f309aea78","observation_id":"756c1b01-41c6-4317-9790-3a6f040b7f77","resolution":{"observed_at":"2026-08-12T04:26:55.961270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.08076","last_updated":"2023-07-16T15:22:30Z","snapshot_observed_at":"2026-08-06T17:14:47.366139Z","submitted_at":"2023-07-16T15:22:30Z","title":"Diffusion to Confusion: Naturalistic Adversarial Patch Generation Based on Diffusion Model for Object Detector","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.08076","snapshot_observed_at":"2026-08-12T04:26:55.052237Z","title":"Diffusion to confusion: Naturalistic ad- versarial patch generation based on diffusion model for ob- ject detector","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.052237Z"},"links":{"cited_paper":"/paper/2307.08076","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:559e9cc73408bda89cab81406fde6ff40bcf5e591582cd3499866eb0ce04ac44","observation_id":"c7667703-a1fb-4bba-a5d4-0a1dc74a4c85","resolution":{"observed_at":"2026-08-12T04:26:55.052237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.056639Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.056639Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:0f0ccb1e50709dc4f89eab898adb0a57966d8a6deeefd46ce78eae4a9419324a","observation_id":"1af587ea-d783-492a-b0b4-527c9b5acc44","resolution":{"observed_at":"2026-08-12T04:26:55.056639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.931311Z","title":"Beware of road markings: A new adversarial patch attack to monocular depth estimation","venue":null,"work_id":"7f1c0bf1-27b5-4660-9775-5d868a1bdc8f","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.061437Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:25c79fe9790376dc96cc43448343244c664fcb3e656792e4bdb62530aa11f722","observation_id":"9d4b828b-62d3-4e82-82ba-3a1091e6e605","resolution":{"observed_at":"2026-08-12T04:26:55.936034Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.915951Z","title":"Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection","venue":null,"work_id":"2e849ca7-f0a1-4d5e-a09b-effdc5f59485","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.065924Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:61d7a62f0868d3151a640b11b4d318428f14dde647d3132ff2974fb52365898d","observation_id":"c642ac43-1051-4cc9-9cd9-82fd1b319fa5","resolution":{"observed_at":"2026-08-12T04:26:55.920774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.05206","snapshot_observed_at":"2026-08-12T04:26:55.070309Z","title":"Safety at scale: A comprehensive sur- vey of large model safety","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.070309Z"},"links":{"cited_paper":"/paper/2502.05206","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:572d22de59098565ff75a33b721403dc1b666e8a9f8bbf088d89617797795827","observation_id":"ff16fc77-fa44-46d1-b35a-d84863296d0e","resolution":{"observed_at":"2026-08-12T04:26:55.070309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.074863Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.074863Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:8da4d1b0f8da74a798777be4e67fe29c4b5269f264cb9de6a9d150eb01f0097a","observation_id":"855c5479-908e-4e23-942b-0c8f46b26ae1","resolution":{"observed_at":"2026-08-12T04:26:55.074863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.891641Z","title":"Deep learning for healthcare: review, opportunities and challenges","venue":null,"work_id":"a44667d9-1827-4375-b79a-ef0dd0d1a819","year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.079169Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b292c5c7e5fc509b48ba8e56521feb74adbca331c8073096799af17b7870e693","observation_id":"42e9658c-2ca6-4f4d-a085-d756979a84b2","resolution":{"observed_at":"2026-08-12T04:26:55.896496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.083527Z","title":"Null-text inversion for editing real images using guided diffusion models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.083527Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ac31eb5408b7a050f853e6e13f844473acb3bc515652eaa162cf146dabfe7c2a","observation_id":"07d106f3-439b-4444-bf1e-6cb06de62109","resolution":{"observed_at":"2026-08-12T04:26:55.083527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.087835Z","title":"Learn- ing transferable visual models from natural language super- vision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.087835Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a747f7efc8287234ae5444e9d76d368b44696113d29bc66f6d208e0c12653f7e","observation_id":"a0cc8827-6f5e-40a8-9b1e-d736124a1cc1","resolution":{"observed_at":"2026-08-12T04:26:55.087835Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06125","last_updated":"2022-04-13T01:10:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2022-04-13T01:10:33Z","title":"Hierarchical Text-Conditional Image Generation with CLIP Latents","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2204.06125","snapshot_observed_at":"2026-08-12T04:26:55.091981Z","title":"Hierarchical text-conditional image gener- ation with clip latents","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.091981Z"},"links":{"cited_paper":"/paper/2204.06125","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:4426e932d703d4fe733ea07c9b120e8450cc260326c566eb8b702988baf58896","observation_id":"45f33e89-fad1-45d0-98b9-5a10a839b130","resolution":{"observed_at":"2026-08-12T04:26:55.091981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-06T11:09:16.409556Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-12T04:26:55.097007Z","title":"Yolov3: An incremental improvement","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.097007Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:32352c3afdf16848597d42bb598218167a7f9b8113d84ca46203e2cad1ebaca6","observation_id":"ead4b7a5-6833-4d6c-9861-6b439efc1d17","resolution":{"observed_at":"2026-08-12T04:26:55.097007Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.858088Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks","venue":null,"work_id":"5ba52cf5-921a-4ad7-b100-f165c145a74d","year":2015},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.101699Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ab3fc85e3a43ea69ed22afef49117d6b339e6598d9e10783d7b1118a7735ac4e","observation_id":"786c1de7-388b-4194-aa8a-91c20df78249","resolution":{"observed_at":"2026-08-12T04:26:55.862596Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.844348Z","title":"High-resolution image syn- thesis with latent diffusion models","venue":null,"work_id":"56da3fee-8d5a-4fce-aa4b-19fcd466c227","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.106093Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:01ba916fd0d70a45604615d46751893ab8395f09a387190269425a40a3ac4967","observation_id":"335ee805-57eb-4d64-92aa-2fcd3a49d6a3","resolution":{"observed_at":"2026-08-12T04:26:55.848725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.110530Z","title":"Photorealistic text-to-image diffusion models with deep language understanding","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.110530Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:aed272ab5ea95784d52b0545b8160963679806de5885df517bb5733e48ed07fb","observation_id":"10669cde-d07c-4db6-9b9d-b562b4744967","resolution":{"observed_at":"2026-08-12T04:26:55.110530Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.821310Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"ec628b53-728f-41a1-bcb4-b4610abcc9e7","year":2016},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.114802Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:26d34457de2816fa1530fcb8c1e31a3fa3c223bd9a7fb18a30d2bd4e31989a30","observation_id":"3d84208d-d184-482e-a058-6b2a9bbc3cde","resolution":{"observed_at":"2026-08-12T04:26:55.825712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.14555","last_updated":"2024-06-20T17:58:52Z","snapshot_observed_at":"2026-08-12T23:38:07.035479Z","submitted_at":"2024-06-20T17:58:52Z","title":"A Survey of Multimodal-Guided Image Editing with Text-to-Image Diffusion Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.14555","snapshot_observed_at":"2026-08-12T04:26:55.119335Z","title":"A survey of multimodal-guided image editing with text-to-image diffu- sion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.119335Z"},"links":{"cited_paper":"/paper/2406.14555","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a41663878b977a8b19680ed17f225a45caaccacec95943160cb530e71d182e00","observation_id":"0eb85e0c-4e60-4fec-9d77-24ec06be32b3","resolution":{"observed_at":"2026-08-12T04:26:55.119335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-12T04:26:55.123995Z","title":"Denoising diffusion implicit