{"as_of":"2026-08-22T15:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9ad47e4189f36b7577c4034314d054858dc8c8ba92056a5bd9db6355f88070cf","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:05:25.745630Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.08255/citation-record","integrity":"/paper/2505.08255/integrity","json":"/paper/2505.08255/citation-record.json","paper":"/paper/2505.08255"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.438405Z","title":null,"venue":null,"work_id":"9a54879c-6a2d-4494-98f4-8b9da2873c15","year":2023},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.537787Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:15085693f4bf1a1bbb8bb19ab79a9093b71412727aee65ec8b9e3177f433480f","observation_id":"a7716078-7aa1-443a-835c-c6541301f6f2","resolution":{"observed_at":"2026-08-15T22:05:26.442850Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.423695Z","title":"A new backdoor attack in cnns by training set corruption without label poisoning","venue":null,"work_id":"077f013b-7ba5-43d3-aa5a-c2a05c039a32","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.542778Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:d6f182421776adac2cdbd1127efb1b79d2e7fe3df7a039ef406979ff52d5fa85","observation_id":"f04c9f7d-5769-4489-86f8-d3e1685bf565","resolution":{"observed_at":"2026-08-15T22:05:26.428183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.409524Z","title":"Evading deepfake-image detectors with white-and black-box attacks","venue":null,"work_id":"9b80184e-60ea-4181-80ef-546a72496091","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.547244Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:5e0bd13d412ef5deb9ba6f36dfda4b8794441bd39b6b403c0f36d3d03513b607","observation_id":"a44c4ebb-0dfd-4759-a0e6-033a5fae2fab","resolution":{"observed_at":"2026-08-15T22:05:26.414320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-15T22:05:25.551663Z","title":"Targeted backdoor attacks on deep learning systems using data poisoning.arXiv preprint arXiv:1712.05526,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.551663Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:49a27276576abdce9a13aae8d7dec12565f068269290e11c504af2009aa48c10","observation_id":"0bd2a609-3a2a-4766-896d-9aefc439fcd3","resolution":{"observed_at":"2026-08-15T22:05:25.551663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.394703Z","title":"Deepfakes and the new disinformation war: The coming age of post-truth geopoli- tics.Foreign Aff., 98:147, 2019","venue":null,"work_id":"f1a9e8d0-7399-4cd9-930f-f1cafad382d7","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.555939Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:6704c8bf2d38972b0f20e4f6ea4bde79b436f6fb9b765b30262a2867a2245940","observation_id":"ef191f50-1da9-4379-b70a-670e8c07b6f8","resolution":{"observed_at":"2026-08-15T22:05:26.399748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.380346Z","title":"Five pitfalls when assessing synthetic med- ical images with reference metrics","venue":null,"work_id":"325f707b-f360-447a-8edb-5b7a1f143f4b","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.560157Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:2d7ec6e21e027f6f3aa8cca2cf87247e1a2bcfdfdb37e5335269d11ecd106a38","observation_id":"05cbc377-a616-4c0c-88c7-8846390c616d","resolution":{"observed_at":"2026-08-15T22:05:26.385272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.07397","last_updated":"2020-10-28T03:48:28Z","snapshot_observed_at":"2026-07-06T09:28:36.954658Z","submitted_at":"2020-06-12T18:15:55Z","title":"The DeepFake Detection Challenge (DFDC) Dataset","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.07397","snapshot_observed_at":"2026-08-15T22:05:25.564329Z","title":"The deepfake detection challenge (dfdc) dataset.arXiv preprint arXiv:2006.07397, 2020","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.564329Z"},"links":{"cited_paper":"/paper/2006.07397","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:9b424819185698839c270f28ed421191ae49bde596d70e9086b6f80689b81918","observation_id":"a13328e5-8118-4f0b-804a-007680a07c5b","resolution":{"observed_at":"2026-08-15T22:05:25.564329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.366936Z","title":"Leveraging fre- quency analysis for deep fake image recognition","venue":null,"work_id":"d9bbfa5c-5613-4608-933d-85705abd34da","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.569168Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:a04992a73ac395dc685cff94b034efce0f37d5cc9d904de28ab20d86d7f053eb","observation_id":"fa6a2b29-356c-4d08-a032-a654bfdc552b","resolution":{"observed_at":"2026-08-15T22:05:26.371258Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.353658Z","title":"Are