{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:HWDFTVF5AOIB4QFEKWWERKNK5C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"abdb0b363a96846b9c8fa58df4cc745a43ac7d5499af005e9619f181f8b2168f","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T14:48:50Z","title_canon_sha256":"7135ea13f74e8e4f4797a11667fdbf57f312d76ec1bafcc93954199024601aeb"},"schema_version":"1.0","source":{"id":"2209.07341","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.07341","created_at":"2026-07-05T08:41:35Z"},{"alias_kind":"arxiv_version","alias_value":"2209.07341v4","created_at":"2026-07-05T08:41:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.07341","created_at":"2026-07-05T08:41:35Z"},{"alias_kind":"pith_short_12","alias_value":"HWDFTVF5AOIB","created_at":"2026-07-05T08:41:35Z"},{"alias_kind":"pith_short_16","alias_value":"HWDFTVF5AOIB4QFE","created_at":"2026-07-05T08:41:35Z"},{"alias_kind":"pith_short_8","alias_value":"HWDFTVF5","created_at":"2026-07-05T08:41:35Z"}],"graph_snapshots":[{"event_id":"sha256:eae1f9113d354e1244c0545da53b95295232544a72d75fc587fae32ced374b65","target":"graph","created_at":"2026-07-05T08:41:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.07341/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the rise of deep learning in various applications, privacy concerns around the protection of training data have become a critical area of research. Whereas prior studies have focused on privacy risks in single-modal models, we introduce a novel method to assess privacy for multi-modal models, specifically vision-language models like CLIP. The proposed Identity Inference Attack (IDIA) reveals whether an individual was included in the training data by querying the model with images of the same person. Letting the model choose from a wide variety of possible text labels, the model reveals wh","authors_text":"Dominik Hintersdorf, Felix Friedrich, Kristian Kersting, Lukas Struppek, Manuel Brack, Patrick Schramowski","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T14:48:50Z","title":"Does CLIP Know My Face?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.07341","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d70be9dc3ab24f64ce625b48d0e6989f1468eba8d2d0be195ebbfa47e142500f","target":"record","created_at":"2026-07-05T08:41:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"abdb0b363a96846b9c8fa58df4cc745a43ac7d5499af005e9619f181f8b2168f","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-09-15T14:48:50Z","title_canon_sha256":"7135ea13f74e8e4f4797a11667fdbf57f312d76ec1bafcc93954199024601aeb"},"schema_version":"1.0","source":{"id":"2209.07341","kind":"arxiv","version":4}},"canonical_sha256":"3d8659d4bd03901e40a455ac48a9aae888cb61eadbf7ae9528290a72eacc61ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3d8659d4bd03901e40a455ac48a9aae888cb61eadbf7ae9528290a72eacc61ae","first_computed_at":"2026-07-05T08:41:35.995190Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:41:35.995190Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FzUQQ29GudlF93m1Ih6916MHt2qBBKJmv0UJVJSI+ASI/87UcRaWJdXVftcx8DWbzf6SIW7tkxi4Ho+P+crMCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:41:35.995642Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.07341","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d70be9dc3ab24f64ce625b48d0e6989f1468eba8d2d0be195ebbfa47e142500f","sha256:eae1f9113d354e1244c0545da53b95295232544a72d75fc587fae32ced374b65"],"state_sha256":"4ad3d5317b32e78646c58e626b1335fe783c5230be67e7a45ba94ed840346ec4"}