{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:DINJBBWARZBPXNEKNAWFUYDYH6","short_pith_number":"pith:DINJBBWA","canonical_record":{"source":{"id":"1906.08507","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T08:58:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"85cbe98992d644b1ea0ca01a60732e036f317c6bd9a4c3f9641a6511239bad46","abstract_canon_sha256":"265736e9213add68c3c5724eb394ceb294ec3699625f86cb6a1fef0c9e981bd6"},"schema_version":"1.0"},"canonical_sha256":"1a1a9086c08e42fbb48a682c5a60783f91aadeca4f8fe10b6313843fe072da0c","source":{"kind":"arxiv","id":"1906.08507","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.08507","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"arxiv_version","alias_value":"1906.08507v1","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.08507","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"pith_short_12","alias_value":"DINJBBWARZBP","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"DINJBBWARZBPXNEK","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"DINJBBWA","created_at":"2026-05-18T12:33:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:DINJBBWARZBPXNEKNAWFUYDYH6","target":"record","payload":{"canonical_record":{"source":{"id":"1906.08507","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T08:58:22Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"85cbe98992d644b1ea0ca01a60732e036f317c6bd9a4c3f9641a6511239bad46","abstract_canon_sha256":"265736e9213add68c3c5724eb394ceb294ec3699625f86cb6a1fef0c9e981bd6"},"schema_version":"1.0"},"canonical_sha256":"1a1a9086c08e42fbb48a682c5a60783f91aadeca4f8fe10b6313843fe072da0c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:42:52.296049Z","signature_b64":"1QQd8BVZ6DZferuGFwM0Z8IVbVzRclolPzmd3Tx2mxyOX2zuj+Fm/1FR9sTmK7fQrUFCwymDJYa4tUoBGqOzDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1a1a9086c08e42fbb48a682c5a60783f91aadeca4f8fe10b6313843fe072da0c","last_reissued_at":"2026-05-17T23:42:52.295647Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:42:52.295647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.08507","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZfIM73EI5nz5uOLqZRS7UE3A9LPaEgvAwCzIZOQtNs8GNFbsgX4P4nJiKfK1spgzZGPRGS12fk6Og5Afnv9SDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T14:22:45.178774Z"},"content_sha256":"6c244a0c030941165f61ce17263e9d51746a7f5c519035ba12e7bc9026c57974","schema_version":"1.0","event_id":"sha256:6c244a0c030941165f61ce17263e9d51746a7f5c519035ba12e7bc9026c57974"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:DINJBBWARZBPXNEKNAWFUYDYH6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Multiple-Identity Image Attacks Against Face-based Identity Verification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Jerone T. A. Andrews, Lewis D. Griffin, Thomas Tanay","submitted_at":"2019-06-20T08:58:22Z","abstract_excerpt":"Facial verification systems are vulnerable to poisoning attacks that make use of multiple-identity images (MIIs)---face images stored in a database that resemble multiple persons, such that novel images of any of the constituent persons are verified as matching the identity of the MII. Research on this mode of attack has focused on defence by detection, with no explanation as to why the vulnerability exists. New quantitative results are presented that support an explanation in terms of the geometry of the representations spaces used by the verification systems. In the spherical geometry of tho"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.08507","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7MvR8GWfhu1WLrNrx1KTBukrgAm1BSIX0Kor9ls4j2aiBvXM2SFZnFS80EVB73lvt0QKb/eY6ShLtTthtxgJDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T14:22:45.179136Z"},"content_sha256":"57ccb487ef2594ea831625466f36a34c6d9e7f88f02ee9af8b1d25d3eb76545d","schema_version":"1.0","event_id":"sha256:57ccb487ef2594ea831625466f36a34c6d9e7f88f02ee9af8b1d25d3eb76545d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DINJBBWARZBPXNEKNAWFUYDYH6/bundle.json","state_url":"https://pith.science/pith/DINJBBWARZBPXNEKNAWFUYDYH6