{"as_of":"2026-08-22T10:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:bd2233e3602459375bbca51e772a14729dad4d7350ac9794f0790fd0135ab1c8","coverage":[{"denominator":79,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":79,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:06:54.908807Z","state":"measured"},{"denominator":80,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":80,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T09:38:28.847667Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-02T03:56:34.390906Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"cited_work":{"arxiv_id":"2412.21061","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2412.21061","snapshot_observed_at":"2026-07-02T03:56:34.390906Z","title":"BridgePure: Limited protection leakage can break black-box data protection","venue":null,"work_id":"203baa93-7159-4cc4-b4d8-d8c4ed8f0d7f","year":2024},"citing_paper":{"arxiv_id":"2606.03711","last_updated":"2026-06-02T14:31:14Z","snapshot_observed_at":"2026-08-22T05:41:37.238632Z","submitted_at":"2026-06-02T14:31:14Z","title":"Ghost: Plausible Yet Unlearnable Trajectories via On-Manifold Substitution for Next-POI Privacy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T09:38:28.847667Z"},"links":{"cited_paper":"/paper/2412.21061","citing_paper":"/paper/2606.03711"},"observation_digest":"sha256:4ca606d14b66c6250f80658a6386e43703432b90467eff99cde54c07609c5e68","observation_id":"a96af71a-80e3-432e-959d-cb31047f98fc","resolution":{"observed_at":"2026-07-02T03:56:34.392770Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2412.21061/citation-record","integrity":"/paper/2412.21061/integrity","json":"/paper/2412.21061/citation-record.json","paper":"/paper/2412.21061"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.225796Z","title":"Bullseye polytope: A scalable clean- label poisoning attack with improved transferability","venue":null,"work_id":"08d59f33-8ccc-423a-a91e-3af323ebad8e","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.527908Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:c81f3b5c5ba8f239a3c664df56c18bea4217217aa524fa9dce9a1f46bb6d4765","observation_id":"231928d8-cd9c-4d7d-be77-b3eb2834fcfa","resolution":{"observed_at":"2026-08-10T23:06:56.230624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.210389Z","title":"Poisoning attacks against support vector machines","venue":null,"work_id":"92664ee0-433e-433e-ab7c-3c8f57abf5e6","year":2012},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.534577Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4e0d782f22440ac0e687e8341f2f8ae03c38a0f845a4191659285f7a0523529f","observation_id":"559ef74a-228b-49ae-b2d4-5868c5e9a47d","resolution":{"observed_at":"2026-08-10T23:06:56.215336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.194502Z","title":"Impress: Evaluating the Resilience of Imperceptible Perturbations against Unauthorized Data Usage in Diffusion-Based Generative Ai","venue":null,"work_id":"82a3bf0d-884d-443f-bd50-b404d74f39f4","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.539973Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:1a2bd1fa5ab52c607b8c3fdb52910c274bbe1482888c413523051aa19f6ee36f","observation_id":"8f30c587-5871-447d-824e-fa721cecd239","resolution":{"observed_at":"2026-08-10T23:06:56.200071Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.178307Z","title":"One for All: A Universal Generator for Concept Unlearnability via Multi-Modal Alignment","venue":null,"work_id":"d1216173-c49b-4d7e-ab2d-e0dded13c31e","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.545934Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:f2ec9c101442e51497d715faefe963ef9a1b5cecde72716bbf7fc605be887098","observation_id":"921fcefd-d67e-46ed-b172-df9474fbbe13","resolution":{"observed_at":"2026-08-10T23:06:56.183907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.163239Z","title":"Self-Ensemble Protec- tion: Training Checkpoints Are Good Data Protectors","venue":null,"work_id":"2b7d77ee-4eb9-4cb1-9a25-895335105c84","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.550477Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:ef2f45924c7d2986354929f74487b9dafce4120adc332d367f34063e9d77cbc8","observation_id":"644fa380-f680-47f3-ab7a-403db94ffbf6","resolution":{"observed_at":"2026-08-10T23:06:56.168121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.147839Z","title":"A simple framework for contrastive learning of visual representations","venue":null,"work_id":"0c49b6dd-e028-4a15-ab17-88598b5ecc05","year":2020},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.555506Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:9856c13870e5192cd2110604264ca2763d184e57f5be4a33a07bd8a72b0f7838","observation_id":"83b6e97e-32f9-4442-9792-c7e0e6f868c6","resolution":{"observed_at":"2026-08-10T23:06:56.152771Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-10T23:06:54.560467Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.560467Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:b8542816f2b20994fc6b31dba74b6dc92ca484201c378925131599ca4ef1bdec","observation_id":"ff5b04e9-0931-4e53-93af-4a80db727fc2","resolution":{"observed_at":"2026-08-10T23:06:54.560467Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.132606Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"5848b787-c43e-4467-90eb-367c50171e7d","year":2009},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.566472Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4ba1ef9aeee55bb693e047eb4f6b52c18e92c66decdcd603d63d115bf33b81b9","observation_id":"6d9189a2-4f41-47ae-8978-438f0f1aa395","resolution":{"observed_at":"2026-08-10T23:06:56.137717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.117910Z","title":"The