{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4Q654H2RCREX6D4DVOQSXNRQ7V","short_pith_number":"pith:4Q654H2R","canonical_record":{"source":{"id":"2310.06549","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-10T11:51:12Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"10bbde45fb43a77cd13eca17287b77774123616a9ce891a19b0336049911039e","abstract_canon_sha256":"615bc331f35de11c6fd1974bf8b2747e6d7ef0c1f53db36f9ae58c6f6c275c27"},"schema_version":"1.0"},"canonical_sha256":"e43dde1f5114497f0f83aba12bb630fd779f6085f645fd09439c1f5d8bd22db3","source":{"kind":"arxiv","id":"2310.06549","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.06549","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"arxiv_version","alias_value":"2310.06549v5","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.06549","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_12","alias_value":"4Q654H2RCREX","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_16","alias_value":"4Q654H2RCREX6D4D","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_8","alias_value":"4Q654H2R","created_at":"2026-07-05T08:40:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4Q654H2RCREX6D4DVOQSXNRQ7V","target":"record","payload":{"canonical_record":{"source":{"id":"2310.06549","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-10T11:51:12Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"10bbde45fb43a77cd13eca17287b77774123616a9ce891a19b0336049911039e","abstract_canon_sha256":"615bc331f35de11c6fd1974bf8b2747e6d7ef0c1f53db36f9ae58c6f6c275c27"},"schema_version":"1.0"},"canonical_sha256":"e43dde1f5114497f0f83aba12bb630fd779f6085f645fd09439c1f5d8bd22db3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:40:56.120155Z","signature_b64":"LpQzORGYmHmVpPANvQlbmMTruNJBvTssXcW/3QsN2wwxybX4l6cCw36wW2jFJFs0RX+y3inezHkUERBM7zshAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e43dde1f5114497f0f83aba12bb630fd779f6085f645fd09439c1f5d8bd22db3","last_reissued_at":"2026-07-05T08:40:56.119704Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:40:56.119704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.06549","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:40:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GYtyybmBEPqS8PuNhDuayF5Y3FM/JCASpZXAInIx2qmjK3LW7Hd12ED2KONMIFjmRwiZY1moAWOiKzKyrbDQBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T14:04:50.011614Z"},"content_sha256":"c9ad8219c49881d3195474f2332df05990dcfe447b00fc371f81f9a1a288988e","schema_version":"1.0","event_id":"sha256:c9ad8219c49881d3195474f2332df05990dcfe447b00fc371f81f9a1a288988e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4Q654H2RCREX6D4DVOQSXNRQ7V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Dominik Hintersdorf, Kristian Kersting, Lukas Struppek","submitted_at":"2023-10-10T11:51:12Z","abstract_excerpt":"Label smoothing -- using softened labels instead of hard ones -- is a widely adopted regularization method for deep learning, showing diverse benefits such as enhanced generalization and calibration. Its implications for preserving model privacy, however, have remained unexplored. To fill this gap, we investigate the impact of label smoothing on model inversion attacks (MIAs), which aim to generate class-representative samples by exploiting the knowledge encoded in a classifier, thereby inferring sensitive information about its training data. Through extensive analyses, we uncover that traditi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.06549","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.06549/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:40:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JCgJ8mLDRDnmzcPjrgArbkFznScIosVu1tTu2rIV9Qq4KF8YIxKaJ1ar0R84Sq7ppHmd6cIEYS64gpUBW9BPAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T14:04:50.012115Z"},"content_sha256":"f0b70d52decb78f1dd8e58f785eff4ba4ae6e3dd33e741ab2c40e6d059326d46","schema_version":"1.0","event_id":"sha256:f0b70d52decb78f1dd8e58f785eff4ba4ae6e3dd33e741ab2c40e6d059326d46"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/bundle.json","state_url":"https://pith.science/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T14:04:50Z","links":{"resolver":"https://pith.science/pith/4Q654H2RCREX6D4DVOQSXNRQ7V","bundle":"https://pith.science/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/bundle.json","state":"https://pith.science/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4Q654H2RCREX6D4DVOQSXNRQ7V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4Q654H2RCREX6D4DVOQSXNRQ7V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"615bc331f35de11c6fd1974bf8b2747e6d7ef0c1f53db36f9ae58c6f6c275c27","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-10T11:51:12Z","title_canon_sha256":"10bbde45fb43a77cd13eca17287b77774123616a9ce891a19b0336049911039e"},"schema_version":"1.0","source":{"id":"2310.06549","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.06549","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"arxiv_version","alias_value":"2310.06549v5","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.06549","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_12","alias_value":"4Q654H2RCREX","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_16","alias_value":"4Q654H2RCREX6D4D","created_at":"2026-07-05T08:40:56Z"},{"alias_kind":"pith_short_8","alias_value":"4Q654H2R","created_at":"2026-07-05T08:40:56Z"}],"graph_snapshots":[{"event_id":"sha256:f0b70d52decb78f1dd8e58f785eff4ba4ae6e3dd33e741ab2c40e6d059326d46","target":"graph","created_at":"2026-07-05T08:40:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.06549/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Label smoothing -- using softened labels instead of hard ones -- is a widely adopted regularization method for deep learning, showing diverse benefits such as enhanced generalization and calibration. Its implications for preserving model privacy, however, have remained unexplored. To fill this gap, we investigate the impact of label smoothing on model inversion attacks (MIAs), which aim to generate class-representative samples by exploiting the knowledge encoded in a classifier, thereby inferring sensitive information about its training data. Through extensive analyses, we uncover that traditi","authors_text":"Dominik Hintersdorf, Kristian Kersting, Lukas Struppek","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-10T11:51:12Z","title":"Be Careful What You Smooth For: Label Smoothing Can Be a Privacy Shield but Also a Catalyst for Model Inversion Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.06549","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c9ad8219c49881d3195474f2332df05990dcfe447b00fc371f81f9a1a288988e","target":"record","created_at":"2026-07-05T08:40:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"615bc331f35de11c6fd1974bf8b2747e6d7ef0c1f53db36f9ae58c6f6c275c27","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-10-10T11:51:12Z","title_canon_sha256":"10bbde45fb43a77cd13eca17287b77774123616a9ce891a19b0336049911039e"},"schema_version":"1.0","source":{"id":"2310.06549","kind":"arxiv","version":5}},"canonical_sha256":"e43dde1f5114497f0f83aba12bb630fd779f6085f645fd09439c1f5d8bd22db3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e43dde1f5114497f0f83aba12bb630fd779f6085f645fd09439c1f5d8bd22db3","first_computed_at":"2026-07-05T08:40:56.119704Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:40:56.119704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LpQzORGYmHmVpPANvQlbmMTruNJBvTssXcW/3QsN2wwxybX4l6cCw36wW2jFJFs0RX+y3inezHkUERBM7zshAw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:40:56.120155Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.06549","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c9ad8219c49881d3195474f2332df05990dcfe447b00fc371f81f9a1a288988e","sha256:f0b70d52decb78f1dd8e58f785eff4ba4ae6e3dd33e741ab2c40e6d059326d46"],"state_sha256":"bdb8a34ceed0a5714097e20d368179bb3b7d94ee35a2102748b38724b34e5ab8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fciJ1udSiKlw+qbgWknGB7k1ztHbr8AYl/63njv42FKx/ZNg4iShW+AQL3SE8NKIJmWQDDOkKaD1U7qS3DvSDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T14:04:50.016787Z","bundle_sha256":"b4434fe90eabcf024d402222612d96bcb0beb7f5250fe75d1b44eb98907bd484"}}