{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HE673QKESKOEYQBEDUPGUCCYFV","short_pith_number":"pith:HE673QKE","canonical_record":{"source":{"id":"2402.02987","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T13:18:42Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"792cc2b5a98be1e9bad151cf0285921d4b6573a3b906309f460d692af36207c2","abstract_canon_sha256":"e935e068f5bb67629c2044380d01fe1cc1d46f2686c53e91c29649d6f0e096d5"},"schema_version":"1.0"},"canonical_sha256":"393dfdc144929c4c40241d1e6a08582d771a7816ce9aaf29aa9e2e8f47cd8204","source":{"kind":"arxiv","id":"2402.02987","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02987","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02987v2","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02987","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_12","alias_value":"HE673QKESKOE","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_16","alias_value":"HE673QKESKOEYQBE","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_8","alias_value":"HE673QKE","created_at":"2026-07-05T09:16:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HE673QKESKOEYQBEDUPGUCCYFV","target":"record","payload":{"canonical_record":{"source":{"id":"2402.02987","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T13:18:42Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"792cc2b5a98be1e9bad151cf0285921d4b6573a3b906309f460d692af36207c2","abstract_canon_sha256":"e935e068f5bb67629c2044380d01fe1cc1d46f2686c53e91c29649d6f0e096d5"},"schema_version":"1.0"},"canonical_sha256":"393dfdc144929c4c40241d1e6a08582d771a7816ce9aaf29aa9e2e8f47cd8204","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:16:46.320519Z","signature_b64":"YDbMfjgZLXZTziu8fD3stSiZBYTfD4L3fN5lS1DHjZuY+9sJ0lJXl1O0xKGj0eA7Q4QtbmKPaxl/BjskDT6UCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"393dfdc144929c4c40241d1e6a08582d771a7816ce9aaf29aa9e2e8f47cd8204","last_reissued_at":"2026-07-05T09:16:46.320015Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:16:46.320015Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.02987","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VxxFC2QnoiR2x1pqe0jRaiUiJZlhQiUfjGnBYK/bk4GYBxFtKIAfWtvM1hneH1MQGvXYedUHSml65VXcB8OiAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:44:48.621706Z"},"content_sha256":"4558df735bd908ae068dd610625fb3b30583ec891c7424c622c32c8ad3dec089","schema_version":"1.0","event_id":"sha256:4558df735bd908ae068dd610625fb3b30583ec891c7424c622c32c8ad3dec089"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HE673QKESKOEYQBEDUPGUCCYFV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Junjie Chu, Michael Backes, Yang Zhang, Zeyang Sha","submitted_at":"2024-02-05T13:18:42Z","abstract_excerpt":"Significant advancements have recently been made in large language models represented by GPT models. Users frequently have multi-round private conversations with cloud-hosted GPT models for task optimization. Yet, this operational paradigm introduces additional attack surfaces, particularly in custom GPTs and hijacked chat sessions. In this paper, we introduce a straightforward yet potent Conversation Reconstruction Attack. This attack targets the contents of previous conversations between GPT models and benign users, i.e., the benign users' input contents during their interaction with GPT mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02987","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.02987/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:16:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uXkK7RBVk5vHLv53NzSfyE9eySplPd4zP+pFLNlX8UuHGl2H4fu2kpaRk7Uhb0Eg7PTHZfzB51P1nCf2HLblCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T20:44:48.622322Z"},"content_sha256":"790c36711c2ff360d25fc8084e19c5ccdea5a82f93b5aae379d4e4e1189ec5e7","schema_version":"1.0","event_id":"sha256:790c36711c2ff360d25fc8084e19c5ccdea5a82f93b5aae379d4e4e1189ec5e7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HE673QKESKOEYQBEDUPGUCCYFV/bundle.json","state_url":"https://pith.science/pith/HE673QKESKOEYQBEDUPGUCCYFV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HE673QKESKOEYQBEDUPGUCCYFV