devil’s advocate: Shattering the illusion of unex- ploitable data using diffusion models","venue":null,"work_id":"2b4d0b24-a291-4c45-8305-eb1723efc67e","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.571226Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:7065f5f18f1d89fee231cceefacca2aa01da8c65a7c565297298e5fdeedbab5b","observation_id":"45c9cacc-6214-48bf-9b78-771386b9c118","resolution":{"observed_at":"2026-08-10T23:06:56.122889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.102088Z","title":"Classical potential theory and its probabilistic counterpart","venue":null,"work_id":"4e094b0b-84c5-4638-aa90-ad64bd8a87a8","year":1984},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.576138Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:eda0c1cfae19002bb078a5470c1de03822f60d019b37403c77595be2dd773d69","observation_id":"87b9188e-0525-4709-9bda-7adadc4eb83a","resolution":{"observed_at":"2026-08-10T23:06:56.107405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.086281Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","venue":null,"work_id":"01631407-8cfc-435d-8137-bc80c16aab25","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.581640Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:f69e427b9d26e7b9c3c04479e4cab122224985894c9412fe46b195bd40f32252","observation_id":"007103f1-721c-4cf7-9fb0-3dc2f5b38376","resolution":{"observed_at":"2026-08-10T23:06:56.091363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.070400Z","title":"Collapsing the Learning: Crafting Broadly Transferable Unlearnable Examples","venue":null,"work_id":"a4a2b824-c0a4-4e2e-8488-1431116f90d5","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.586933Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:e582622ca46fbeb4e47eac447a4d329349c8e928eaf36351de86144435a47928","observation_id":"39a8b99e-23bd-4f1f-8431-5140af96b7c0","resolution":{"observed_at":"2026-08-10T23:06:56.075804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.054929Z","title":"Learning to confuse: Generating training time adversarial data with auto-encoder","venue":null,"work_id":"b26f48c1-8bbe-4897-839c-9592c5790e6a","year":2019},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.591960Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:69f245423f994cf14bff80369d1857a61835b56a786ee6ab2668acfee1b22ff3","observation_id":"2a3161f5-f3dc-4c18-bbc7-713477db6183","resolution":{"observed_at":"2026-08-10T23:06:56.059814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.038004Z","title":"Adversarial examples makestrongpoisons","venue":null,"work_id":"b35c8a7e-d63d-43a5-9e9b-0df3711dcac6","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.596921Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:d3d95f9dbc9db82e28cb4539e71470c2ba2cb5bb5b9577a7713e828c90d0f0a0","observation_id":"f8c5cd52-6f8c-45b8-b828-14509a431b6a","resolution":{"observed_at":"2026-08-10T23:06:56.043601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.019867Z","title":"Robust Unlearnable Examples: Protecting Data Privacy Against Adversarial Learning","venue":null,"work_id":"2aa6c844-5adb-4b1a-ac10-a73854b3e504","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.601973Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:bc7ebaf71fbd0b31a573cd4b84d28a5a9a7edae4969af01042ab0754ae57c47b","observation_id":"7ab87f43-1ec2-47f0-96b9-2a819a74567f","resolution":{"observed_at":"2026-08-10T23:06:56.025147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:56.002332Z","title":"Witches’ Brew: ial Scale Data Poisoning via Gradient Matching","venue":null,"work_id":"8b8ceea9-6f29-4c8d-824c-9c7256855672","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.606696Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:7519d7edb3d57665e4777143810ae448ab632050e73b3fe4c7f5ab1a71e10191","observation_id":"e0377c72-32e9-4df9-8a60-59170dbe02da","resolution":{"observed_at":"2026-08-10T23:06:56.007894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T23:06:54.611449Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.611449Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:050acdc98683b6a419aed6ddf5b6218351260e471f229e6b3bf2229437dffcd9","observation_id":"af89330f-3db2-4f71-8e26-068b1b261599","resolution":{"observed_at":"2026-08-10T23:06:54.611449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.985873Z","title":"Practical Poisoning Attacks on Neural