{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4Z2C6JZ43JA3G4GZCG6ZWU4EXZ","short_pith_number":"pith:4Z2C6JZ4","canonical_record":{"source":{"id":"2309.11751","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-21T03:24:30Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"ef85f94575b4e9f6164251b701bdebd547fa8ac34bedcaa7c996acaa73c48e96","abstract_canon_sha256":"8be5842a28f877ee7288a88fd396905c4172d3cddd1a085b4770034df4fb718f"},"schema_version":"1.0"},"canonical_sha256":"e6742f273cda41b370d911bd9b5384be67126482607c826ec09e42793e86463a","source":{"kind":"arxiv","id":"2309.11751","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11751","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11751v2","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11751","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_12","alias_value":"4Z2C6JZ43JA3","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_16","alias_value":"4Z2C6JZ43JA3G4GZ","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_8","alias_value":"4Z2C6JZ4","created_at":"2026-07-05T07:01:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4Z2C6JZ43JA3G4GZCG6ZWU4EXZ","target":"record","payload":{"canonical_record":{"source":{"id":"2309.11751","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-21T03:24:30Z","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"title_canon_sha256":"ef85f94575b4e9f6164251b701bdebd547fa8ac34bedcaa7c996acaa73c48e96","abstract_canon_sha256":"8be5842a28f877ee7288a88fd396905c4172d3cddd1a085b4770034df4fb718f"},"schema_version":"1.0"},"canonical_sha256":"e6742f273cda41b370d911bd9b5384be67126482607c826ec09e42793e86463a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:01:05.787530Z","signature_b64":"k2bUTNqdqWVrLJLNdauSIbiciSMdk1N4IoDogjVVn1AcBNzsFTeMA8aJVvD5QNd+oUawBeVJ/oVfy2In3j8KBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e6742f273cda41b370d911bd9b5384be67126482607c826ec09e42793e86463a","last_reissued_at":"2026-07-05T07:01:05.787039Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:01:05.787039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.11751","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m5t7x2YEUnoHmVnfdhtuKgMNnwGXVbLqaHdNuRNsAADKXm6bCz20M7J5kqtbkuExXkZtMWbqug5DZ0eflGW9AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:15:44.442483Z"},"content_sha256":"56c40697b93a32b50df2bc85ebdb60182fb872490305ca0c4615ec6cd4b3485f","schema_version":"1.0","event_id":"sha256:56c40697b93a32b50df2bc85ebdb60182fb872490305ca0c4615ec6cd4b3485f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4Z2C6JZ43JA3G4GZCG6ZWU4EXZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How Robust is Google's Bard to Adversarial Image Attacks?","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Hang Su, Huanran Chen, Jiawei Chen, Jun Zhu, Xiao Yang, Yichi Zhang, Yinpeng Dong, Yu Tian, Zhengwei Fang","submitted_at":"2023-09-21T03:24:30Z","abstract_excerpt":"Multimodal Large Language Models (MLLMs) that integrate text and other modalities (especially vision) have achieved unprecedented performance in various multimodal tasks. However, due to the unsolved adversarial robustness problem of vision models, MLLMs can have more severe safety and security risks by introducing the vision inputs. In this work, we study the adversarial robustness of Google's Bard, a competitive chatbot to ChatGPT that released its multimodal capability recently, to better understand the vulnerabilities of commercial MLLMs. By attacking white-box surrogate vision encoders or"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11751","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.11751/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BqVqV0sd7VO8es8j5xgcYTlGyrH3L8GOhYasH2Mrnnl4Uxawdn1DiXJr+GCY8dtCVt44tId/NXHzBp1DBi4pBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:15:44.443144Z"},"content_sha256":"1c98added6b966ac06a1675f753dbd31344f49f8bcb7d4f53255d569cbc8d32e","schema_version":"1.0","event_id":"sha256:1c98added6b966ac06a1675f753dbd31344f49f8bcb7d4f53255d569cbc8d32e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/bundle.json","state_url":"https://pith.science/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