Depth Gives a False Sense of Privacy: LLM Internal States Inversion | Paper Citation Record

Observation ea37b436-ff53-42d1-8993-37710875278d · outbound

This paper cites X fact checks elon musk after he blasts apple-openai partnership as ‘creepy’ privacy nightmare.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion X fact checks elon musk after he blasts apple-openai partnership as ‘creepy’ privacy nightmare

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.903942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 46b6bffa-4e34-4913-910e-15ca5dd25884 · outbound

This paper cites The Llama 3 Herd of Models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion The Llama 3 Herd of Models

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:10.414155Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d01c5245-c947-403f-ac51-3e7da29c53fe · outbound

This paper cites SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion SplitLoRA: A Split Parameter-Efficient Fine-Tuning Framework for Large Language Models

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:10.535416Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c9aced09-2ceb-4d4a-bd43-d744fa837bbb · outbound

This paper cites Helix: Dis- tributed serving of large language models via max-flow on heterogeneous gpus.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Helix: Dis- tributed serving of large language models via max-flow on heterogeneous gpus

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.859918Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e898c408-63b2-49da-88bb-a1d6336d847d · outbound

This paper cites EdgeShard: Efficient LLM Inference via Collaborative Edge Computing.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion EdgeShard: Efficient LLM Inference via Collaborative Edge Computing

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:10.798785Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ba00045-3762-48fc-a70c-f63b3e7d0ec3 · outbound

This paper cites an unresolved cited work.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unresolved cited work

Reference 6

Resolution: unresolved; raw_fallback, observed 2026-08-06T15:18:16.817197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e311e620-8645-458c-9d3a-cc7b409fce0b · outbound

This paper cites The internal state of an LLM knows when it‘s lying.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion The internal state of an LLM knows when it‘s lying

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:11.059923Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ec32b3cd-25df-46be-95d8-56000bbd1bf8 · outbound

This paper cites INSIDE: LLMs’ internal states retain the power of hallucination detection.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion INSIDE: LLMs’ internal states retain the power of hallucination detection

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.786599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 57c272ee-b7cf-441f-a1da-c1da8f264b33 · outbound

This paper cites Unsupervised real-time hallucination detection based on the internal states of large language models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unsupervised real-time hallucination detection based on the internal states of large language models

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.740533Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 5457c67f-15e2-47b0-b867-cd6dcd06eb3d · outbound

This paper cites Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMs.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMs

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:11.457417Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0430b251-0c01-405d-aa74-f5d5405903f4 · outbound

This paper cites Physics of Language Models: Part 2.1, Grade-School Math and the Hidden Reasoning Process.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Physics of Language Models: Part 2.1, Grade-School Math and the Hidden Reasoning Process

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:11.562851Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 24787934-f6cc-4630-b1bd-907232ad4328 · outbound

This paper cites Safety Layers in Aligned Large Language Models: The Key to LLM Security.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Safety Layers in Aligned Large Language Models: The Key to LLM Security

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:11.656139Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c1b7f17-19c6-43d3-be0f-362314390db6 · outbound

This paper cites Analyzing and editing inner mechanisms of backdoored language 353 models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Analyzing and editing inner mechanisms of backdoored language 353 models

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.713723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 56852d66-f954-4ae3-ae65-89b2409bf478 · outbound

This paper cites The philosopher’s stone: Trojaning plugins of large language models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion The philosopher’s stone: Trojaning plugins of large language models

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.676773Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 431b9a5c-b632-4067-80a3-e8f713e2a3ad · outbound

This paper cites Representation Engineering: A Top-Down Approach to AI Transparency.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Representation Engineering: A Top-Down Approach to AI Transparency

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:11.985626Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f917fc5b-144f-4fdf-a89b-bc3bf07112c4 · outbound

This paper cites Discovering latent knowledge in language models without supervision.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Discovering latent knowledge in language models without supervision

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.637735Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 954faefb-c6f3-4801-9887-964397d20c4f · outbound

This paper cites States Hidden in Hidden States: Implicit Discrete State Representations Emerge in LLMs' Hidden States.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion States Hidden in Hidden States: Implicit Discrete State Representations Emerge in LLMs' Hidden States

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.227492Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2606ca8b-2a75-43e6-bc16-78a1cab6c900 · outbound