deepfakes concerning? analyzing conversations of deepfakes on reddit and exploring societal implications","venue":null,"work_id":"04b4c529-606d-465d-b599-5d6f05c1af57","year":2022},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.573156Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:3f56d7e99a5efb633213dbb4790e912b6a6b7396898e8319b1425f0c4f52c0b2","observation_id":"c6baa863-7b41-4e30-8984-7daa342f1b2a","resolution":{"observed_at":"2026-08-15T22:05:26.358199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.340685Z","title":"Privacy and security concerns in generative ai: A compre- hensive survey.IEEE Access, 2024","venue":null,"work_id":"875e7550-ab5c-4035-a99e-cf8861f7d6ee","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.577188Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:7a7e0f0bb52970858891736c4e5f64e05a576eca5724dc08d1ebb8e07f917808","observation_id":"b11e7ad1-a837-4966-9993-3e4eca5ec057","resolution":{"observed_at":"2026-08-15T22:05:26.345009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-15T22:05:25.581375Z","title":"Explaining and harnessing adversarial examples.arXiv preprint arXiv:1412.6572, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.581375Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:ad73e625a33d1efeb78556df80755a692ba2147cfc0c2094ebd46599304b3dc6","observation_id":"e2247a59-61fc-4749-994c-6dba05a96d8d","resolution":{"observed_at":"2026-08-15T22:05:25.581375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-08-12T15:43:59.037380Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-15T22:05:25.585685Z","title":"Bad- nets: Identifying vulnerabilities in the machine learning model supply chain.arXiv preprint arXiv:1708.06733, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.585685Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:07e8b707476e853eef01d026f9fab85e4363a62010c7287c43bd2d7a30549e94","observation_id":"c9e2d69b-23cb-4930-b813-805ac8d59355","resolution":{"observed_at":"2026-08-15T22:05:25.585685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.327519Z","title":"Controllable guide-space for generalizable face forgery detection","venue":null,"work_id":"aaf14b78-b626-464a-b719-779466b054f3","year":2023},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.590075Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:f07acd0330df98c8094dbabfdb133c81c3ee5704546c44a4650b036da39a90eb","observation_id":"32e21eb0-1488-4d39-abcc-d7eb529511c7","resolution":{"observed_at":"2026-08-15T22:05:26.331915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.314312Z","title":"The social im- pact of deepfakes, 2021","venue":null,"work_id":"0e4a0d0d-ec75-407c-b623-0aa967b2e226","year":2021},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.594106Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:dd1a055febe02a4c1415cbfc5b3ffd44a415622a3a8e86354050ef8ccf35ef14","observation_id":"bd855793-8508-4b3b-a0e7-5776ec49ec02","resolution":{"observed_at":"2026-08-15T22:05:26.318367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.301393Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"832adf6f-5e3c-493d-b128-67f4d1a55b54","year":2016},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.598162Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:5b4f4c87275f36024c5de2b06c9e83268fba67c6d409a1c282dd79f3de16cf86","observation_id":"dfcb51d7-c778-4133-b199-abaa004b7aef","resolution":{"observed_at":"2026-08-15T22:05:26.305402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.288039Z","title":"Evading deepfake detectors via adversarial statistical consistency","venue":null,"work_id":"0e3694da-0eac-4b47-a03d-a81228b04145","year":2023},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.602121Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:ebd72a81c49ac3f53e709741b3f9635def4b8ae702b0a77b7f08a94724784bd4","observation_id":"2685c7e8-0fa4-4dd8-815e-cc7a42d8340f","resolution":{"observed_at":"2026-08-15T22:05:26.292397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.04861","last_updated":"2017-04-17T03:57:34Z","snapshot_observed_at":"2026-08-20T09:32:02.065929Z","submitted_at":"2017-04-17T03:57:34Z","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.04861","snapshot_observed_at":"2026-08-15T22:05:25.606032Z","title":"Mobilenets: Efficient convolutional neu- ral networks for mobile vision applications.arXiv preprint