{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:B66SESDKVHGJDSZG2ES5576EG6","short_pith_number":"pith:B66SESDK","canonical_record":{"source":{"id":"2310.16152","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T19:50:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"38ffa088a77eac576d063ba4b38b45da7c2aafd2535b295207c6aab07ef89bce","abstract_canon_sha256":"1017115222841a5f82993ac52d15050c65af07ddbee28c85e3b43ba8f2c88e0a"},"schema_version":"1.0"},"canonical_sha256":"0fbd22486aa9cc91cb26d125deffc437a5868dea229e7de279099cbee63bb57a","source":{"kind":"arxiv","id":"2310.16152","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16152","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16152v5","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16152","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"B66SESDKVHGJ","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"B66SESDKVHGJDSZG","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"B66SESDK","created_at":"2026-07-21T01:20:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:B66SESDKVHGJDSZG2ES5576EG6","target":"record","payload":{"canonical_record":{"source":{"id":"2310.16152","kind":"arxiv","version":5},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T19:50:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"38ffa088a77eac576d063ba4b38b45da7c2aafd2535b295207c6aab07ef89bce","abstract_canon_sha256":"1017115222841a5f82993ac52d15050c65af07ddbee28c85e3b43ba8f2c88e0a"},"schema_version":"1.0"},"canonical_sha256":"0fbd22486aa9cc91cb26d125deffc437a5868dea229e7de279099cbee63bb57a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T01:20:30.561104Z","signature_b64":"PGqSko01Pv3zkR3oQhc/zlP+00NGonZd9hZJOsTLOXBSEgMkPws+EVWWdVEOdXyMgIC1tXJ/3nUkjxn6LxH+Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0fbd22486aa9cc91cb26d125deffc437a5868dea229e7de279099cbee63bb57a","last_reissued_at":"2026-07-21T01:20:30.560161Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T01:20:30.560161Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.16152","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T01:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/bvanHgBldXwQnBy5QQdOQL5jUBXUJwVOtTshM79s03PYFDUNTC9N9UrFzSkwILuwNpd3t4uwsD97M4whRnACA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:32:57.449422Z"},"content_sha256":"d4eea1f518840fe331d61f77f42fbead3b7a0ebd5c44a6116ca47022eb66a5b7","schema_version":"1.0","event_id":"sha256:d4eea1f518840fe331d61f77f42fbead3b7a0ebd5c44a6116ca47022eb66a5b7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:B66SESDKVHGJDSZG2ES5576EG6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Gradient-Free Privacy Leakage in Federated Language Models through Selective Weight Tampering","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Kang Gu, Md Rafi Ur Rashid, Najrin Sultana, Shagufta Mehnaz, Vishnu Asutosh Dasu","submitted_at":"2023-10-24T19:50:01Z","abstract_excerpt":"Federated learning (FL) has become a key component in various language modeling applications such as machine translation, next-word prediction, and medical record analysis. These applications are trained on datasets from many FL participants that often include privacy-sensitive data, such as healthcare records, phone/credit card numbers, login credentials, etc. Although FL enables computation without necessitating clients to share their raw data, existing works show that privacy leakage is still probable in federated language models. In this paper, we present two novel findings on the leakage "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16152","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.16152/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T01:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wPSmoCAsKPcd+z0FByFU/ro2dtPJUrD8SecYhQummtffH6Uz0y9ujE5WBNOhC2GX68pLthz85ZMt0FPTj2n1Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:32:57.449996Z"},"content_sha256":"9d4997742821dadb204937548e29cd30c053d4c78e999982426513a681b0feca","schema_version":"1.0","event_id":"sha256:9d4997742821dadb204937548e29cd30c053d4c78e999982426513a681b0feca"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B66SESDKVHGJDSZG2ES5576EG6/bundle.json","state_url