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DINJBBWARZBPXNEKNAWFUYDYH6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T14:22:45Z","links":{"resolver":"https://pith.science/pith/DINJBBWARZBPXNEKNAWFUYDYH6","bundle":"https://pith.science/pith/DINJBBWARZBPXNEKNAWFUYDYH6/bundle.json","state":"https://pith.science/pith/DINJBBWARZBPXNEKNAWFUYDYH6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DINJBBWARZBPXNEKNAWFUYDYH6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:DINJBBWARZBPXNEKNAWFUYDYH6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"265736e9213add68c3c5724eb394ceb294ec3699625f86cb6a1fef0c9e981bd6","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T08:58:22Z","title_canon_sha256":"85cbe98992d644b1ea0ca01a60732e036f317c6bd9a4c3f9641a6511239bad46"},"schema_version":"1.0","source":{"id":"1906.08507","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.08507","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"arxiv_version","alias_value":"1906.08507v1","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.08507","created_at":"2026-05-17T23:42:52Z"},{"alias_kind":"pith_short_12","alias_value":"DINJBBWARZBP","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"DINJBBWARZBPXNEK","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"DINJBBWA","created_at":"2026-05-18T12:33:15Z"}],"graph_snapshots":[{"event_id":"sha256:57ccb487ef2594ea831625466f36a34c6d9e7f88f02ee9af8b1d25d3eb76545d","target":"graph","created_at":"2026-05-17T23:42:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Facial verification systems are vulnerable to poisoning attacks that make use of multiple-identity images (MIIs)---face images stored in a database that resemble multiple persons, such that novel images of any of the constituent persons are verified as matching the identity of the MII. Research on this mode of attack has focused on defence by detection, with no explanation as to why the vulnerability exists. New quantitative results are presented that support an explanation in terms of the geometry of the representations spaces used by the verification systems. In the spherical geometry of tho","authors_text":"Jerone T. A. Andrews, Lewis D. Griffin, Thomas Tanay","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T08:58:22Z","title":"Multiple-Identity Image Attacks Against Face-based Identity Verification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.08507","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6c244a0c030941165f61ce17263e9d51746a7f5c519035ba12e7bc9026c57974","target":"record","created_at":"2026-05-17T23:42:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"265736e9213add68c3c5724eb394ceb294ec3699625f86cb6a1fef0c9e981bd6","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T08:58:22Z","title_canon_sha256":"85cbe98992d644b1ea0ca01a60732e036f317c6bd9a4c3f9641a6511239bad46"},"schema_version":"1.0","source":{"id":"1906.08507","kind":"arxiv","version":1}},"canonical_sha256":"1a1a9086c08e42fbb48a682c5a60783f91aadeca4f8fe10b6313843fe072da0c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1a1a9086c08e42fbb48a682c5a60783f91aadeca4f8fe10b6313843fe072da0c","first_computed_at":"2026-05-17T23:42:52.295647Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:42:52.295647Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"1QQd8BVZ6DZferuGFwM0Z8IVbVzRclolPzmd3Tx2mxyOX2zuj+Fm/1FR9sTmK7fQrUFCwymDJYa4tUoBGqOzDQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:42:52.296049Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.08507","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6c244a0c030941165f61ce17263e9d51746a7f5c519035ba12e7bc9026c57974","sha256:57ccb487ef2594ea831625466f36a34c6d9e7f88f02ee9af8b1d25d3eb76545d"],"state_sha256":"6ed9cc3e0e45742593c04a6395248126533e808e7178a90f8953b6aeb95116e0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZpdGStjuAa0E32GauoK/PyJeHIQQIgwP/giNhz0Fg4I8PPElabCf0ic+tTIfQOoPJCJ++6oH0HJVN6UyUcVSAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T14:22:45.183544Z","bundle_sha256":"617d7be9425e3b7aa32f1e6b9e2699035bfba2c68a82b3415412b33253a0d2eb"}}