arXiv:1704.04861, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.606032Z"},"links":{"cited_paper":"/paper/1704.04861","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:27d5b76c7d5346a149925bc11207c2954d1daaf2b351039dc18ba12cfafe7c81","observation_id":"6229a18a-097a-4a28-8ff6-32a62d94d5b6","resolution":{"observed_at":"2026-08-15T22:05:25.606032Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.274271Z","title":"Densely connected convolutional net- works","venue":null,"work_id":"12cc6603-a6b9-4f68-8080-ddee9541851f","year":2017},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.610320Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:af77dcab46ace07102bb64591acef6854b3c277e918384c34138f3c1da10b71c","observation_id":"0330035a-fbfc-4fbd-9918-91c438375593","resolution":{"observed_at":"2026-08-15T22:05:26.278734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2009.09213","last_updated":"2024-03-21T16:24:05Z","snapshot_observed_at":"2026-08-16T01:14:25.343410Z","submitted_at":"2020-09-19T11:26:01Z","title":"Dodging DeepFake Detection via Implicit Spatial-Domain Notch Filtering","version":6},"cited_work":{"arxiv_id":"2009.09213","doi":null,"metadata_source":"pith","pith_arxiv_id":"2009.09213","snapshot_observed_at":"2026-08-15T22:05:25.833524Z","title":"Dodging DeepFake Detection via Implicit Spatial-Domain Notch Filtering","venue":"cs.CV","work_id":"0546189b-34cf-4a76-8e0a-fbb30f59183d","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.614501Z"},"links":{"cited_paper":"/paper/2009.09213","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:a5aee83a84860048e7b13458d53669f97a649f842651d21308c6ef5f53a20130","observation_id":"d66db625-b016-4424-83f6-31d59bed94a9","resolution":{"observed_at":"2026-08-15T22:05:25.839899Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.260349Z","title":"Deepvi- sion: Deepfakes detection using human eye blinking pattern","venue":null,"work_id":"fd96c641-7793-4d53-bc87-6c36859d57c7","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.618962Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:5081f77f918973db2911618beb4973f6c870b6e8d81a5b48fb3836d2fc84e146","observation_id":"c356dc15-d876-4dde-a98a-83500a0ba9e2","resolution":{"observed_at":"2026-08-15T22:05:26.265044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.245758Z","title":"Deepfakes in fi- nance: Unraveling the threat landscape and detection chal- lenges","venue":null,"work_id":"378cb8f1-1246-44e8-bc87-176520bae838","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.623018Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:55784efc4538fd7dc90aaf4953eb80280ac0896d481e2bb3cf240499fc4b468b","observation_id":"47123095-8e37-492c-8e2a-6c30e8a10143","resolution":{"observed_at":"2026-08-15T22:05:26.250519Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.231838Z","title":"Overcoming catastrophic forgetting in neu- ral networks.Proceedings of the national academy of sci- ences, 114(13):3521–3526, 2017","venue":null,"work_id":"a8678136-248a-43e6-8755-9a4d7ef1fc68","year":2017},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.626954Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:394db52e5fdb250f51eec65fadb045805ba3d43fb5f569d138ffac298137af8e","observation_id":"9cc4c53c-2128-48f7-8b7e-840170a8b130","resolution":{"observed_at":"2026-08-15T22:05:26.236511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.218379Z","title":"Face x-ray for more gen- eral face forgery detection","venue":null,"work_id":"ea9d4dfe-dfbf-4b34-904b-12c5c253c4c8","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.631028Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:9fe99b72bd0e4ccec53e00b23629b1a1016741916d37b78e1bf7fd9477c75c8f","observation_id":"e3e5bb35-a41f-4156-b3ab-b805abf9fa48","resolution":{"observed_at":"2026-08-15T22:05:26.222749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.203937Z","title":"Exposing deepfake videos by detecting face warping artifacts","venue":null,"work_id":"5edcc50c-9a2a-44b3-92d5-495675214eb7","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.634983Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:c31bbdc04bf7ac404c288d8c3e802a7a565b2aa0dd32c3ffaff495441095b684","observation_id":"94f5db1a-0346-4648-81e3-fb2c82f4e4f0","resolution":{"observed_at":"2026-08-15T22:05:26.208230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.190371Z","title":"Celeb-df: A large-scale challenging dataset for deep- fake