Networks","venue":null,"work_id":"a7122bbc-ad72-4b90-b952-31049d268762","year":2020},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.617323Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:7b2058256e49f04c414e2a13342ecbe4665975180fd0594083dffa797164a991","observation_id":"a39f1388-6861-4320-b695-a4ca81d769e9","resolution":{"observed_at":"2026-08-10T23:06:55.991268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.970570Z","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learn- ing","venue":null,"work_id":"b442d9fa-7cb8-451f-ba9a-b6a8db47680c","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.622393Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:50a4dcb88e8fc123455e8e7124a953b862a0079e84cd795485a8ec7dd1bc3afe","observation_id":"5e71d42f-1957-46c5-9009-51adad308373","resolution":{"observed_at":"2026-08-10T23:06:55.975573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.954687Z","title":"Your Face Belongs to Us: The Secretive Startup Dismantling Your Privacy","venue":null,"work_id":"0fce4a15-4876-4d0f-9357-d9abe819b589","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.627429Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:71ba7711fe2a7ccdabd04f7729e3e9d3277abac1475796caa47beeb9d97c8326","observation_id":"76efeeb4-db75-465e-85c7-4e45ed096e55","resolution":{"observed_at":"2026-08-10T23:06:55.959950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.12027","last_updated":"2025-02-11T11:11:29Z","snapshot_observed_at":"2026-08-19T14:03:59.992745Z","submitted_at":"2024-06-17T18:51:45Z","title":"Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.12027","snapshot_observed_at":"2026-08-10T23:06:54.631661Z","title":"Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.631661Z"},"links":{"cited_paper":"/paper/2406.12027","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4f464f54d7843f1c25359bb14fd2a99e1775c19e13d5b6db38bd55984eb5d763","observation_id":"caf2233e-06f9-48be-9afe-49cba0543336","resolution":{"observed_at":"2026-08-10T23:06:54.631661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:54.636253Z","title":"Squeeze-and-excitation networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.636253Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:e7f409d24bc2298159b431135259e0b4c4f8d87474c45f3d54990416844b2653","observation_id":"6b5b7c34-e026-4875-bc59-56e3bb7c5677","resolution":{"observed_at":"2026-08-10T23:06:54.636253Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.925844Z","title":"Densely connected convolutional networks","venue":null,"work_id":"60946b30-689a-4032-bb63-c41362b6806a","year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.640871Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:a9d0c4012ad3e5aa18ab8e0f8daa06135f295a9191ad534bb4d44e7caa84e091","observation_id":"05a4f866-87a4-4d67-9895-a71f736f3ede","resolution":{"observed_at":"2026-08-10T23:06:55.930786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.910772Z","title":"Unlearnable Examples: Making Personal Data Unexploitable","venue":null,"work_id":"9b978e7f-2c2b-46b1-9ba9-6d457810cfab","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.645519Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:026b7864dc6f78a027af0d4fb23b504fd41ca11057d858e12edef08e7253fb5e","observation_id":"74e00f69-a740-42cf-a76d-85ef6f9b1a67","resolution":{"observed_at":"2026-08-10T23:06:55.915603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.895083Z","title":"Unlearnable examples give a false sense of security: Piercing through unexploitable data with learnable examples","venue":null,"work_id":"c520227a-dddf-4e77-a693-b8a9c07fdc6c","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.650750Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:1ea2c0cd5d672e2a31156d7690565d608ea56cc1af41474dc4668b36b6e8a6e5","observation_id":"2f42eb66-f0f8-4807-8d4c-cd55ebc9c7c3","resolution":{"observed_at":"2026-08-10T23:06:55.900083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.879715Z","title":"Understanding black-box predictions via influence functions","venue":null,"work_id":"cbd6f7db-6ab5-400e-abfe-19ffe889509c","year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.655697Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:d7c4203fc968af281f21ab56aec803c7e311c7c9ddd97e2ed8901da5332adb5c","observation_id":"684efc93-92dc-44ea-afad-b27a7fdaac51","resolution":{"observed_at":"2026-08-10T23:06:55.884767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.864833Z","title":"Stronger Data Poisoning Attacks Break Data Sanitization Defenses","venue":null,"work_id":"8ba9a385-fd45-4892-8774-8fb019bc0ee3","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.660421Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:6df294047e87a9008895ad6c0cb0005cf228157afce70796f883a110480518d3","observation_id":"b5bc96d7-480b-41c4-99ae-03b982158d42","resolution":{"observed_at":"2026-08-10T23:06:55.869829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.849243Z","title":"3D Object Representations for Fine-Grained Categoriza- tion","venue":null,"work_id":"e4b6876c-bb67-4cdb-99d5-6b5710397f1b","year":2013},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.665597Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:0d553cf8a9c742e66b5cca056b4c9acc9832406fe6403e5582391aecbfdc85de","observation_id":"ed6725c4-e576-4ea0-a8a1-0951159c3f64","resolution":{"observed_at":"2026-08-10T23:06:55.854213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.834341Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"7b6e42be-d5de-4f37-94d3-edf037daf41c","year":2009},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.670472Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:881a1480be33689aba8eaf3a17c42297a5c70b6ae7c98d7b119f84b4d40e240e","observation_id":"01f2794a-e7d6-4e35-8dcf-a9f03ee9a5da","resolution":{"observed_at":"2026-08-10T23:06:55.839008Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.819197Z","title":"Imagenet