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T20:44:48Z","links":{"resolver":"https://pith.science/pith/HE673QKESKOEYQBEDUPGUCCYFV","bundle":"https://pith.science/pith/HE673QKESKOEYQBEDUPGUCCYFV/bundle.json","state":"https://pith.science/pith/HE673QKESKOEYQBEDUPGUCCYFV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HE673QKESKOEYQBEDUPGUCCYFV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HE673QKESKOEYQBEDUPGUCCYFV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e935e068f5bb67629c2044380d01fe1cc1d46f2686c53e91c29649d6f0e096d5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T13:18:42Z","title_canon_sha256":"792cc2b5a98be1e9bad151cf0285921d4b6573a3b906309f460d692af36207c2"},"schema_version":"1.0","source":{"id":"2402.02987","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.02987","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"arxiv_version","alias_value":"2402.02987v2","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.02987","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_12","alias_value":"HE673QKESKOE","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_16","alias_value":"HE673QKESKOEYQBE","created_at":"2026-07-05T09:16:46Z"},{"alias_kind":"pith_short_8","alias_value":"HE673QKE","created_at":"2026-07-05T09:16:46Z"}],"graph_snapshots":[{"event_id":"sha256:790c36711c2ff360d25fc8084e19c5ccdea5a82f93b5aae379d4e4e1189ec5e7","target":"graph","created_at":"2026-07-05T09:16:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.02987/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Significant advancements have recently been made in large language models represented by GPT models. Users frequently have multi-round private conversations with cloud-hosted GPT models for task optimization. Yet, this operational paradigm introduces additional attack surfaces, particularly in custom GPTs and hijacked chat sessions. In this paper, we introduce a straightforward yet potent Conversation Reconstruction Attack. This attack targets the contents of previous conversations between GPT models and benign users, i.e., the benign users' input contents during their interaction with GPT mod","authors_text":"Junjie Chu, Michael Backes, Yang Zhang, Zeyang Sha","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T13:18:42Z","title":"Reconstruct Your Previous Conversations! Comprehensively Investigating Privacy Leakage Risks in Conversations with GPT Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.02987","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4558df735bd908ae068dd610625fb3b30583ec891c7424c622c32c8ad3dec089","target":"record","created_at":"2026-07-05T09:16:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e935e068f5bb67629c2044380d01fe1cc1d46f2686c53e91c29649d6f0e096d5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-05T13:18:42Z","title_canon_sha256":"792cc2b5a98be1e9bad151cf0285921d4b6573a3b906309f460d692af36207c2"},"schema_version":"1.0","source":{"id":"2402.02987","kind":"arxiv","version":2}},"canonical_sha256":"393dfdc144929c4c40241d1e6a08582d771a7816ce9aaf29aa9e2e8f47cd8204","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"393dfdc144929c4c40241d1e6a08582d771a7816ce9aaf29aa9e2e8f47cd8204","first_computed_at":"2026-07-05T09:16:46.320015Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:16:46.320015Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YDbMfjgZLXZTziu8fD3stSiZBYTfD4L3fN5lS1DHjZuY+9sJ0lJXl1O0xKGj0eA7Q4QtbmKPaxl/BjskDT6UCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:16:46.320519Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.02987","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4558df735bd908ae068dd610625fb3b30583ec891c7424c622c32c8ad3dec089","sha256:790c36711c2ff360d25fc8084e19c5ccdea5a82f93b5aae379d4e4e1189ec5e7"],"state_sha256":"b6e7dfe25821b78b42d00322cbf22ce99d1c783b1a9c425f2326a7a0cb24bf11"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XAtyU8RxQEluOrXU47de7mgupfflpePt2jk0ujaJ6ZeSSpgOTVKRt0lOJzkQLfNCynMIuau3BMMj0VgUvVFeAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T20:44:48.626742Z","bundle_sha256":"2cdebc3ca9d448d18684931b079b4f4218fdf4732e79e72e9ecaf5c88a9bf69f"}}