forensics","venue":null,"work_id":"5bd1b368-65a8-40d3-815f-2f9e5f63353e","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.638997Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:2973948bdd6a7ad75e7aedebd228ccd3baa7b47c90f071ee70384b7b2938eca7","observation_id":"9e1d9c49-9114-4f62-88e8-235a621cd587","resolution":{"observed_at":"2026-08-15T22:05:26.194778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.643039Z","title":"Invisible backdoor attack with sample- specific triggers","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.643039Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:34a074a3b57744577eea25e702abd5ef00fe077c6c6b841b429dd9a8e2a820ef","observation_id":"43e47d4f-bd5c-4129-81ca-5ac186a11895","resolution":{"observed_at":"2026-08-15T22:05:25.643039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.168335Z","title":"Anti-backdoor learning: Training clean models on poisoned data.Advances in Neural Information Processing Systems, 34:14900–14912, 2021","venue":null,"work_id":"18b8e83d-4c49-4089-a3fb-6c0815c3b2df","year":2021},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.647484Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:2ef246fc8e18fced54d67407622405997376c81b19d35f676e5959098d8135c7","observation_id":"ac25b34e-2989-47f5-a937-138fa91a5e36","resolution":{"observed_at":"2026-08-15T22:05:26.172648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.05930","last_updated":"2021-01-27T06:23:25Z","snapshot_observed_at":"2026-08-20T12:07:20.247530Z","submitted_at":"2021-01-15T01:35:22Z","title":"Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.05930","snapshot_observed_at":"2026-08-15T22:05:25.651469Z","title":"Neural attention distillation: Erasing backdoor triggers from deep neural networks.arXiv preprint arXiv:2101.05930, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.651469Z"},"links":{"cited_paper":"/paper/2101.05930","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:6f95508427f0897abc163877da2e82f05e7ebd9975c62735fdeb43fda6892a18","observation_id":"c16c1988-c2d2-44e7-a5f5-683068746487","resolution":{"observed_at":"2026-08-15T22:05:25.651469Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-16T22:50:36.518159Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-15T22:05:25.655801Z","title":"Poisoned forgery face: Towards backdoor attacks on face forgery detection.arXiv preprint arXiv:2402.11473, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.655801Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:0a2d638be5cd8fbb90cb240c8e60de15bb12cd820b5d68416a4c11b2c37a69e4","observation_id":"d73bae9c-f8cf-4ded-a7a2-9a3ef217d7d0","resolution":{"observed_at":"2026-08-15T22:05:25.655801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.154700Z","title":"Preserving fairness generalization in deepfake detection","venue":null,"work_id":"448797a5-fd89-4d96-9371-ab8e04891e74","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.660092Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:5fe3ec13a6ed99fc24c7a25c44a87c5e4aec3296f6cc1d6a371dff224daf0b3c","observation_id":"81325304-be8d-4b2c-9aa3-94b0556203b5","resolution":{"observed_at":"2026-08-15T22:05:26.159166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.141139Z","title":"Forgery-aware adaptive transformer for generalizable synthetic image detection","venue":null,"work_id":"c15ea2fc-c56b-49a2-891a-7ea20efc807b","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.664122Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:aae7e7ad89bcf678d0fc73f23e348dc75c58e23b614f2bdf8e969c543c17afca","observation_id":"ce53e047-f761-488c-bca8-c041a98f520a","resolution":{"observed_at":"2026-08-15T22:05:26.145845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.667986Z","title":"Fine- pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.667986Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:f067ff32812b79f18684d4752a0256f0e294e274b05025af178dcca543782272","observation_id":"e30ee5f8-b0cb-4b45-af7c-af3c939952b9","resolution":{"observed_at":"2026-08-15T22:05:25.667986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.119042Z","title":"Gener- alizing face forgery detection with high-frequency features","venue":null,"work_id":"b3d3af28-7d4b-428e-ab9f-004591dbfa57","year":2021},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.672177Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:25ea4d75c66ad8aaa47a3ff9ca704c26573a40eefb619de95a48c7b28e20b99e","observation_id":"70821d0d-6464-49f5-9bbf-140de258cf49","resolution":{"observed_at":"2026-08-15T22:05:26.123495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.104843Z","title":"Pytorch: An im- perative style, high-performance deep