classification with deep convolutional neural networks","venue":null,"work_id":"b45a5aec-a84c-4f20-a5ef-31e76f423636","year":2012},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.675911Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4ded638a47167d5b5f9c38e9aa0e22e3f0b9626f07729a97103f2fb8199dd6db","observation_id":"490a6166-83dd-4150-9eab-98f5a18f2183","resolution":{"observed_at":"2026-08-10T23:06:55.824296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.802945Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":"12b821a0-bdbf-4ffd-a997-e9105293240f","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.680772Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:313b69618394f6f5616e891d11be4177af198d87eb02a55864c44a8954b60b93","observation_id":"1da0dda3-e1c2-4845-9936-51bb90b38fef","resolution":{"observed_at":"2026-08-10T23:06:55.807917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.785222Z","title":"Adversarial example does good: Preventing painting imitation from diffusion models via adversarial examples","venue":null,"work_id":"43985492-bdf0-4ded-8203-db508bc421d7","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.685493Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:65f9ad737f3f143f7e9d05b43089c8dfb71ecdb2ef0c2a54475b6b54a51fa7e9","observation_id":"d66fbb98-6649-487d-9971-27b1baaeac59","resolution":{"observed_at":"2026-08-10T23:06:55.791178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.767881Z","title":"Game-theoretic unlearnable example generator","venue":null,"work_id":"a4a9c9eb-48d1-4ba6-a443-312be89efb30","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.690281Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:c45b015a460a5e6b32fa4fe451160002b25f68d3285242d80539a084a91f64e3","observation_id":"b91433bb-1114-4490-8b39-47600a7907af","resolution":{"observed_at":"2026-08-10T23:06:55.773244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.750761Z","title":"Imageshortcutsqueezing:Counteringperturbativeavailabilitypoisons with compression","venue":null,"work_id":"bf7559b8-12c5-4144-86c5-3378d86d0ce0","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.695517Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4cbed446e8a5dccfe9a08f97f6bd551f4e463cb9f27415d899d95fc3c5c3eecd","observation_id":"23763478-118c-4810-a985-21018f2d9142","resolution":{"observed_at":"2026-08-10T23:06:55.756479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.733025Z","title":"Deep Learning Face Attributes in the Wild","venue":null,"work_id":"106f8322-1a04-472b-b08e-1f830f3b99c3","year":2015},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.700229Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:933b554af988767b2eda6de75246a1832bdcb756c63827b3d54e504af5c46e40","observation_id":"5a544c6b-b0d4-4f84-8928-7d4f2237b9b0","resolution":{"observed_at":"2026-08-10T23:06:55.738591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.715922Z","title":"Indiscriminate Data Poisoning Attacks on Neural Networks","venue":null,"work_id":"022168a7-bad3-465f-a5ef-3d2c6fa14214","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.705408Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:e87b435815ac61f1eef62fd6323efc176717cf8a0269e20258683c5f00fab24b","observation_id":"a9db3d7d-e21d-43dd-b3fe-5360f0c5fff1","resolution":{"observed_at":"2026-08-10T23:06:55.721467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.696516Z","title":"Exploring the Limits of Model-Targeted Indiscriminate Data Poisoning Attacks","venue":null,"work_id":"bfbba45c-2254-4ef8-8c36-7a6699dd5d5d","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.710795Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:8c3b8bfdbadfdd90cc52608b02d2440f702db8ab19cb4a93c464b866b26b7e32","observation_id":"fcf700ae-ea82-48fe-87e4-223d2fc9bc22","resolution":{"observed_at":"2026-08-10T23:06:55.702550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.677972Z","title":"Indiscriminate Data Poisoning Attacks on Pre-trained Fea- ture Extractors","venue":null,"work_id":"e2c8cc45-9d90-423d-b1e3-cb56f7404540","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.715501Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:1d978e3858331f8e08afe28803c7627ef796d933a04af8f2148935b00e44216b","observation_id":"defccd8e-3f55-4cd7-ab91-4938188710bd","resolution":{"observed_at":"2026-08-10T23:06:55.683600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.658790Z","title":"Towards Deep Learning Models Resis- tant to Adversarial