This paper cites Informa- tion leakage in embedding models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Informa- tion leakage in embedding models

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.607671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation f728d9fe-11ec-4134-a263-0ee489819bd9 · outbound

This paper cites Text embeddings reveal (almost) as much as text.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Text embeddings reveal (almost) as much as text

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.577797Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation fac6124f-54e7-4c72-b5ec-51fe7b44ad70 · outbound

This paper cites Morris, and Vitaly Shmatikov.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Morris, and Vitaly Shmatikov

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.551489Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 90da299d-d454-49ec-a478-e67960d1005f · outbound

This paper cites Deep learning and the information bottleneck principle.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Deep learning and the information bottleneck principle

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.851007Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e49b102c-b45c-4d1c-8011-22c7df26c3bd · outbound

This paper cites Privacy risks of general-purpose language models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Privacy risks of general-purpose language models

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.888220Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 967164c8-6488-436c-a749-dcaaa8905e19 · outbound

This paper cites Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Sentence Embedding Leaks More Information than You Expect: Generative Embedding Inversion Attack to Recover the Whole Sentence

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.894923Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4791b59f-abac-47be-921e-bac97e85adb8 · outbound

This paper cites Language model inversion.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Language model inversion

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.518646Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 6a7aff0e-4229-4d2d-8a50-8608a06617c8 · outbound

This paper cites TAG: gradient attack on transformer-based lan- guage models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion TAG: gradient attack on transformer-based lan- guage models

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.460402Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 44fede27-adfc-4a43-933e-232ea587f7b4 · outbound

This paper cites Uncovering gradient inversion risks in prac- tical language model training.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Uncovering gradient inversion risks in prac- tical language model training

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.424279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 01a82efd-e28b-4748-9121-3bdf592266ce · outbound

This paper cites Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirectionally enhanced attack.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirectionally enhanced attack

Reference 27

Resolution: malformed identifier; no resolver link, observed 2026-08-06T15:18:12.945529Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3347f4b6-adc8-46c2-8f9b-99334ca951b5 · outbound

This paper cites How alignment and jail- break work: Explain LLM safety through intermediate hidden states.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion How alignment and jail- break work: Explain LLM safety through intermediate hidden states

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.954668Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9df434a8-eaa9-4b4c-80d8-2e3bb166f7a3 · outbound

This paper cites Enterprise privacy at openai - does ope- nai review my business data? https://openai.com/ enterprise-privacy/, 2024.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Enterprise privacy at openai - does ope- nai review my business data? https://openai.com/ enterprise-privacy/, 2024

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.386450Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3e31651f-662e-4707-a556-30b145009e71 · outbound

This paper cites Petals: Collaborative inference and fine-tuning of large mod- els.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Petals: Collaborative inference and fine-tuning of large mod- els

Reference 30

Resolution: verified exact; doi, observed 2026-08-06T15:18:13.566641Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 61381ed4-455c-41cc-9e64-99f392de3e76 · outbound

This paper cites Shad- ownet: A secure and efficient on-device model inference system for convolutional neural networks.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Shad- ownet: A secure and efficient on-device model inference system for convolutional neural networks

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.985874Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0bfd5174-c108-4d3a-a493-d87c3ae3cec4 · outbound

This paper cites Zhang, C.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Zhang, C

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.357745Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 27b1e83a-2e18-46da-ac61-f9f4464f1362 · outbound

This paper cites Large Dual Encoders Are Generalizable Retrievers.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Large Dual Encoders Are Generalizable Retrievers

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.013704Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0cbbfb8c-93c5-4775-966a-a27af48d13aa · outbound

This paper cites an unresolved cited work.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unresolved cited work

Reference 34

Resolution: unresolved; raw_fallback, observed 2026-08-06T15:18:16.312554Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 7aa5887c-b8cb-484a-be61-7b79921b2e47 · outbound

This paper cites Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challenges.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Authorship Attribution in the Era of LLMs: Problems, Methodologies, and Challenges

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.046655Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 376faf45-53e5-4be9-bd3a-dd3d5b8cc66c · outbound

This paper cites LLM internal states reveal hallucination risk faced with a query.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion LLM internal states reveal hallucination risk faced with a query

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.266871Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d3a107a7-cf65-4209-9205-d1ce1f02b612 · outbound

This paper cites Get my drift? catching llm task drift with activation deltas.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Get my drift? catching llm task drift with activation deltas

