{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:F2CKZVNRID6TATFDU6BPJJRJTE","short_pith_number":"pith:F2CKZVNR","canonical_record":{"source":{"id":"2107.09126","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-07-19T19:45:44Z","cross_cats_sorted":[],"title_canon_sha256":"bf48682bfd49a26fff060e547c9ce389d61af11cbaf9f886321bd748144a3280","abstract_canon_sha256":"51c3a15f5c05575cbb6e9f0c4c8c722999b1aa475dabf42452440159d4faa27f"},"schema_version":"1.0"},"canonical_sha256":"2e84acd5b140fd304ca3a782f4a629990da9e7811d3c152fc3259c3cf201d37b","source":{"kind":"arxiv","id":"2107.09126","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09126","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09126v1","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09126","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_12","alias_value":"F2CKZVNRID6T","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_16","alias_value":"F2CKZVNRID6TATFD","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_8","alias_value":"F2CKZVNR","created_at":"2026-07-05T02:59:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:F2CKZVNRID6TATFDU6BPJJRJTE","target":"record","payload":{"canonical_record":{"source":{"id":"2107.09126","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-07-19T19:45:44Z","cross_cats_sorted":[],"title_canon_sha256":"bf48682bfd49a26fff060e547c9ce389d61af11cbaf9f886321bd748144a3280","abstract_canon_sha256":"51c3a15f5c05575cbb6e9f0c4c8c722999b1aa475dabf42452440159d4faa27f"},"schema_version":"1.0"},"canonical_sha256":"2e84acd5b140fd304ca3a782f4a629990da9e7811d3c152fc3259c3cf201d37b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:59:26.263551Z","signature_b64":"eppo22q9QUeH+FMH448UWadsf8W2TSehykIDNgEGiIqq0VCFlRxF4nhiHGC37peyc9tTB7NZQFBeYyTmgmjtCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2e84acd5b140fd304ca3a782f4a629990da9e7811d3c152fc3259c3cf201d37b","last_reissued_at":"2026-07-05T02:59:26.263141Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:59:26.263141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.09126","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:59:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oCxyFZ7OY/XE++mvfhoJzPe79qesC6NXx8xMGuu4uipjaJg+V85I3xe+QhT28YQKoyPKV8Z8+mcr4c9Dn4bsBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:56:31.476941Z"},"content_sha256":"c47b076413da0b4256f4e714827f3cdff9ffb6415f5c8060402a5c3875a083e6","schema_version":"1.0","event_id":"sha256:c47b076413da0b4256f4e714827f3cdff9ffb6415f5c8060402a5c3875a083e6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:F2CKZVNRID6TATFDU6BPJJRJTE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Examining the Human Perceptibility of Black-Box Adversarial Attacks on Face Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Benjamin Spetter-Goldstein, Nataniel Ruiz, Sarah Adel Bargal","submitted_at":"2021-07-19T19:45:44Z","abstract_excerpt":"The modern open internet contains billions of public images of human faces across the web, especially on social media websites used by half the world's population. In this context, Face Recognition (FR) systems have the potential to match faces to specific names and identities, creating glaring privacy concerns. Adversarial attacks are a promising way to grant users privacy from FR systems by disrupting their capability to recognize faces. Yet, such attacks can be perceptible to human observers, especially under the more challenging black-box threat model. In the literature, the justification "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09126","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.09126/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:59:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6aRY0rSNCSArrizk5wW9w0hPMkRj5w6GPf0IwFcaVqjhXuBq3PJdfa93EZEw1aEbgl1e1DOBbGkTX/j476ADBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:56:31.477607Z"},"content_sha256":"c37d2c1fecfd14d712d51810477653cf2d8f838a71448af8603d9653eed52caf","schema_version":"1.0","event_id":"sha256:c37d2c1fecfd14d712d51810477653cf2d8f838a71448af8603d9653eed52caf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/F2CKZVNRID6TATFDU6BPJJRJTE/bundle.json","state_url":"https://pith