models","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.123995Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:90da960d735b9fe7b8b192aeb95b9fc785f6f35031a836ca78e4a36ac0f3ac73","observation_id":"c27dd4c3-0a3d-4432-aa96-9c7e947b0208","resolution":{"observed_at":"2026-08-12T04:26:55.123995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.807867Z","title":"Fool- ing automated surveillance cameras: adversarial patches to attack person detection","venue":null,"work_id":"da73182b-171b-4249-8b69-fb77663294dc","year":2019},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.128627Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:b4f21f98b573415a2675fc057f530787c1922a987985969cc96ab00ed01446b7","observation_id":"6884f959-7884-4d82-8c9c-545755a4f8ce","resolution":{"observed_at":"2026-08-12T04:26:55.812319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12524","last_updated":"2025-02-18T04:20:14Z","snapshot_observed_at":"2026-07-06T20:38:20.545914Z","submitted_at":"2025-02-18T04:20:14Z","title":"YOLOv12: Attention-Centric Real-Time Object Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12524","snapshot_observed_at":"2026-08-12T04:26:55.133641Z","title":"Yolov12: Attention-centric real-time object detectors","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.133641Z"},"links":{"cited_paper":"/paper/2502.12524","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:083639ee159b195e7dfc705c4168d440451e348ed488ac3c88d561e0dcf6837b","observation_id":"18fa73af-2c00-4cbd-a182-591437e84b4e","resolution":{"observed_at":"2026-08-12T04:26:55.133641Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.793885Z","title":"Yolov10: Real-time end-to-end object de- tection","venue":null,"work_id":"ebb8facc-3504-47bb-b90a-686970746569","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.138360Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:755920b250a4e204aad9d8c0fe8b41830246a6c43896cbab370e9b4a131b5a32","observation_id":"725709be-9f12-4c4a-b19c-fc24db3d3f50","resolution":{"observed_at":"2026-08-12T04:26:55.798567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.780250Z","title":"Yolov7: Trainable bag-of-freebies sets new state-of-the-art for real-time object detectors","venue":null,"work_id":"91cdd718-5ca9-4fba-adc7-9ee4dc7646aa","year":2023},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.142923Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:67d684d0a59937130ffd76e3e5faa7ee266a176c15e1bd44f0ebbf42a223fa38","observation_id":"75fea814-3cea-4a16-b08f-0204fbd8b4ea","resolution":{"observed_at":"2026-08-12T04:26:55.784652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.15585","last_updated":"2025-06-09T02:36:20Z","snapshot_observed_at":"2026-08-09T14:46:30.842437Z","submitted_at":"2025-04-22T05:02:49Z","title":"A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2504.15585","snapshot_observed_at":"2026-08-12T04:26:55.147561Z","title":"A comprehensive survey in llm (-agent) full stack safety: Data, training and deployment","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.147561Z"},"links":{"cited_paper":"/paper/2504.15585","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:608b00eef01b7b0f565a7bee205fc01913ebfa472294b1c2674f3a1b51e56176","observation_id":"f0b58d28-5e3f-40dc-90c4-c2e05ab0f6a8","resolution":{"observed_at":"2026-08-12T04:26:55.147561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.765512Z","title":"Revisiting adversarial patches for designing camera-agnostic attacks against person detection","venue":null,"work_id":"e2aa1d9c-18ea-429c-8654-fa11fec8d02b","year":2025},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.152786Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:24112e7d1a127d45506225c213b4cfd06911e3f423bbee6f7f016df86a196ef7","observation_id":"f1a34902-b9b7-4936-b916-fa6d81fd487a","resolution":{"observed_at":"2026-08-12T04:26:55.771249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12641","last_updated":"2019-05-13T07:22:16Z","snapshot_observed_at":"2026-07-06T07:18:09.568026Z","submitted_at":"2018-11-30T06:55:22Z","title":"Transferable Adversarial Attacks for Image and Video Object Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.12641","snapshot_observed_at":"2026-08-12T04:26:55.157557Z","title":"Transferable adversarial attacks for image and video object