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.221659Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b7868292-8313-4b23-85c2-4579f3d45038 · outbound

This paper cites an unresolved cited work.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unresolved cited work

Reference 38

Resolution: unresolved; raw_fallback, observed 2026-08-06T15:18:16.179572Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b6366e9f-6abb-43e2-8def-51aae006a329 · outbound

This paper cites Dataset condensation with distribution matching.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Dataset condensation with distribution matching

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.126402Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 71e414fb-89eb-4d52-a710-b6ff434af4a9 · outbound

This paper cites Qwen2.5-Coder Technical Report.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Qwen2.5-Coder Technical Report

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.123343Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2207f9f2-2a4d-4536-9dcb-a54c9af0e94b · outbound

This paper cites Bio-medical: A high- performance biomedical language model.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Bio-medical: A high- performance biomedical language model

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.074939Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation b60ca049-91d1-4e14-81d1-0c7858af943c · outbound

This paper cites Introducing llama 3.1: Our most capable mod- els to date.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Introducing llama 3.1: Our most capable mod- els to date

Reference 42

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:16.036630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9f4c58cf-41ad-4534-9156-3ef2e73dc072 · outbound

This paper cites C-pack: Packaged resources to advance general chinese embedding, 2023.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion C-pack: Packaged resources to advance general chinese embedding, 2023

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.165866Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e0ecbe91-0bd4-4ae6-aa68-b2aa61e9a5f2 · outbound

This paper cites MTEB: Massive Text Embedding Benchmark.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion MTEB: Massive Text Embedding Benchmark

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.180242Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eada05d3-ab42-4c59-ad2c-a69ad79ce667 · outbound

This paper cites Massive text em- bedding benchmark (mteb) leaderboard.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Massive text em- bedding benchmark (mteb) leaderboard

Reference 45

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.964164Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 4816f1d6-6ad5-4b26-9b07-41042e20fa1d · outbound

This paper cites Decoupled weight decay regularization.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Decoupled weight decay regularization

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.205759Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 82516d1b-3e31-4bd7-86b6-3684fb3c4b56 · outbound

This paper cites Oliphant, Matt Haberland, Tyler Reddy, David Cournapeau, Evgeni Burovski, Pearu Peterson, Warren Weckesser, Jonathan Bright, Stéfan J.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Oliphant, Matt Haberland, Tyler Reddy, David Cournapeau, Evgeni Burovski, Pearu Peterson, Warren Weckesser, Jonathan Bright, Stéfan J

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.218201Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a42e5683-dc8d-4084-b57c-9e4415b4f083 · outbound

This paper cites Ai medical dataset,.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Ai medical dataset,

Reference 48

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.875387Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation c47542ea-44fd-41ec-9265-3ccdcbb8a263 · outbound

This paper cites mental_health_counseling_conversations (revision 9015341), 2024.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion mental_health_counseling_conversations (revision 9015341), 2024

Reference 49

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.803098Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 77fb41d9-0453-4b03-bc44-3c9379c72421 · outbound

This paper cites Wizardcoder: Empowering code large language models with evol-instruct, 2023.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Wizardcoder: Empowering code large language models with evol-instruct, 2023

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.258810Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 05b12bb2-8694-46b7-b70a-e7fcdf2df938 · outbound

This paper cites Measuring coding challenge competence with apps.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Measuring coding challenge competence with apps

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.499831Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 15d58311-d5bb-4fbf-ae28-2271bf6b054e · outbound

This paper cites an unresolved cited work.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unresolved cited work

Reference 52

Resolution: unresolved; raw_fallback, observed 2026-08-06T15:18:15.841795Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 42f018a3-bed0-423f-9fa7-008ef425bf5a · outbound

This paper cites The magical effect of the bias term: Rope + bias = better length extrapolation.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion The magical effect of the bias term: Rope + bias = better length extrapolation

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.409207Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9cb62f25-d901-4f70-82f7-2c4ad1693ed3 · outbound

This paper cites Rush, and Thomas Wolf.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Rush, and Thomas Wolf

Reference 54

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.370746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 0d235904-3e23-4900-916b-6ccc4126d7c8 · outbound

This paper cites QLoRA: Efficient finetuning of quan- tized LLMs.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion QLoRA: Efficient finetuning of quan- tized LLMs

