{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5CSAC4UIZQ3LGSHX2736WGVZT3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a"},"schema_version":"1.0","source":{"id":"2301.03118","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"arxiv_version","alias_value":"2301.03118v2","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.03118","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_12","alias_value":"5CSAC4UIZQ3L","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_16","alias_value":"5CSAC4UIZQ3LGSHX","created_at":"2026-07-05T08:30:28Z"},{"alias_kind":"pith_short_8","alias_value":"5CSAC4UI","created_at":"2026-07-05T08:30:28Z"}],"graph_snapshots":[{"event_id":"sha256:6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402","target":"graph","created_at":"2026-07-05T08:30:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.03118/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we describe how to plant novel types of backdoors in any facial recognition model based on the popular architecture of deep Siamese neural networks. These backdoors force the system to err only on natural images of specific persons who are preselected by the attacker, without controlling their appearance or inserting any triggers. For example, we show how such a backdoored system can classify any two images of a particular person as different people, or any two images of a particular pair of persons as the same person, with almost no effect on the correctness of its decisions fo","authors_text":"Adi Shamir, Irad Zehavi, Roee Nitzan","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title":"Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.03118","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f","target":"record","created_at":"2026-07-05T08:30:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1989434a4f3ddb8770d8d0ef2ac1744b2748f35b01403abad61c2958ecb1efa8","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-01-08T23:11:00Z","title_canon_sha256":"1a8cca98ba59cdeb608d4f5243d9d99acab925bb6797abff0e3ba947ff5aa94a"},"schema_version":"1.0","source":{"id":"2301.03118","kind":"arxiv","version":2}},"canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e8a4017288cc36b348f7d7f7eb1ab99ef86231a91f1b31fa0c50b1950db64661","first_computed_at":"2026-07-05T08:30:28.304279Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:30:28.304279Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qJDNLXek4qrEDr2QAT8WUdOPYyLv8/Zp75rMQXb9smsHSM+lOj3Iqp8w9NnGLGVRm7JEwcq1oi1PGGpHPnevBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:30:28.304721Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.03118","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ebe2c6155f251c7f5f934f74fa453bf23b2de6e130275554400bdec1bc01f67f","sha256:6a4f803b87fbe4cbc42bb461eb8f703add9f439663b92dc0250e23fe1343c402"],"state_sha256":"634e9f0297c9ee0524f5844db601cb7a1f60c64ecacff322558e44ff146efbde"}