{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:M7CFCSUE45ZUE6ZZU4GPI7JF3D","short_pith_number":"pith:M7CFCSUE","canonical_record":{"source":{"id":"2310.16613","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","cross_cats_sorted":[],"title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5","abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068"},"schema_version":"1.0"},"canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","source":{"kind":"arxiv","id":"2310.16613","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16613v2","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_12","alias_value":"M7CFCSUE45ZU","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_16","alias_value":"M7CFCSUE45ZUE6ZZ","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_8","alias_value":"M7CFCSUE","created_at":"2026-07-05T10:09:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:M7CFCSUE45ZUE6ZZU4GPI7JF3D","target":"record","payload":{"canonical_record":{"source":{"id":"2310.16613","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","cross_cats_sorted":[],"title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5","abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068"},"schema_version":"1.0"},"canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:09:40.968454Z","signature_b64":"Cr9ZG5TAWdIiuqCpBAe0j3NrZjabGRpWva6sZ3nUNRmEo+U2u7T+QmYr5ksXHqJeZTXClO7lpWSNZpAHLUoPAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","last_reissued_at":"2026-07-05T10:09:40.968097Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:09:40.968097Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.16613","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I8jeW2BIAkHi2tIScdxuz4cfsmfFymQc2wzzBmO06r8UrFATTR4g9/mo8fkdHOhgAnpy/KG/+t1sZCcMMp6BBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:16:58.989885Z"},"content_sha256":"cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481","schema_version":"1.0","event_id":"sha256:cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:M7CFCSUE45ZUE6ZZU4GPI7JF3D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Michael Backes, Ning Yu, Yang Zhang, Yixin Wu, Yun Shen","submitted_at":"2023-10-25T13:10:44Z","abstract_excerpt":"Malicious or manipulated prompts are known to exploit text-to-image models to generate unsafe images. Existing studies, however, focus on the passive exploitation of such harmful capabilities. In this paper, we investigate the proactive generation of unsafe images from benign prompts (e.g., a photo of a cat) through maliciously modified text-to-image models. Our preliminary investigation demonstrates that poisoning attacks are a viable method to achieve this goal but uncovers significant side effects, where unintended spread to non-targeted prompts compromises attack stealthiness. Root cause a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16613","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.16613/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:09:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"whUZPhcCYacTXQFz6BoiA0rVSG/K+wkVWBGXK88MrHsOh2E39LO678vDGtV0b88D8vhBHWjtVZpnqYmOifAICw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:16:58.990651Z"},"content_sha256":"2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d","schema_version":"1.0","event_id":"sha256:2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/bundle.json","state_url":"https://pith.science/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T00:16:58Z","links":{"resolver":"https://pith.science/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D","bundle":"https://pith.science/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/bundle.json","state":"https://pith.science/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M7CFCSUE45ZUE6ZZU4GPI7JF3D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:M7CFCSUE45ZUE6ZZU4GPI7JF3D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5"},"schema_version":"1.0","source":{"id":"2310.16613","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"arxiv_version","alias_value":"2310.16613v2","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.16613","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_12","alias_value":"M7CFCSUE45ZU","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_16","alias_value":"M7CFCSUE45ZUE6ZZ","created_at":"2026-07-05T10:09:40Z"},{"alias_kind":"pith_short_8","alias_value":"M7CFCSUE","created_at":"2026-07-05T10:09:40Z"}],"graph_snapshots":[{"event_id":"sha256:2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d","target":"graph","created_at":"2026-07-05T10:09:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.16613/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious or manipulated prompts are known to exploit text-to-image models to generate unsafe images. Existing studies, however, focus on the passive exploitation of such harmful capabilities. In this paper, we investigate the proactive generation of unsafe images from benign prompts (e.g., a photo of a cat) through maliciously modified text-to-image models. Our preliminary investigation demonstrates that poisoning attacks are a viable method to achieve this goal but uncovers significant side effects, where unintended spread to non-targeted prompts compromises attack stealthiness. Root cause a","authors_text":"Michael Backes, Ning Yu, Yang Zhang, Yixin Wu, Yun Shen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title":"On the Proactive Generation of Unsafe Images From Text-To-Image Models Using Benign Prompts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.16613","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481","target":"record","created_at":"2026-07-05T10:09:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"09c6a684af628c33eec20517c97cc8e228a53d4b4deff1bcf7f6f9a89d219068","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-10-25T13:10:44Z","title_canon_sha256":"4f6e9a6f4b272d1dcfb287b1fab3722e4ba9ad5de9ba15a36778e3bfd693ceb5"},"schema_version":"1.0","source":{"id":"2310.16613","kind":"arxiv","version":2}},"canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"67c4514a84e773427b39a70cf47d25d8e3d66f02fa72f02242518880fef1eec0","first_computed_at":"2026-07-05T10:09:40.968097Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:09:40.968097Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Cr9ZG5TAWdIiuqCpBAe0j3NrZjabGRpWva6sZ3nUNRmEo+U2u7T+QmYr5ksXHqJeZTXClO7lpWSNZpAHLUoPAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:09:40.968454Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.16613","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cb5fc98995fc06ea2cb17fa7173e3b86d20751dfddaf8db244438a7484441481","sha256:2212f4730a8e5a9694c71736bf1b4466bb069f3ce49d2f662e7a8d8d79edfc9d"],"state_sha256":"be021ef974bf57c2720fa11d64a58d822aeaaf6f910ee466d00ade79d9954323"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i0g9VhtOj3qEU8lc55E/4gg0o+9WsJwK/J0AxrfUVcvv/r5v2OG5+x0vp2BcKVayat+L6ZzLvOwrWeX0cUnwBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T00:16:58.996639Z","bundle_sha256":"67656d731081d92820abe4c7092146c8fae89c01831d62550812adf02d8b8b51"}}