Reference 55

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.342891Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 2362bd7d-6d5d-4af4-b7a7-33693d3efe68 · outbound

This paper cites Big code models leaderboard.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Big code models leaderboard

Reference 56

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.454181Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 5a11c775-6f0f-49cf-9517-65e4f9e0adab · outbound

This paper cites Measuring massive multitask language understanding.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Measuring massive multitask language understanding

Reference 57

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.327844Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ef28114c-8527-4a71-a472-214e6b95498e · outbound

This paper cites GAN you see me? enhanced data reconstruction attacks against split infer- ence.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion GAN you see me? enhanced data reconstruction attacks against split infer- ence

Reference 58

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.249652Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 007ca4be-51d9-48a7-becc-81e3e4946c92 · outbound

This paper cites Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirection- ally enhanced attack.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unveiling the vulnerability of private fine-tuning in split-based frameworks for large language models: A bidirection- ally enhanced attack

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.225632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation c398fff8-78c2-4120-b45d-481af1ae8102 · outbound

This paper cites Exploring the limits of transfer learning with a unified text-to-text transformer.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Exploring the limits of transfer learning with a unified text-to-text transformer

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.320143Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22172b8d-a74f-4943-8a7c-0061febce836 · outbound

This paper cites Input Reconstruction Attack against Vertical Federated Large Language Models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Input Reconstruction Attack against Vertical Federated Large Language Models

Reference 61

Resolution: verified exact; local_arxiv, observed 2026-08-06T15:18:14.045437Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 78a86351-427b-4420-9dd1-00079048df00 · outbound

This paper cites A first look at efficient and secure on-device llm inference against kv leakage, 2024.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion A first look at efficient and secure on-device llm inference against kv leakage, 2024

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.178852Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation e19bcb69-35eb-481b-8a9f-fed084f44616 · outbound

This paper cites I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.141589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation f31256db-70de-40af-bcb7-d7a64a86190e · outbound

This paper cites Learn what you want to unlearn: Unlearning inver- sion attacks against machine unlearning.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Learn what you want to unlearn: Unlearning inver- sion attacks against machine unlearning

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.351062Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 75819577-18b7-4a2a-ae80-c09aebbe2827 · outbound

This paper cites Prompt Inference Attack on Distributed Large Language Model Inference Frameworks.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Prompt Inference Attack on Distributed Large Language Model Inference Frameworks

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.401749Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cae81fb2-160f-4f15-93bd-aceba23fc9ca · outbound

This paper cites Strengthening vm isolation with in- tegrity protection and more.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Strengthening vm isolation with in- tegrity protection and more

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.105085Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 82d06373-da11-488c-84d9-31bccb24cc2d · outbound

This paper cites Confidential Compute on NVIDIA Hopper H100.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Confidential Compute on NVIDIA Hopper H100

Reference 67

Resolution: verified fuzzy; raw_fallback, observed 2026-08-06T15:18:15.049885Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d9b29448-37b0-4d41-91c4-f6961f66f055 · outbound

This paper cites Prompt Inversion Attack against Collaborative Inference of Large Language Models.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Prompt Inversion Attack against Collaborative Inference of Large Language Models

Reference 68

Resolution: verified exact; raw_fallback, observed 2026-08-06T15:18:13.992964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 805db670-a3e7-4673-afc7-824a63ae0361 · outbound

This paper cites Contrasting Adversarial Perturbations: The Space of Harmless Perturbations.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Contrasting Adversarial Perturbations: The Space of Harmless Perturbations

Reference 72

Resolution: verified exact; local_arxiv, observed 2026-08-06T15:18:13.740633Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3631b4a7-ef11-4577-a1a9-c930e95ac110 · outbound

This paper cites an unresolved cited work.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion Unresolved cited work

Reference 2021

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.916947Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db8f0af6-b897-4bb5-90cf-b9ce095dec5d · outbound

This paper cites doi: 10.18653/v1/2023.emnlp-main.765.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion doi: 10.18653/v1/2023.emnlp-main.765

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:12.624266Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a4f1c573-a3f2-408f-a771-7b4d1639a46e · outbound

This paper cites doi: 10.18653/v1/2024.blackboxnlp-1.6.

Depth Gives a False Sense of Privacy: LLM Internal States Inversion doi: 10.18653/v1/2024.blackboxnlp-1.6

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-06T15:18:13.071579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers