{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:LQWUALUMN2TP3RUZBLJ6XPERM3","short_pith_number":"pith:LQWUALUM","canonical_record":{"source":{"id":"2305.08183","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2023-05-14T15:22:52Z","cross_cats_sorted":[],"title_canon_sha256":"af81d8fba161bbdc1fe348249fe60a918e1d6a6f141eed29aea0ba9268e50391","abstract_canon_sha256":"16e86a66485c164df9fb343982cdfa5620ff48863ec1a108d4549a98890d4af7"},"schema_version":"1.0"},"canonical_sha256":"5c2d402e8c6ea6fdc6990ad3ebbc9166df64fe24976984fd9b4c75b0139be564","source":{"kind":"arxiv","id":"2305.08183","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.08183","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.08183v2","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.08183","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_12","alias_value":"LQWUALUMN2TP","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_16","alias_value":"LQWUALUMN2TP3RUZ","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_8","alias_value":"LQWUALUM","created_at":"2026-07-05T06:10:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:LQWUALUMN2TP3RUZBLJ6XPERM3","target":"record","payload":{"canonical_record":{"source":{"id":"2305.08183","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2023-05-14T15:22:52Z","cross_cats_sorted":[],"title_canon_sha256":"af81d8fba161bbdc1fe348249fe60a918e1d6a6f141eed29aea0ba9268e50391","abstract_canon_sha256":"16e86a66485c164df9fb343982cdfa5620ff48863ec1a108d4549a98890d4af7"},"schema_version":"1.0"},"canonical_sha256":"5c2d402e8c6ea6fdc6990ad3ebbc9166df64fe24976984fd9b4c75b0139be564","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:10:52.251760Z","signature_b64":"ZIE5ZJvyCM1wOkoh3uMHJlg31Bj5LIMN261XaJvtdGlNi2cGy0Dppx3N6QKYag3uNIePUmRHBf2SO2qxufP9BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c2d402e8c6ea6fdc6990ad3ebbc9166df64fe24976984fd9b4c75b0139be564","last_reissued_at":"2026-07-05T06:10:52.251343Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:10:52.251343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.08183","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:10:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N4I5L6U1hkrP8nG6zCs5bmYiPE+HU5xmio5MxWffFVZtf7ENVZRJFTmfiCvLSuRGPNyfXhtib6cShtC5Gs6aBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:07:48.718959Z"},"content_sha256":"481cdef4e5d49fe083b523d4db5c3e763237651336848eccae0ac463a8d752cf","schema_version":"1.0","event_id":"sha256:481cdef4e5d49fe083b523d4db5c3e763237651336848eccae0ac463a8d752cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:LQWUALUMN2TP3RUZBLJ6XPERM3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Manipulating Visually-aware Federated Recommender Systems and Its Countermeasures","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.IR","authors_text":"Chaoqun Yang, Hongzhi Yin, Quoc Viet Hung Nguyen, Shilong Yuan, Wei Yuan","submitted_at":"2023-05-14T15:22:52Z","abstract_excerpt":"Federated recommender systems (FedRecs) have been widely explored recently due to their ability to protect user data privacy. In FedRecs, a central server collaboratively learns recommendation models by sharing model public parameters with clients, thereby offering a privacy-preserving solution. Unfortunately, the exposure of model parameters leaves a backdoor for adversaries to manipulate FedRecs. Existing works about FedRec security already reveal that items can easily be promoted by malicious users via model poisoning attacks, but all of them mainly focus on FedRecs with only collaborative "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.08183","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.08183/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:10:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HrWX1Ds5/R+T04z2cag1U+bhzKQB5yPJANS3Qe8Gqgy1vTvl5cqkCMUfeZkVlT4kNrP/5Y1X0IZx80S0BhSnCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:07:48.719447Z"},"content_sha256":"0f04091dffae5b1d1d822f49727ed1c0e33a7a1caa0f0082318da4b4e27e981b","schema_version":"1.0","event_id":"sha256:0f04091dffae5b1d1d822f49727ed1c0e33a7a1caa0f0082318da4b4e27e981b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/bundle.json