:15:44Z","links":{"resolver":"https://pith.science/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ","bundle":"https://pith.science/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/bundle.json","state":"https://pith.science/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4Z2C6JZ43JA3G4GZCG6ZWU4EXZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4Z2C6JZ43JA3G4GZCG6ZWU4EXZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8be5842a28f877ee7288a88fd396905c4172d3cddd1a085b4770034df4fb718f","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-21T03:24:30Z","title_canon_sha256":"ef85f94575b4e9f6164251b701bdebd547fa8ac34bedcaa7c996acaa73c48e96"},"schema_version":"1.0","source":{"id":"2309.11751","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.11751","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"arxiv_version","alias_value":"2309.11751v2","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.11751","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_12","alias_value":"4Z2C6JZ43JA3","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_16","alias_value":"4Z2C6JZ43JA3G4GZ","created_at":"2026-07-05T07:01:05Z"},{"alias_kind":"pith_short_8","alias_value":"4Z2C6JZ4","created_at":"2026-07-05T07:01:05Z"}],"graph_snapshots":[{"event_id":"sha256:1c98added6b966ac06a1675f753dbd31344f49f8bcb7d4f53255d569cbc8d32e","target":"graph","created_at":"2026-07-05T07:01:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.11751/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal Large Language Models (MLLMs) that integrate text and other modalities (especially vision) have achieved unprecedented performance in various multimodal tasks. However, due to the unsolved adversarial robustness problem of vision models, MLLMs can have more severe safety and security risks by introducing the vision inputs. In this work, we study the adversarial robustness of Google's Bard, a competitive chatbot to ChatGPT that released its multimodal capability recently, to better understand the vulnerabilities of commercial MLLMs. By attacking white-box surrogate vision encoders or","authors_text":"Hang Su, Huanran Chen, Jiawei Chen, Jun Zhu, Xiao Yang, Yichi Zhang, Yinpeng Dong, Yu Tian, Zhengwei Fang","cross_cats":["cs.AI","cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-21T03:24:30Z","title":"How Robust is Google's Bard to Adversarial Image Attacks?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.11751","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:56c40697b93a32b50df2bc85ebdb60182fb872490305ca0c4615ec6cd4b3485f","target":"record","created_at":"2026-07-05T07:01:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8be5842a28f877ee7288a88fd396905c4172d3cddd1a085b4770034df4fb718f","cross_cats_sorted":["cs.AI","cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2023-09-21T03:24:30Z","title_canon_sha256":"ef85f94575b4e9f6164251b701bdebd547fa8ac34bedcaa7c996acaa73c48e96"},"schema_version":"1.0","source":{"id":"2309.11751","kind":"arxiv","version":2}},"canonical_sha256":"e6742f273cda41b370d911bd9b5384be67126482607c826ec09e42793e86463a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e6742f273cda41b370d911bd9b5384be67126482607c826ec09e42793e86463a","first_computed_at":"2026-07-05T07:01:05.787039Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:01:05.787039Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k2bUTNqdqWVrLJLNdauSIbiciSMdk1N4IoDogjVVn1AcBNzsFTeMA8aJVvD5QNd+oUawBeVJ/oVfy2In3j8KBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:01:05.787530Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.11751","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:56c40697b93a32b50df2bc85ebdb60182fb872490305ca0c4615ec6cd4b3485f","sha256:1c98added6b966ac06a1675f753dbd31344f49f8bcb7d4f53255d569cbc8d32e"],"state_sha256":"52899a329f6c81e6ef66e3832ccdb1454a642c1db07da8d392cd85a6a28ba2a6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"L4wVgWQ1uL7XIA52/PEOItfIX0NsqD4QCKyP0faLZYAc1xYNN+gEobBuGj7fHsqHC3SrkKdaW3E0bLVVHLCzCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:15:44.448757Z","bundle_sha256":"33d9328bc6d21507a4abba33a600134c8c4595623ca9a496ed64a65aa93e7c66"}}