":"https://pith.science/pith/B66SESDKVHGJDSZG2ES5576EG6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B66SESDKVHGJDSZG2ES5576EG6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T06:32:57Z","links":{"resolver":"https://pith.science/pith/B66SESDKVHGJDSZG2ES5576EG6","bundle":"https://pith.science/pith/B66SESDKVHGJDSZG2ES5576EG6/bundle.json","state":"https://pith.science/pith/B66SESDKVHGJDSZG2ES5576EG6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B66SESDKVHGJDSZG2ES5576EG6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:B66SESDKVHGJDSZG2ES5576EG6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1017115222841a5f82993ac52d15050c65af07ddbee28c85e3b43ba8f2c88e0a","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T19:50:01Z","title_canon_sha256":"38ffa088a77eac576d063ba4b38b45da7c2aafd2535b295207c6aab07ef89bce"},"schema_version":"1.0","source":{"id":"2310.16152","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16152","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16152v5","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16152","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"B66SESDKVHGJ","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"B66SESDKVHGJDSZG","created_at":"2026-07-21T01:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"B66SESDK","created_at":"2026-07-21T01:20:30Z"}],"graph_snapshots":[{"event_id":"sha256:9d4997742821dadb204937548e29cd30c053d4c78e999982426513a681b0feca","target":"graph","created_at":"2026-07-21T01:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.16152/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning (FL) has become a key component in various language modeling applications such as machine translation, next-word prediction, and medical record analysis. These applications are trained on datasets from many FL participants that often include privacy-sensitive data, such as healthcare records, phone/credit card numbers, login credentials, etc. Although FL enables computation without necessitating clients to share their raw data, existing works show that privacy leakage is still probable in federated language models. In this paper, we present two novel findings on the leakage ","authors_text":"Kang Gu, Md Rafi Ur Rashid, Najrin Sultana, Shagufta Mehnaz, Vishnu Asutosh Dasu","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T19:50:01Z","title":"Gradient-Free Privacy Leakage in Federated Language Models through Selective Weight Tampering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16152","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d4eea1f518840fe331d61f77f42fbead3b7a0ebd5c44a6116ca47022eb66a5b7","target":"record","created_at":"2026-07-21T01:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1017115222841a5f82993ac52d15050c65af07ddbee28c85e3b43ba8f2c88e0a","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T19:50:01Z","title_canon_sha256":"38ffa088a77eac576d063ba4b38b45da7c2aafd2535b295207c6aab07ef89bce"},"schema_version":"1.0","source":{"id":"2310.16152","kind":"arxiv","version":5}},"canonical_sha256":"0fbd22486aa9cc91cb26d125deffc437a5868dea229e7de279099cbee63bb57a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0fbd22486aa9cc91cb26d125deffc437a5868dea229e7de279099cbee63bb57a","first_computed_at":"2026-07-21T01:20:30.560161Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T01:20:30.560161Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PGqSko01Pv3zkR3oQhc/zlP+00NGonZd9hZJOsTLOXBSEgMkPws+EVWWdVEOdXyMgIC1tXJ/3nUkjxn6LxH+Dw==","signature_status":"signed_v1","signed_at":"2026-07-21T01:20:30.561104Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.16152","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d4eea1f518840fe331d61f77f42fbead3b7a0ebd5c44a6116ca47022eb66a5b7","sha256:9d4997742821dadb204937548e29cd30c053d4c78e999982426513a681b0feca"],"state_sha256":"33f9a24dddad7cb2d09e5e1a3d111263e0689168cb81d0fd78e66cae4e44ddaa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+Dsr4mjD2/3lQ9Y0CuXaSaiIviujq8YxXZKvkJeJ1Eduvx1Bs8OQ9dUFov5leOIfv8WpfP+9iv1HRotO/d6aDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T06:32:57.455326Z","bundle_sha256":"e84d85bdfee2a116cbdc5c838129e471c2d6063c97882fb6a59eb52bc8e0cf39"}}