{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:HJOJJ35KK3I52AMPHNODY4CN4K","short_pith_number":"pith:HJOJJ35K","canonical_record":{"source":{"id":"2412.14113","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"ebac14ad0c011f63bc7f1493a7113084a0f6e17dc84d8baea2e813f09e5b4ffa","abstract_canon_sha256":"e4a819e2b2b84144109bb8778cc5f7f10e535202e32371ed2bd431cef7c490f1"},"schema_version":"1.0"},"canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","source":{"kind":"arxiv","id":"2412.14113","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.14113","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"arxiv_version","alias_value":"2412.14113v4","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.14113","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"pith_short_12","alias_value":"HJOJJ35KK3I5","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"HJOJJ35KK3I52AMP","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"HJOJJ35K","created_at":"2026-05-18T12:33:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:HJOJJ35KK3I52AMPHNODY4CN4K","target":"record","payload":{"canonical_record":{"source":{"id":"2412.14113","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"ebac14ad0c011f63bc7f1493a7113084a0f6e17dc84d8baea2e813f09e5b4ffa","abstract_canon_sha256":"e4a819e2b2b84144109bb8778cc5f7f10e535202e32371ed2bd431cef7c490f1"},"schema_version":"1.0"},"canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:39:01.635089Z","signature_b64":"Hn4185Ymn7mqH3ZUqJvZ1rrnXF3zsCGp+0RlpjhR59m7I0naghW8+10CaWHW/eorEzGOwDhoNIaX0qqgs0FbBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","last_reissued_at":"2026-05-17T23:39:01.634377Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:39:01.634377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.14113","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:39:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aou9GzMGr+EqexjLHcoluyhcxTtNGteMFnYGQiX3YftE1afNU1fXG4DGIt4kK7oAUV7gbMV173QXD0Yksq4QBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T08:43:50.899082Z"},"content_sha256":"d16f873e9750e90b6ea6940730653e6ab865016b2e11d43b3b9f52a2d91b5be5","schema_version":"1.0","event_id":"sha256:d16f873e9750e90b6ea6940730653e6ab865016b2e11d43b3b9f52a2d91b5be5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:HJOJJ35KK3I52AMPHNODY4CN4K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Hubness in Multi-Modal Retrieval","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.CR","authors_text":"Collin Zhang, Fnu Suya, Rishi Jha, Tingwei Zhang, Vitaly Shmatikov","submitted_at":"2024-12-18T17:58:58Z","abstract_excerpt":"Hubness is a phenomenon in high-dimensional vector spaces where a point from the natural distribution is unusually close to many other points. This is a well-known problem in information retrieval that causes some items to accidentally (and incorrectly) appear relevant to many queries.\n  In this paper, we investigate how attackers can exploit hubness to turn any image or audio input in a multi-modal retrieval system into an adversarial hub. Adversarial hubs can be used to inject universal adversarial content (e.g., spam) that will be retrieved in response to thousands of different queries, and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.14113","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:39:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DMAXJdfFOw9IX/gRrHv6mSeGvJ3e+5rzSFee16YjWDmGGLuhW8qwjdjzdpClBxLmxjf8CH1P1T/B6XQTr3GiDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T08:43:50.899807Z"},"content_sha256":"aaadb25da99373ecb682db81a84ae7e53893d461cd53ba3adc51123781d7624d","schema_version":"1.0","event_id":"sha256:aaadb25da99373ecb682db81a84ae7e53893d461cd53ba3adc51123781d7624d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/bundle.json","state_url":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HJOJJ35KK3I52AMPHNODY4CN4K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T08:43:50Z","links":{"resolver":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K","bundle":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/bundle.json","state":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HJOJJ35KK3I52AMPHNODY4CN4K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:HJOJJ35KK3I52AMPHNODY4CN4K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e4a819e2b2b84144109bb8778cc5f7f10e535202e32371ed2bd431cef7c490f1","cross_cats_sorted":["cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","title_canon_sha256":"ebac14ad0c011f63bc7f1493a7113084a0f6e17dc84d8baea2e813f09e5b4ffa"},"schema_version":"1.0","source":{"id":"2412.14113","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.14113","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"arxiv_version","alias_value":"2412.14113v4","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.14113","created_at":"2026-05-17T23:39:01Z"},{"alias_kind":"pith_short_12","alias_value":"HJOJJ35KK3I5","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_16","alias_value":"HJOJJ35KK3I52AMP","created_at":"2026-05-18T12:33:37Z"},{"alias_kind":"pith_short_8","alias_value":"HJOJJ35K","created_at":"2026-05-18T12:33:37Z"}],"graph_snapshots":[{"event_id":"sha256:aaadb25da99373ecb682db81a84ae7e53893d461cd53ba3adc51123781d7624d","target":"graph","created_at":"2026-05-17T23:39:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Hubness is a phenomenon in high-dimensional vector spaces where a point from the natural distribution is unusually close to many other points. This is a well-known problem in information retrieval that causes some items to accidentally (and incorrectly) appear relevant to many queries.\n  In this paper, we investigate how attackers can exploit hubness to turn any image or audio input in a multi-modal retrieval system into an adversarial hub. Adversarial hubs can be used to inject universal adversarial content (e.g., spam) that will be retrieved in response to thousands of different queries, and","authors_text":"Collin Zhang, Fnu Suya, Rishi Jha, Tingwei Zhang, Vitaly Shmatikov","cross_cats":["cs.IR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.14113","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d16f873e9750e90b6ea6940730653e6ab865016b2e11d43b3b9f52a2d91b5be5","target":"record","created_at":"2026-05-17T23:39:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e4a819e2b2b84144109bb8778cc5f7f10e535202e32371ed2bd431cef7c490f1","cross_cats_sorted":["cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","title_canon_sha256":"ebac14ad0c011f63bc7f1493a7113084a0f6e17dc84d8baea2e813f09e5b4ffa"},"schema_version":"1.0","source":{"id":"2412.14113","kind":"arxiv","version":4}},"canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","first_computed_at":"2026-05-17T23:39:01.634377Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:39:01.634377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Hn4185Ymn7mqH3ZUqJvZ1rrnXF3zsCGp+0RlpjhR59m7I0naghW8+10CaWHW/eorEzGOwDhoNIaX0qqgs0FbBg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:39:01.635089Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.14113","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d16f873e9750e90b6ea6940730653e6ab865016b2e11d43b3b9f52a2d91b5be5","sha256:aaadb25da99373ecb682db81a84ae7e53893d461cd53ba3adc51123781d7624d"],"state_sha256":"a1d4b730f5555da05ca49ef19db63775867483189859fe2d397e74ccc5b10a6d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p2f+ohsN7nmOYDUtW3Wb7m1h51lt4bh7qGectWdERLvD5TzSFPHA8JwWMl1RitKYJS0ZxLEkosd1KzPzC0gGBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T08:43:50.904333Z","bundle_sha256":"1a7812f749e116a658cfeb39ae787d4810ea8fd247699cf808396678baf48b90"}}