.science/pith/F2CKZVNRID6TATFDU6BPJJRJTE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/F2CKZVNRID6TATFDU6BPJJRJTE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:56:31Z","links":{"resolver":"https://pith.science/pith/F2CKZVNRID6TATFDU6BPJJRJTE","bundle":"https://pith.science/pith/F2CKZVNRID6TATFDU6BPJJRJTE/bundle.json","state":"https://pith.science/pith/F2CKZVNRID6TATFDU6BPJJRJTE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/F2CKZVNRID6TATFDU6BPJJRJTE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:F2CKZVNRID6TATFDU6BPJJRJTE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"51c3a15f5c05575cbb6e9f0c4c8c722999b1aa475dabf42452440159d4faa27f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-07-19T19:45:44Z","title_canon_sha256":"bf48682bfd49a26fff060e547c9ce389d61af11cbaf9f886321bd748144a3280"},"schema_version":"1.0","source":{"id":"2107.09126","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09126","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09126v1","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09126","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_12","alias_value":"F2CKZVNRID6T","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_16","alias_value":"F2CKZVNRID6TATFD","created_at":"2026-07-05T02:59:26Z"},{"alias_kind":"pith_short_8","alias_value":"F2CKZVNR","created_at":"2026-07-05T02:59:26Z"}],"graph_snapshots":[{"event_id":"sha256:c37d2c1fecfd14d712d51810477653cf2d8f838a71448af8603d9653eed52caf","target":"graph","created_at":"2026-07-05T02:59:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.09126/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The modern open internet contains billions of public images of human faces across the web, especially on social media websites used by half the world's population. In this context, Face Recognition (FR) systems have the potential to match faces to specific names and identities, creating glaring privacy concerns. Adversarial attacks are a promising way to grant users privacy from FR systems by disrupting their capability to recognize faces. Yet, such attacks can be perceptible to human observers, especially under the more challenging black-box threat model. In the literature, the justification ","authors_text":"Benjamin Spetter-Goldstein, Nataniel Ruiz, Sarah Adel Bargal","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-07-19T19:45:44Z","title":"Examining the Human Perceptibility of Black-Box Adversarial Attacks on Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09126","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c47b076413da0b4256f4e714827f3cdff9ffb6415f5c8060402a5c3875a083e6","target":"record","created_at":"2026-07-05T02:59:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"51c3a15f5c05575cbb6e9f0c4c8c722999b1aa475dabf42452440159d4faa27f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-07-19T19:45:44Z","title_canon_sha256":"bf48682bfd49a26fff060e547c9ce389d61af11cbaf9f886321bd748144a3280"},"schema_version":"1.0","source":{"id":"2107.09126","kind":"arxiv","version":1}},"canonical_sha256":"2e84acd5b140fd304ca3a782f4a629990da9e7811d3c152fc3259c3cf201d37b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2e84acd5b140fd304ca3a782f4a629990da9e7811d3c152fc3259c3cf201d37b","first_computed_at":"2026-07-05T02:59:26.263141Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:59:26.263141Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eppo22q9QUeH+FMH448UWadsf8W2TSehykIDNgEGiIqq0VCFlRxF4nhiHGC37peyc9tTB7NZQFBeYyTmgmjtCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:59:26.263551Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.09126","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c47b076413da0b4256f4e714827f3cdff9ffb6415f5c8060402a5c3875a083e6","sha256:c37d2c1fecfd14d712d51810477653cf2d8f838a71448af8603d9653eed52caf"],"state_sha256":"6e1d2f0c81a1977ce6b0791f70a8aa44cefea6b9d315b4e0e5c618438d09f211"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oXzJ80CzFF81+3eCi5xrPZCYzvKiM5JzORYVTqSJiDYtCMAc7kX1h8Ajin0GAlfaoe/gTxb5Vv26gW/eBG1MCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:56:31.480721Z","bundle_sha256":"85bec3d7bd2437b0f5a9cfe80a8f6d8cd1641ae2d667b02e58330ef8ccbdc4d7"}}