learning library.Ad- vances in neural information processing systems, 2019","venue":null,"work_id":"ba8d96de-ce46-443d-a9ac-76c929b9f70c","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.676077Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:97b5ee009b36fb31cf17f10ef77958bc77a9ebab8989e2f28158a2aaafd8da00","observation_id":"3edf2e24-39d5-440d-a4e8-49a9e23a9806","resolution":{"observed_at":"2026-08-15T22:05:26.109404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.091694Z","title":"Deeprhythm: Ex- posing deepfakes with attentional visual heartbeat rhythms","venue":null,"work_id":"c5596300-2b57-458c-8df6-56b510c8ff96","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.680232Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:66b4da7a8555420beebbb20d1c890973bc0006afb40eed8423351cc5dd075dda","observation_id":"b8b62620-e396-4e64-8b61-6c828d6ccafd","resolution":{"observed_at":"2026-08-15T22:05:26.095973Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.078159Z","title":"Thinking in frequency: Face forgery detection by min- ing frequency-aware clues","venue":null,"work_id":"f80571cb-242f-4d6f-9044-fe7e34fb33eb","year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.684135Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:864fcd9e839402d1a4c0dc050ada727bdea591a22d8080792c808529317172b5","observation_id":"fa6e26e7-5bfc-466a-b88e-a5ff5491c680","resolution":{"observed_at":"2026-08-15T22:05:26.082780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.688112Z","title":"Thinking in frequency: Face forgery detection by min- ing frequency-aware clues","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.688112Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:1f24ab6838e71bc7da05e24a151423fe57d4cbe9f4d555bf24ef890f7e5cecb6","observation_id":"69d0cb45-e8c9-4fde-aaf6-0ca3b12af090","resolution":{"observed_at":"2026-08-15T22:05:25.688112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.692204Z","title":"U- net: Convolutional networks for biomedical image segmen- tation","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.692204Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:c06db38909397cf93d611333d3bf0db01720573d955723daac33c2b28772a656","observation_id":"be0159c7-5082-456f-acce-3d230cd905ae","resolution":{"observed_at":"2026-08-15T22:05:25.692204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.048037Z","title":"Faceforen- sics++: Learning to detect manipulated facial images","venue":null,"work_id":"4bb0fddb-1190-4c3a-9a34-27f4203914eb","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.695952Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:d497726ca35d370ba2b5e3ec9fdc8139056e3769e9c4d6dda0f2fc3d0e642617","observation_id":"3e9f9f90-d955-4f6a-b362-26b6377d92c7","resolution":{"observed_at":"2026-08-15T22:05:26.052416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.034457Z","title":"Detecting deep- fakes with self-blended images","venue":null,"work_id":"714dea1c-e89b-4ed9-9c8b-0e2d4e7b2389","year":2022},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.699819Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:edaca9060f5ddf86cd77bf1fed0c9ac94e19be17b7edc0fda5a3fc67de0a2b54","observation_id":"077f9a86-edf5-4c1a-8e92-9571011abc8d","resolution":{"observed_at":"2026-08-15T22:05:26.038827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-15T22:05:25.703729Z","title":"Intriguing properties of neural networks.arXiv preprint arXiv:1312.6199, 2013","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.703729Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:183a79ce0d9b676fc8476d2c915fd949d2877eabe1b8e6ea76b5a47162b036d9","observation_id":"7d5484f8-48a1-4a6a-ad96-ae0c0855fcc5","resolution":{"observed_at":"2026-08-15T22:05:25.703729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:26.020699Z","title":"Rethinking the up-sampling op- erations in cnn-based generative network for generalizable deepfake detection","venue":null,"work_id":"b6c043f7-f620-420b-990f-6134a0b4b9da","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.707991Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:50eca2117d9a7daaa805a92a33dd1f14909aa01ea78a220bfa2b0ea03bc370fc","observation_id":"191d5412-63ba-4711-9b4e-1c795ecffcf7","resolution":{"observed_at":"2026-08-15T22:05:26.025361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.712236Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.712236Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:b5c5077146cd5173e83f581e9ccd0088a67977eec8f3f5133ddf3343d1b42829","observation_id":"c5a174f4-51e2-426b-b3c5-6cbf7db43ef6","resolution":{"observed_at":"2026-08-15T22:05:25.712236Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.716728Z","title":"Stegastamp: