{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:6NAJK6P5JTIFASPUAURY7EFTSH","short_pith_number":"pith:6NAJK6P5","canonical_record":{"source":{"id":"1804.08757","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-04-23T21:57:28Z","cross_cats_sorted":[],"title_canon_sha256":"bbfa2079915390b1eae36c69628cb33ec1c356b53bcca1643eb9308b2116739f","abstract_canon_sha256":"e043e066ed0d80eb77c4d93031d7b028f250a6c8d2c5fa88eb195aba4b2f44ef"},"schema_version":"1.0"},"canonical_sha256":"f3409579fd4cd05049f405238f90b391e97651d648506a6b76ed4c7b5261ddb0","source":{"kind":"arxiv","id":"1804.08757","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.08757","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"arxiv_version","alias_value":"1804.08757v3","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.08757","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"pith_short_12","alias_value":"6NAJK6P5JTIF","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"6NAJK6P5JTIFASPU","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"6NAJK6P5","created_at":"2026-05-18T12:32:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:6NAJK6P5JTIFASPUAURY7EFTSH","target":"record","payload":{"canonical_record":{"source":{"id":"1804.08757","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-04-23T21:57:28Z","cross_cats_sorted":[],"title_canon_sha256":"bbfa2079915390b1eae36c69628cb33ec1c356b53bcca1643eb9308b2116739f","abstract_canon_sha256":"e043e066ed0d80eb77c4d93031d7b028f250a6c8d2c5fa88eb195aba4b2f44ef"},"schema_version":"1.0"},"canonical_sha256":"f3409579fd4cd05049f405238f90b391e97651d648506a6b76ed4c7b5261ddb0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:03:56.075731Z","signature_b64":"Uau+JyVK6fGWFbUJtbf7wkxqedcNIvLp9YdxrnfAx0masfqUWf/sN42CZKXak4soyzGCEyRowOGoefItpX5PAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f3409579fd4cd05049f405238f90b391e97651d648506a6b76ed4c7b5261ddb0","last_reissued_at":"2026-05-18T00:03:56.075053Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:03:56.075053Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1804.08757","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:03:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ijsyZ0DMhP96Qyc5DfW74BlG3b7t7v7IK5D6yE/0RT1mSlvy+mdb2hpgZ0e1eugTuqmP5C8xS9dSIC3jei3hAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:08:22.387897Z"},"content_sha256":"82ebefaf8cbbc5379e4a28c83dd91cfd397b31742af09b66cafdf59d7c28677b","schema_version":"1.0","event_id":"sha256:82ebefaf8cbbc5379e4a28c83dd91cfd397b31742af09b66cafdf59d7c28677b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:6NAJK6P5JTIFASPUAURY7EFTSH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Siamese Generative Adversarial Privatizer for Biometric Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Karol Piczak, Peter Kairouz, Ram Rajagopal, Tomasz Trzcinski, Witold Oleszkiewicz","submitted_at":"2018-04-23T21:57:28Z","abstract_excerpt":"State-of-the-art machine learning algorithms can be fooled by carefully crafted adversarial examples. As such, adversarial examples present a concrete problem in AI safety. In this work we turn the tables and ask the following question: can we harness the power of adversarial examples to prevent malicious adversaries from learning identifying information from data while allowing non-malicious entities to benefit from the utility of the same data? For instance, can we use adversarial examples to anonymize biometric dataset of faces while retaining usefulness of this data for other purposes, suc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.08757","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:03:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IZ4wwRpDmF1bSmILzZHPfx/o/Ci/3WIMNqQZdVXL990u+WBVqVXFzif9e4rmVIbc3vstQuYDGmq8MxLF9oCNAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:08:22.388634Z"},"content_sha256":"8a63e7519fbac45645ef0ad267d2aad3db4befa9a93cb3d7a52a52227f896398","schema_version":"1.0","event_id":"sha256:8a63e7519fbac45645ef0ad267d2aad3db4befa9a93cb3d7a52a52227f896398"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6NAJK6P5JTIFASPUAURY7EFTSH/bundle.json","state_url":"https