Attacks","venue":null,"work_id":"9248327e-24f1-43ae-a842-d0f26f3ca0aa","year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.719754Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:648f2c54bbe68ece7b08bf225934b6448000dddbfcfd9a4e80f759a405f9defe","observation_id":"a232770d-4427-4200-888b-a47a5dacb535","resolution":{"observed_at":"2026-08-10T23:06:55.665307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.637157Z","title":"Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization","venue":null,"work_id":"d57af9b5-bcaf-445c-b5c0-f56f0f20bca4","year":2017},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.724053Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:5f02165aea8110a2d0db9fae2c5edc072bccbc97d0195875325b8b4e5e0ef39a","observation_id":"04e045b8-7724-474f-bbfa-f6ee007899bf","resolution":{"observed_at":"2026-08-10T23:06:55.643264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.619142Z","title":"Image super-resolution as a defense against adversarial attacks","venue":null,"work_id":"fa44b4cc-aae8-4aa2-995d-231935d01803","year":2019},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.728196Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:bc3c9bab9b5dd136b1e889201f598d14647c32c184074ee29215619a1ea148e2","observation_id":"edb01fef-0ace-4490-8e0e-47f520fc1f30","resolution":{"observed_at":"2026-08-10T23:06:55.625253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.602316Z","title":"Diffusion models for adversarial purification","venue":null,"work_id":"0cb0ba95-da8f-4c36-b4fa-df65edc9c086","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.732991Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:9d1769b432171ea64b062af0bc246257f8d2bf4708973cb90e805faf2b1c88fd","observation_id":"d9b3aece-d89b-4640-ab19-9af54ac96a92","resolution":{"observed_at":"2026-08-10T23:06:55.607415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.582711Z","title":"Cats and Dogs","venue":null,"work_id":"7a357e69-c7e5-4a54-82a0-b831ee6d6aa6","year":2012},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.738381Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:71870866e5263f70e0b75f48025d10f23e9b97cbbeacbaf9e5f50a6bbe3084c7","observation_id":"0f168767-3d2c-4609-89ec-bfda7124a90b","resolution":{"observed_at":"2026-08-10T23:06:55.589059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.563165Z","title":"PureGen: Universal Data Purifica- tion for Train-Time Poison Defense via Generative Model Dynamics","venue":null,"work_id":"be4fb412-ce0a-44a8-a6ca-20d6c6ad077b","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.743097Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:448bece44ea9ccd005b238ea6080b03cd911839e87753d2936c0693865389070","observation_id":"1ab0f587-6e9d-410e-a957-183d99b7b116","resolution":{"observed_at":"2026-08-10T23:06:55.569244Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.545534Z","title":"Learning the unlearnable: Adversarial augmentations suppress unlearnable example attacks","venue":null,"work_id":"3de108bf-7fd8-4d09-80b0-cafb682e64e5","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.747890Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:2816224d7ca85358e3a73109f95f87564034df4eb8d8b09f66d4b94d287f4130","observation_id":"9f2c3121-3424-44c3-a2c0-0c8e17936e98","resolution":{"observed_at":"2026-08-10T23:06:55.551677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.526553Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":"c4086fb3-95d0-49b7-8c84-a0284b556290","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.752653Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:ad671fe1f58c2e7e20f057d770df08b06d34a2c718de12db34ee11c3618b8417","observation_id":"73bfb833-dc90-45d5-b8fd-c6ec244805e8","resolution":{"observed_at":"2026-08-10T23:06:55.533339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.507310Z","title":"Data Poisoning Won’t Save You From Facial Recognition","venue":null,"work_id":"82d3d54f-e7ee-4b7f-beb6-e418fdd00e62","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.757191Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:6a5a687a2eba022a03ddd5a50601fdf79e45ff2161cbd26c6dbc4e423076da77","observation_id":"dcaa0438-5ce0-4951-940d-76a92d2c1811","resolution":{"observed_at":"2026-08-10T23:06:55.513717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.488765Z","title":"Transferable Unlearnable Examples","venue":null,"work_id":"de7aefc4-bdde-421a-8a56-8ae12bb395d2","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.762035Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:b5c211103e52919c7dd1d98a35a49d9483aefb478ba6c9e3402d87a08d45037f","observation_id":"79694fd3-21de-4254-8a11-5b885e87b970","resolution":{"observed_at":"2026-08-10T23:06:55.494155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.472242Z","title":"Diffusions, Markov processes, and martingales: Itô calculus","venue":null,"work_id":"9f3b0deb-0af6-4607-a15c-220d84a32f4a","year":2000},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.766501Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:b118e946892d942710856ede7e9d12b08e64bea5f01e391fd75b1ba1a9d6272c","observation_id":"0b19b302-0271-4144-8bfb-6316b332a2ea","resolution":{"observed_at":"2026-08-10T23:06:55.477221Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.456400Z","title":"High-Resolution Image Synthesis With Latent Diffusion