Invisible hyperlinks in physical photographs","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.716728Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:b682ebffc9567ae69b46a5c6e92464e9636d2926244697b02a28b9f430514408","observation_id":"f3fad8f4-6a11-41e7-b877-4d1b5a77b71c","resolution":{"observed_at":"2026-08-15T22:05:25.716728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-21T01:12:38.607259Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-15T22:05:25.720714Z","title":"Label-consistent backdoor attacks.arXiv preprint arXiv:1912.02771, 2019","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.720714Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:8fa54235b00e7273274ce89ba1e42b4980879dc333869194d1f35795d7ed7078","observation_id":"b9904f0a-9590-4528-bc55-1a1bc5417b8e","resolution":{"observed_at":"2026-08-15T22:05:25.720714Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.987178Z","title":"Deepfake detection: A comprehensive sur- vey from the reliability perspective.ACM Comput","venue":null,"work_id":"a8b20c09-af4a-435e-8fa3-1d4f9e49e7b6","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.724881Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:7e0f49a172da2de6b1a6b447038fdbd12da0c446b56926f114a38ce9d28d83c3","observation_id":"0f52cc54-258d-4dd8-ab65-d66232708f07","resolution":{"observed_at":"2026-08-15T22:05:25.992772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.972073Z","title":"Backdoor- bench: A comprehensive benchmark of backdoor learning","venue":null,"work_id":"9666991a-4835-431e-b415-5b1fc8947041","year":2022},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.728785Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:3dcd2c7a5f4bc094b24f9d5ce59ad61f65349b103e7a1b8c10c071cd8f3c004d","observation_id":"6db4f7e2-c43d-45ab-8024-9e03865c63a4","resolution":{"observed_at":"2026-08-15T22:05:25.977045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.958761Z","title":"Transcending forgery specificity with latent space augmentation for generalizable deepfake detection","venue":null,"work_id":"fe54a0d8-63b8-4975-b820-5db5cd5b63d3","year":2024},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.732812Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:7cded15acb6e3e9c38cd7b70f5dba76cf0c1885d4e32d9371089a1d3bcd3b5c6","observation_id":"24ea379a-02ce-4d26-b44f-bfc7f889e291","resolution":{"observed_at":"2026-08-15T22:05:25.963079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.945089Z","title":"Exposing deep fakes using inconsistent head poses","venue":null,"work_id":"dcd4b7c5-0ec9-4f6c-9f30-b24d89810065","year":2019},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.736805Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:cdea3459ad3133f0153289fb1078a4ebcb2e592d4e06e11d853777c74d1283b7","observation_id":"1b19d6ce-e2c2-4067-9aa1-472b4da05420","resolution":{"observed_at":"2026-08-15T22:05:25.949506Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.931612Z","title":"The unreasonable effectiveness of deep features as a perceptual metric","venue":null,"work_id":"7ccc4078-0dcf-44f0-a048-fe3997bb757a","year":2018},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.740811Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:a818f969ac5358ad64448169690bbc03e27cb8369c6c470cba7176a60c7ff950","observation_id":"e36573d9-6efb-4ba6-80e1-3c59f0d4829e","resolution":{"observed_at":"2026-08-15T22:05:25.935947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T22:05:25.917901Z","title":"Learning self-consistency for deepfake detection","venue":null,"work_id":"c68db0bd-614f-424b-8f68-01c03c71e327","year":null},"citing_paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T22:05:25.745630Z"},"links":{"citing_paper":"/paper/2505.08255"},"observation_digest":"sha256:95dc8309602a14634f8cf076c072817958c62bdd7b770cceaa687ea96edc21a9","observation_id":"27e14a14-f15d-4a7d-980a-17fb9d2671cc","resolution":{"observed_at":"2026-08-15T22:05:25.922380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.08255","last_updated":"2025-05-13T06:09:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-20T20:49:49.300438Z","submitted_at":"2025-05-13T06:09:34Z","title":"Where the Devil Hides: Deepfake Detectors Can No Longer Be Trusted"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":1,"verified_fuzzy":34},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2505.08255."}