","state_url":"https://pith.science/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:07:48Z","links":{"resolver":"https://pith.science/pith/LQWUALUMN2TP3RUZBLJ6XPERM3","bundle":"https://pith.science/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/bundle.json","state":"https://pith.science/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LQWUALUMN2TP3RUZBLJ6XPERM3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:LQWUALUMN2TP3RUZBLJ6XPERM3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"16e86a66485c164df9fb343982cdfa5620ff48863ec1a108d4549a98890d4af7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2023-05-14T15:22:52Z","title_canon_sha256":"af81d8fba161bbdc1fe348249fe60a918e1d6a6f141eed29aea0ba9268e50391"},"schema_version":"1.0","source":{"id":"2305.08183","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.08183","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"arxiv_version","alias_value":"2305.08183v2","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.08183","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_12","alias_value":"LQWUALUMN2TP","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_16","alias_value":"LQWUALUMN2TP3RUZ","created_at":"2026-07-05T06:10:52Z"},{"alias_kind":"pith_short_8","alias_value":"LQWUALUM","created_at":"2026-07-05T06:10:52Z"}],"graph_snapshots":[{"event_id":"sha256:0f04091dffae5b1d1d822f49727ed1c0e33a7a1caa0f0082318da4b4e27e981b","target":"graph","created_at":"2026-07-05T06:10:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.08183/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated recommender systems (FedRecs) have been widely explored recently due to their ability to protect user data privacy. In FedRecs, a central server collaboratively learns recommendation models by sharing model public parameters with clients, thereby offering a privacy-preserving solution. Unfortunately, the exposure of model parameters leaves a backdoor for adversaries to manipulate FedRecs. Existing works about FedRec security already reveal that items can easily be promoted by malicious users via model poisoning attacks, but all of them mainly focus on FedRecs with only collaborative ","authors_text":"Chaoqun Yang, Hongzhi Yin, Quoc Viet Hung Nguyen, Shilong Yuan, Wei Yuan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2023-05-14T15:22:52Z","title":"Manipulating Visually-aware Federated Recommender Systems and Its Countermeasures"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.08183","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:481cdef4e5d49fe083b523d4db5c3e763237651336848eccae0ac463a8d752cf","target":"record","created_at":"2026-07-05T06:10:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"16e86a66485c164df9fb343982cdfa5620ff48863ec1a108d4549a98890d4af7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.IR","submitted_at":"2023-05-14T15:22:52Z","title_canon_sha256":"af81d8fba161bbdc1fe348249fe60a918e1d6a6f141eed29aea0ba9268e50391"},"schema_version":"1.0","source":{"id":"2305.08183","kind":"arxiv","version":2}},"canonical_sha256":"5c2d402e8c6ea6fdc6990ad3ebbc9166df64fe24976984fd9b4c75b0139be564","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c2d402e8c6ea6fdc6990ad3ebbc9166df64fe24976984fd9b4c75b0139be564","first_computed_at":"2026-07-05T06:10:52.251343Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:10:52.251343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZIE5ZJvyCM1wOkoh3uMHJlg31Bj5LIMN261XaJvtdGlNi2cGy0Dppx3N6QKYag3uNIePUmRHBf2SO2qxufP9BA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:10:52.251760Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.08183","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:481cdef4e5d49fe083b523d4db5c3e763237651336848eccae0ac463a8d752cf","sha256:0f04091dffae5b1d1d822f49727ed1c0e33a7a1caa0f0082318da4b4e27e981b"],"state_sha256":"c6e9cfebdbdbb10cc59cc410781eb9ba323d1da80af72fd7a2a43dd1bda06ae2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qRpFHUimwh5HKk5xJGQ7Jdq8JszSbQjyTOOBQOtkxRZXCUsDXKrwmvKc9sBHv/d5hWdrMAVEaSpyhND3KKELDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:07:48.724231Z","bundle_sha256":"692da7191d1bc0dcc50e9b9eca49982a920d301b830d9395cea2ecee9bc776d5"}}