{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:DUFYU5D3PS2JF4S3TXCH5AYAFZ","short_pith_number":"pith:DUFYU5D3","schema_version":"1.0","canonical_sha256":"1d0b8a747b7cb492f25b9dc47e83002e5117f59a14c8feb8adb740865db0b2a8","source":{"kind":"arxiv","id":"2409.17328","version":1},"attestation_state":"computed","paper":{"title":"The poison of dimensionality","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"L\\^e-Nguy\\^en Hoang","submitted_at":"2024-09-25T20:06:33Z","abstract_excerpt":"This paper advances the understanding of how the size of a machine learning model affects its vulnerability to poisoning, despite state-of-the-art defenses. Given isotropic random honest feature vectors and the geometric median (or clipped mean) as the robust gradient aggregator rule, we essentially prove that, perhaps surprisingly, linear and logistic regressions with $D \\geq 169 H^2/P^2$ parameters are subject to arbitrary model manipulation by poisoners, where $H$ and $P$ are the numbers of honestly labeled and poisoned data points used for training. Our experiments go on exposing a fundame"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2409.17328","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2024-09-25T20:06:33Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"06da25b41d6abb3f1c044f7711132b390d4478460e6ef14cc3dc7f0ca8baf849","abstract_canon_sha256":"a3a676291a39462ad1003e1727784c5626f6aaa054f5a12f24d1a04db95b123a"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:51.601763Z","signature_b64":"rw/Em9OFV+KMfswABZshGvqFWEUIEVe2T/IND4v+VNri/D1beWiBt4Tin96dEkaKmlhRvA/52vZOVxvhCj5QBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d0b8a747b7cb492f25b9dc47e83002e5117f59a14c8feb8adb740865db0b2a8","last_reissued_at":"2026-07-05T09:11:51.601260Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:51.601260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"The poison of dimensionality","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"L\\^e-Nguy\\^en Hoang","submitted_at":"2024-09-25T20:06:33Z","abstract_excerpt":"This paper advances the understanding of how the size of a machine learning model affects its vulnerability to poisoning, despite state-of-the-art defenses. Given isotropic random honest feature vectors and the geometric median (or clipped mean) as the robust gradient aggregator rule, we essentially prove that, perhaps surprisingly, linear and logistic regressions with $D \\geq 169 H^2/P^2$ parameters are subject to arbitrary model manipulation by poisoners, where $H$ and $P$ are the numbers of honestly labeled and poisoned data points used for training. Our experiments go on exposing a fundame"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.17328","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.17328/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2409.17328","created_at":"2026-07-05T09:11:51.601320+00:00"},{"alias_kind":"arxiv_version","alias_value":"2409.17328v1","created_at":"2026-07-05T09:11:51.601320+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.17328","created_at":"2026-07-05T09:11:51.601320+00:00"},{"alias_kind":"pith_short_12","alias_value":"DUFYU5D3PS2J","created_at":"2026-07-05T09:11:51.601320+00:00"},{"alias_kind":"pith_short_16","alias_value":"DUFYU5D3PS2JF4S3","created_at":"2026-07-05T09:11:51.601320+00:00"},{"alias_kind":"pith_short_8","alias_value":"DUFYU5D3","created_at":"2026-07-05T09:11:51.601320+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2503.04742","citing_title":"A Case for Specialisation in Non-Human Entities","ref_index":65,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ","json":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ.json","graph_json":"https://pith.science/api/pith-number/DUFYU5D3PS2JF4S3TXCH5AYAFZ/graph.json","events_json":"https://pith.science/api/pith-number/DUFYU5D3PS2JF4S3TXCH5AYAFZ/events.json","paper":"https://pith.science/paper/DUFYU5D3"},"agent_actions":{"view_html":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ","download_json":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ.json","view_paper":"https://pith.science/paper/DUFYU5D3","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2409.17328&json=true","fetch_graph":"https://pith.science/api/pith-number/DUFYU5D3PS2JF4S3TXCH5AYAFZ/graph.json","fetch_events":"https://pith.science/api/pith-number/DUFYU5D3PS2JF4S3TXCH5AYAFZ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ/action/storage_attestation","attest_author":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ/action/author_attestation","sign_citation":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ/action/citation_signature","submit_replication":"https://pith.science/pith/DUFYU5D3PS2JF4S3TXCH5AYAFZ/action/replication_record"}},"created_at":"2026-07-05T09:11:51.601320+00:00","updated_at":"2026-07-05T09:11:51.601320+00:00"}