://pith.science/pith/6NAJK6P5JTIFASPUAURY7EFTSH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6NAJK6P5JTIFASPUAURY7EFTSH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T22:08:22Z","links":{"resolver":"https://pith.science/pith/6NAJK6P5JTIFASPUAURY7EFTSH","bundle":"https://pith.science/pith/6NAJK6P5JTIFASPUAURY7EFTSH/bundle.json","state":"https://pith.science/pith/6NAJK6P5JTIFASPUAURY7EFTSH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6NAJK6P5JTIFASPUAURY7EFTSH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:6NAJK6P5JTIFASPUAURY7EFTSH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e043e066ed0d80eb77c4d93031d7b028f250a6c8d2c5fa88eb195aba4b2f44ef","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-04-23T21:57:28Z","title_canon_sha256":"bbfa2079915390b1eae36c69628cb33ec1c356b53bcca1643eb9308b2116739f"},"schema_version":"1.0","source":{"id":"1804.08757","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.08757","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"arxiv_version","alias_value":"1804.08757v3","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.08757","created_at":"2026-05-18T00:03:56Z"},{"alias_kind":"pith_short_12","alias_value":"6NAJK6P5JTIF","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"6NAJK6P5JTIFASPU","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"6NAJK6P5","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:8a63e7519fbac45645ef0ad267d2aad3db4befa9a93cb3d7a52a52227f896398","target":"graph","created_at":"2026-05-18T00:03:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"State-of-the-art machine learning algorithms can be fooled by carefully crafted adversarial examples. As such, adversarial examples present a concrete problem in AI safety. In this work we turn the tables and ask the following question: can we harness the power of adversarial examples to prevent malicious adversaries from learning identifying information from data while allowing non-malicious entities to benefit from the utility of the same data? For instance, can we use adversarial examples to anonymize biometric dataset of faces while retaining usefulness of this data for other purposes, suc","authors_text":"Karol Piczak, Peter Kairouz, Ram Rajagopal, Tomasz Trzcinski, Witold Oleszkiewicz","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-04-23T21:57:28Z","title":"Siamese Generative Adversarial Privatizer for Biometric Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.08757","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82ebefaf8cbbc5379e4a28c83dd91cfd397b31742af09b66cafdf59d7c28677b","target":"record","created_at":"2026-05-18T00:03:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e043e066ed0d80eb77c4d93031d7b028f250a6c8d2c5fa88eb195aba4b2f44ef","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-04-23T21:57:28Z","title_canon_sha256":"bbfa2079915390b1eae36c69628cb33ec1c356b53bcca1643eb9308b2116739f"},"schema_version":"1.0","source":{"id":"1804.08757","kind":"arxiv","version":3}},"canonical_sha256":"f3409579fd4cd05049f405238f90b391e97651d648506a6b76ed4c7b5261ddb0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f3409579fd4cd05049f405238f90b391e97651d648506a6b76ed4c7b5261ddb0","first_computed_at":"2026-05-18T00:03:56.075053Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:03:56.075053Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Uau+JyVK6fGWFbUJtbf7wkxqedcNIvLp9YdxrnfAx0masfqUWf/sN42CZKXak4soyzGCEyRowOGoefItpX5PAQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:03:56.075731Z","signed_message":"canonical_sha256_bytes"},"source_id":"1804.08757","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82ebefaf8cbbc5379e4a28c83dd91cfd397b31742af09b66cafdf59d7c28677b","sha256:8a63e7519fbac45645ef0ad267d2aad3db4befa9a93cb3d7a52a52227f896398"],"state_sha256":"1f8cf5bebca1b76c7c6eefa56b40dd561ce40464b45d373a39604ade2572106e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wb7N5d1ORKpwQoDjmqArkjTfpZFy2IPspxXZyBwzTQm+DSwsYjiZO14CMj1aEiM0AV6X2ENGU22114k2bq1sAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T22:08:22.392077Z","bundle_sha256":"64018f3c3943c386bb1f9ae028e65dde5d940ed6403e2853114f0f13d558bc13"}}