Models","venue":null,"work_id":"989143f0-e240-4fad-8e1b-e4a703f0cc28","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.771048Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:5ca9551152c26f66e120168687926737f97c4de6e4b96ab505bc19434671dcb7","observation_id":"7a771009-78bf-4a7e-ab98-3321ee84d848","resolution":{"observed_at":"2026-08-10T23:06:55.461600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.440889Z","title":"Hidden trigger backdoor attacks","venue":null,"work_id":"42c174d5-4e8d-4e82-b74a-1d1927bfb2b4","year":2020},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.776645Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:ff1b1253377497916ecb95f62589dd53c93dd95de47bbd7ec17f1d1dd1ecdbec","observation_id":"89906d77-ffff-4a33-bebf-d3e6594f7a82","resolution":{"observed_at":"2026-08-10T23:06:55.445865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.424809Z","title":"Defense-GAN: Protecting Classifiers Against Adver- sarial Attacks Using Generative Models","venue":null,"work_id":"fd85f780-41b7-4f40-9a0c-7adb6f7fee00","year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.781777Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:bf57507475ff84c5089c9cb44eadd3eb15cfe3d8c5cd36567104fc1e4d51c584","observation_id":"c47d9492-4962-4dfd-80ba-fd8853812150","resolution":{"observed_at":"2026-08-10T23:06:55.430039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:54.787481Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.787481Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:602468d82f02ba6d443d7b715d509468d2ff07263f0c5b9686b1f580d923ca13","observation_id":"d87e944c-a2e6-48a6-a115-94ff2f0f7f7e","resolution":{"observed_at":"2026-08-10T23:06:54.787481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.397913Z","title":"Autoregressive Perturbations for Data Poisoning","venue":null,"work_id":"973b252a-2651-416c-b498-60933145dead","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.792244Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:a22f80bb7b53c2a79ce37501fca37cd4e0a49bb033df9c9373079e63cabe3a7e","observation_id":"2376f36d-5e12-4ebf-8708-2877a9d2c68f","resolution":{"observed_at":"2026-08-10T23:06:55.403108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.382038Z","title":"PoisonFrogs! Targeted Clean-Label Poisoning Attacks on Neural Networks","venue":null,"work_id":"abd6a947-e480-4606-9212-70d21d5177f5","year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.796894Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:1362c0d1ccc48758cbbf3b1306ea9b7f15b6f2cc723b6810de1e36c86e477db9","observation_id":"222075d7-2712-44c2-8264-05cfcee5b7a7","resolution":{"observed_at":"2026-08-10T23:06:55.387097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.366934Z","title":"Glaze: Protecting artists from style mimicry by{Text-to-Image} models","venue":null,"work_id":"90f8cc35-abdf-48bf-8c2a-4514742e02bf","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.801402Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:c76608d1f0c8550c34b13010dd167bc771cd38fc03921fc6dacbd4e35b60e090","observation_id":"68418654-c82e-45ba-ac1f-276ac234f51d","resolution":{"observed_at":"2026-08-10T23:06:55.371717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.351432Z","title":"Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models","venue":null,"work_id":"f4b5ad2e-655b-4e97-8b05-44aad802418a","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.805330Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:88bcf7eb4f44a1445af972f79afae8e24b40c17c8bb4e1d9fa5f2ca0d091f049","observation_id":"868480c0-881a-4aa6-8a52-7bd2f2d06466","resolution":{"observed_at":"2026-08-10T23:06:55.356213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.336185Z","title":"Fawkes: Protecting privacy against unauthorized deep learning models","venue":null,"work_id":"ec286ca3-7316-4879-b464-9b332838b323","year":2020},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.809607Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:6f8187ea98a88325d401fd11c2d60af9d46c8889a16ef54090350b3227611e27","observation_id":"c4dc887b-711e-4826-8481-e29424fcb95a","resolution":{"observed_at":"2026-08-10T23:06:55.341352Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.321090Z","title":"Online Adversarial Purification based on Self-supervised Learning","venue":null,"work_id":"cb61db57-6377-4426-8c26-0f8d2bf7c844","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.813646Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:12ff47b5680517d80060fa2bd47b962b74c65e36e5fd208cc722e0c836aab2ba","observation_id":"948c33af-3953-4d25-ac83-d0c044ebbcd1","resolution":{"observed_at":"2026-08-10T23:06:55.325991Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.305711Z","title":"Score-Based Gener- ative Modeling through Stochastic Differential Equations","venue":null,"work_id":"07a05428-ffae-4015-8ccd-0b574110e5af","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.817965Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:5a605b05be6f2bb76449fee4660433eb3292a47b1fcf2f8ff1fffa514c276670","observation_id":"6c5e4e1d-1595-498c-937b-28704dc97f53","resolution":{"observed_at":"2026-08-10T23:06:55.310726Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.290202Z","title":"Model-targeted poisoning attacks with provable