detection","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.157557Z"},"links":{"cited_paper":"/paper/1811.12641","citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e6c000b84195523ae61f9f2bb7e1cd1a87aa2bb755cd32418251e56067e5ac5b","observation_id":"63feb7ef-7ba7-4ff7-92cc-f066c0a58b5b","resolution":{"observed_at":"2026-08-12T04:26:55.157557Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.751630Z","title":"Making an invisibility cloak: Real world adversarial attacks on object detectors","venue":null,"work_id":"3306102e-004f-4995-a47b-c58b8938cea3","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.162292Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:76c7fd043666b0ac06f69074ebe1a610997593238888ac4dffeeb0507bda6abc","observation_id":"6efcb6c8-5de5-47c2-bced-51083c2546ac","resolution":{"observed_at":"2026-08-12T04:26:55.756093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.736840Z","title":"Adversarial examples for se- mantic segmentation and object detection","venue":null,"work_id":"e57a36c2-dbd3-4608-88c9-b3f360c7ebcd","year":2017},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.166704Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:e9545c20179cb40d916439c4513b507827f23d63f211dc974fbd37a393554d74","observation_id":"f7d797b4-abb4-4eda-8ddd-d4c7877138d1","resolution":{"observed_at":"2026-08-12T04:26:55.741595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.721913Z","title":"Adversarial t-shirt! evading person detectors in a phys- ical world","venue":null,"work_id":"276c3013-3f2a-4eff-bfad-82cf7822f58b","year":2020},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.171222Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:c3b8f858fb6853b90d13684086c536f04d5de41906d155dc4287988d5e1e9d2a","observation_id":"4bc21c6f-9311-42e5-966a-00f278d55240","resolution":{"observed_at":"2026-08-12T04:26:55.726438Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.707424Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability","venue":null,"work_id":"f4cc36d9-ab15-45a9-8143-cbbe6cde2aa0","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.176217Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:3e4cc920901bc23950fccd81c4badf09e985a6aeb75f16281db9ed6e2f21bcae","observation_id":"b6fc1715-ea2f-470c-8cf1-8e8d51d1a817","resolution":{"observed_at":"2026-08-12T04:26:55.712070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.692936Z","title":"Detrs beat yolos on real-time object detection","venue":null,"work_id":"9134ab53-d0a7-4d92-b7a1-b5088fc8a149","year":2024},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.181393Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:a4f40029d0a9d4524428e51bc6228eeae99370f60b9ef3a44f463baf3b561218","observation_id":"4350c5b2-f7bb-4e0b-9a35-d50dfaac3549","resolution":{"observed_at":"2026-08-12T04:26:55.698013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.678078Z","title":"Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phe- nomenon","venue":null,"work_id":"e691e994-73a9-4561-a014-ada34cc9683d","year":2022},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.186430Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:752a02070635055f4c2749a181725abf38112c3fafb0994b12c0bf081b5cc2e2","observation_id":"747d1f7d-8deb-4af5-a771-776b38a72e42","resolution":{"observed_at":"2026-08-12T04:26:55.682670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T04:26:55.660547Z","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","venue":null,"work_id":"946f70c2-ad06-4530-aa9e-8db187c750ea","year":null},"citing_paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches","version":5},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T04:26:55.190633Z"},"links":{"citing_paper":"/paper/2412.01440"},"observation_digest":"sha256:ee9c626ab20d81e439168503777aa67d568aa3d5a3144a4b9d119f982a048c2c","observation_id":"0391ddf9-3089-46eb-b468-519a17ed07b3","resolution":{"observed_at":"2026-08-12T04:26:55.667943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.01440","last_updated":"2025-08-10T03:36:55Z","latest_version":5,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T19:56:27.762112Z","submitted_at":"2024-12-02T12:30:35Z","title":"BadPatch: Diffusion-Based Generation of Physical Adversarial Patches"},"reference_resolution":{"displayed":64,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":0,"verified_fuzzy":34},"total_outbound_references":64},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 64 of 64 outbound references and 1 inbound Pith citation observation for arXiv:2412.01440."}