convergence","venue":null,"work_id":"f79e9c71-93b6-42bd-8ce1-d0b98500b5f1","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.822465Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:2da89b6643a7d79767bfbb06b8f9a373046b2585d3895e584ca88d500c8ab091","observation_id":"2a84f290-16cf-4cf4-be5a-36f1bc4d38af","resolution":{"observed_at":"2026-08-10T23:06:55.295163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.274747Z","title":"Better safe than sorry: Preventing delusive adver- saries with adversarial training","venue":null,"work_id":"1daf25df-5345-483f-95dc-837c9d2b2059","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.827005Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:7aa77e18e0730a059106f7d601380abb492f1354700229d32407217064e8671c","observation_id":"7f67cec2-e63c-4c62-9430-51d3d893eaac","resolution":{"observed_at":"2026-08-10T23:06:55.279739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.259573Z","title":"Going deeper with image trans- formers","venue":null,"work_id":"95e31bca-8b7f-4487-a05e-1aa3cbca1f41","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.831516Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:06446c98fb982320c7b27ef25079cc28849b8add001a7070df115a8678313232","observation_id":"a809cca0-f750-4fc5-88ab-7fd1512dd346","resolution":{"observed_at":"2026-08-10T23:06:55.264459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.244415Z","title":"Spectral Signatures in Backdoor Attacks","venue":null,"work_id":"e7db0b8c-69f9-4c79-81ad-3f4da11ce002","year":2018},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.836417Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:e4f0f4db2355e764a4a0a640a589aa78e698ab230ba05233ad5946b894debf03","observation_id":"0bbd0987-93be-4016-9865-07dea0bb804f","resolution":{"observed_at":"2026-08-10T23:06:55.249289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.228751Z","title":"Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously","venue":null,"work_id":"cebb6a8b-65b7-4a88-a8fb-33cbdc3ae0aa","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.841125Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:45bad2674dc3f6fdc47373e805325f396fe38732ba046044fd8d80b4f6538369","observation_id":"1a41a67a-f8d4-460d-89b6-1858ea9d84d4","resolution":{"observed_at":"2026-08-10T23:06:55.233489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.213222Z","title":"Is Adversarial Training Really a Silver Bullet for Mitigating Data Poisoning?","venue":null,"work_id":"6b022a96-c8ca-49d2-b425-197cc6d2628e","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.845983Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:f296b4d21a3affb2b55e66416ba0af1c7db19d48af906df34e3f07050550f075","observation_id":"8780ef37-706c-4d19-ad48-39cc2390550f","resolution":{"observed_at":"2026-08-10T23:06:55.218512Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.197686Z","title":"One-Pixel Shortcut: On the Learning Preference of Deep Neural Networks","venue":null,"work_id":"2c22ae8c-62c4-4f09-8174-69f084ade577","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.851574Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:7c6c95a2bf469c826d505f2f86af17dababe7916d79452686c5bf9c0185701fa","observation_id":"0220a8ac-e932-4528-a697-c5a3be9a59c2","resolution":{"observed_at":"2026-08-10T23:06:55.202863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.13320","last_updated":"2024-05-02T02:25:39Z","snapshot_observed_at":"2026-08-19T14:28:52.695962Z","submitted_at":"2024-04-20T08:28:43Z","title":"Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.13320","snapshot_observed_at":"2026-08-10T23:06:54.856480Z","title":"Pixel is a barrier: Diffusion models are more adversarially robust than we think","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.856480Z"},"links":{"cited_paper":"/paper/2404.13320","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:aa82ce981aee62423bc77e5f79cea45f638b622c0e50ec34d7aa8f03099faf02","observation_id":"eadb3555-255a-4ab9-854f-34aa9133658a","resolution":{"observed_at":"2026-08-10T23:06:54.856480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1411.7923","last_updated":"2014-11-28T16:05:18Z","snapshot_observed_at":"2026-08-14T23:09:48.219510Z","submitted_at":"2014-11-28T16:05:18Z","title":"Learning Face Representation from Scratch","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.7923","snapshot_observed_at":"2026-08-10T23:06:54.862111Z","title":"Learning face representation from scratch","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.862111Z"},"links":{"cited_paper":"/paper/1411.7923","citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:292e95af5c5de4c5cd8167ec7fe2376ba13c43514d93868501c42830a30932e2","observation_id":"cad2ea5a-55d6-4c6c-9080-f3ee623888e5","resolution":{"observed_at":"2026-08-10T23:06:54.862111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.181830Z","title":"Adversarial purification with score-based generative models","venue":null,"work_id":"70ad61a4-d0e8-47d6-902c-bbeef5a31746","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.867123Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4da52c39920cc8d71ac9cdb84e1f97632e7a6b5b66d2bf5e8e8ee504eaf774d1","observation_id":"f34977b5-0e16-41c6-8ec0-b125cecce644","resolution":{"observed_at":"2026-08-10T23:06:55.186833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.165951Z","title":"Availabilityattackscreateshortcuts","venue":null,"work_id":"49a100ec-cdf9-4da7-9979-b6a7069e6116","year":2022},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.871732Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:97f935578406c889c5149de70575704e31173bf55505ec8feb586c286c83af84","observation_id":"5aca9155-ac7f-4088-84b0-8d703899aa4a","resolution":{"observed_at":"2026-08-10T23:06:55.170871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.149283Z","title":"Purify Unlearnable Examples via Rate-Constrained Variational Autoencoders","venue":null,"work_id":"6d48b3ec-dd1f-47f1-a211-d66a38cabf5c","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.876317Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:3a0f9f0aef639f92beeaa3f1e71b253618cc70d59e6a4a897fbfac0aa2771b49","observation_id":"6cc2c9be-2502-4ba4-a510-7359b03c2fea","resolution":{"observed_at":"2026-08-10T23:06:55.154866Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.132853Z","title":"Neural Tangent Generalization Attacks","venue":null,"work_id":"13b028b6-22b4-44d1-b4e0-ed4673bbc666","year":2021},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.880897Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:688b63895fb7d4e730a7cbc28b789ddd737f187126c2e8bbff4cf41ed21114d7","observation_id":"260d6c36-5d4e-467e-8f48-6090fed500af","resolution":{"observed_at":"2026-08-10T23:06:55.138385Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.115735Z","title":"Unlearnableclusters:Towardslabel- agnostic unlearnable examples","venue":null,"work_id":"4bcb8364-4d24-41fd-a8b2-304b0040d67e","year":2023},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.884837Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:558fe4acc21f7d07ebd08bb352a36dd17bf7f25b5392d476d06d3ceea5bd2be8","observation_id":"02ca2fcd-40ec-4b28-8c90-2989ac71fcbd","resolution":{"observed_at":"2026-08-10T23:06:55.121068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.096248Z","title":"Can protective perturbation safeguard personal data from being exploited by stable diffusion?","venue":null,"work_id":"50b94d84-e80e-46e7-80da-86ae418ede1d","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.889075Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:5e3575beb505a7af7556973e5dd8bb342739c589bb15480244d599f29753a412","observation_id":"a4758ee5-aaed-41ec-9d53-447ff1dc1197","resolution":{"observed_at":"2026-08-10T23:06:55.102004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.079648Z","title":"Denoising Diffusion Bridge Models","venue":null,"work_id":"8face21d-6809-4b7c-a0cb-ac35fb7c03f1","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.893856Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:2b85c7ada41906f4a107bc3b92b5db4a6fa2ea167a670dbeac5566b4af99c5cc","observation_id":"ccb68413-acd6-4509-ab58-e99cfec8b393","resolution":{"observed_at":"2026-08-10T23:06:55.084497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.062647Z","title":"Transferableclean-label poisoning attacks on deep neural nets","venue":null,"work_id":"b1b64478-d254-43fa-bdba-1237f4257672","year":2019},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.898236Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:4488177cc10c17667d18dde66d54eccec6fcf704db083b526743c12f194ce09f","observation_id":"f7a7d6f4-982c-4abe-8ac6-fe6fe6f6bed3","resolution":{"observed_at":"2026-08-10T23:06:55.068601Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.045758Z","title":"Detection and defense of unlearnable examples","venue":null,"work_id":"623a65b6-f131-4a9a-bf7d-367df1cdccbb","year":2024},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.903010Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:fe196555877d28d4b7cbe2f8665e37117b32212129c86fce862eb95978561c33","observation_id":"f3e5b438-c77d-4185-8d82-056af81ee86c","resolution":{"observed_at":"2026-08-10T23:06:55.051008Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:06:55.026143Z","title":"C.7 Mixture of Protection The mechanism P could possibly employ multiple availability attacks to protect data","venue":null,"work_id":"7009f388-195b-458e-9067-d37949df0476","year":null},"citing_paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection","version":2},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-10T23:06:54.908807Z"},"links":{"citing_paper":"/paper/2412.21061"},"observation_digest":"sha256:bde2201ed4d0822eb7f2b4aa962407a7163f2db43499135c964029b790e9a124","observation_id":"9c2a9e28-ec16-4027-b600-a9700ca584cc","resolution":{"observed_at":"2026-08-10T23:06:55.034033Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.21061","last_updated":"2025-05-14T04:17:54Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-19T14:02:25.617738Z","submitted_at":"2024-12-30T16:30:50Z","title":"BridgePure: Limited Protection Leakage Can Break Black-Box Data Protection"},"reference_resolution":{"displayed":79,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":0,"verified_fuzzy":71},"total_outbound_references":79},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 79 of 79 outbound references and 1 inbound Pith citation observation for arXiv:2412.21061."}