{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NLPS6QTEH47K6PXKFG4NX6HI4E","short_pith_number":"pith:NLPS6QTE","canonical_record":{"source":{"id":"2101.07922","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-20T01:40:06Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"5174865a14cba1a4a759d2304aecf90178fdc77514df41765794b8822b6e5788","abstract_canon_sha256":"ad413c348cefc757a8acccdc9ebcbf34b9c8dc40f6960d42e5a444eafc59a2ee"},"schema_version":"1.0"},"canonical_sha256":"6adf2f42643f3eaf3eea29b8dbf8e8e136c155d0c68400a54266fae2e70daf08","source":{"kind":"arxiv","id":"2101.07922","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.07922","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"arxiv_version","alias_value":"2101.07922v2","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.07922","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_12","alias_value":"NLPS6QTEH47K","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_16","alias_value":"NLPS6QTEH47K6PXK","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_8","alias_value":"NLPS6QTE","created_at":"2026-07-05T02:09:16Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NLPS6QTEH47K6PXKFG4NX6HI4E","target":"record","payload":{"canonical_record":{"source":{"id":"2101.07922","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-20T01:40:06Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"5174865a14cba1a4a759d2304aecf90178fdc77514df41765794b8822b6e5788","abstract_canon_sha256":"ad413c348cefc757a8acccdc9ebcbf34b9c8dc40f6960d42e5a444eafc59a2ee"},"schema_version":"1.0"},"canonical_sha256":"6adf2f42643f3eaf3eea29b8dbf8e8e136c155d0c68400a54266fae2e70daf08","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:09:16.591867Z","signature_b64":"3YeIXUOpW4dYgMVW8gWUp23fETXCESoIRIcDohjrYIPL8bdCtVRtmzkGKUvvx+SLchC6G5kXLpyD5LbvTklcAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6adf2f42643f3eaf3eea29b8dbf8e8e136c155d0c68400a54266fae2e70daf08","last_reissued_at":"2026-07-05T02:09:16.591487Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:09:16.591487Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2101.07922","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:09:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9abVR9LExmHYYYGFliiQ8WEj6YjKgWnzQI+jmhoJ6xq+QlHOIJwnc/xexRzHUDztz0DTYjRLhtTMN32ytAi2DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:19:42.668801Z"},"content_sha256":"539ff3e42639addba702e389a417dfb3bcdf464db3dc6185816d51d9bfd06695","schema_version":"1.0","event_id":"sha256:539ff3e42639addba702e389a417dfb3bcdf464db3dc6185816d51d9bfd06695"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NLPS6QTEH47K6PXKFG4NX6HI4E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Gavin Taylor, Harrison Foley, John Dickerson, Micah Goldblum, Shiyuan Duan, Tom Goldstein, Valeriia Cherepanova","submitted_at":"2021-01-20T01:40:06Z","abstract_excerpt":"Facial recognition systems are increasingly deployed by private corporations, government agencies, and contractors for consumer services and mass surveillance programs alike. These systems are typically built by scraping social media profiles for user images. Adversarial perturbations have been proposed for bypassing facial recognition systems. However, existing methods fail on full-scale systems and commercial APIs. We develop our own adversarial filter that accounts for the entire image processing pipeline and is demonstrably effective against industrial-grade pipelines that include face det"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.07922","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2101.07922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:09:16Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o3DEynK5Orjqu99UECmnSGRdY2ijYRRs2yFDrYRXGMHT0ExGdqlH+6N39i0xQmnLJUqFFDICQbH/vQSPyEJIDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T17:19:42.669319Z"},"content_sha256":"a7b8c632a8c9c8fb263517d4045453225ea0a1f7ce3e81ddfec1b1b02a5ace13","schema_version":"1.0","event_id":"sha256:a7b8c632a8c9c8fb263517d4045453225ea0a1f7ce3e81ddfec1b1b02a5ace13"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/bundle.json","state_url":"https://pith.science/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T17:19:42Z","links":{"resolver":"https://pith.science/pith/NLPS6QTEH47K6PXKFG4NX6HI4E","bundle":"https://pith.science/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/bundle.json","state":"https://pith.science/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NLPS6QTEH47K6PXKFG4NX6HI4E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NLPS6QTEH47K6PXKFG4NX6HI4E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad413c348cefc757a8acccdc9ebcbf34b9c8dc40f6960d42e5a444eafc59a2ee","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-20T01:40:06Z","title_canon_sha256":"5174865a14cba1a4a759d2304aecf90178fdc77514df41765794b8822b6e5788"},"schema_version":"1.0","source":{"id":"2101.07922","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.07922","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"arxiv_version","alias_value":"2101.07922v2","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.07922","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_12","alias_value":"NLPS6QTEH47K","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_16","alias_value":"NLPS6QTEH47K6PXK","created_at":"2026-07-05T02:09:16Z"},{"alias_kind":"pith_short_8","alias_value":"NLPS6QTE","created_at":"2026-07-05T02:09:16Z"}],"graph_snapshots":[{"event_id":"sha256:a7b8c632a8c9c8fb263517d4045453225ea0a1f7ce3e81ddfec1b1b02a5ace13","target":"graph","created_at":"2026-07-05T02:09:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2101.07922/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Facial recognition systems are increasingly deployed by private corporations, government agencies, and contractors for consumer services and mass surveillance programs alike. These systems are typically built by scraping social media profiles for user images. Adversarial perturbations have been proposed for bypassing facial recognition systems. However, existing methods fail on full-scale systems and commercial APIs. We develop our own adversarial filter that accounts for the entire image processing pipeline and is demonstrably effective against industrial-grade pipelines that include face det","authors_text":"Gavin Taylor, Harrison Foley, John Dickerson, Micah Goldblum, Shiyuan Duan, Tom Goldstein, Valeriia Cherepanova","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-20T01:40:06Z","title":"LowKey: Leveraging Adversarial Attacks to Protect Social Media Users from Facial Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.07922","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:539ff3e42639addba702e389a417dfb3bcdf464db3dc6185816d51d9bfd06695","target":"record","created_at":"2026-07-05T02:09:16Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad413c348cefc757a8acccdc9ebcbf34b9c8dc40f6960d42e5a444eafc59a2ee","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-01-20T01:40:06Z","title_canon_sha256":"5174865a14cba1a4a759d2304aecf90178fdc77514df41765794b8822b6e5788"},"schema_version":"1.0","source":{"id":"2101.07922","kind":"arxiv","version":2}},"canonical_sha256":"6adf2f42643f3eaf3eea29b8dbf8e8e136c155d0c68400a54266fae2e70daf08","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6adf2f42643f3eaf3eea29b8dbf8e8e136c155d0c68400a54266fae2e70daf08","first_computed_at":"2026-07-05T02:09:16.591487Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:09:16.591487Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3YeIXUOpW4dYgMVW8gWUp23fETXCESoIRIcDohjrYIPL8bdCtVRtmzkGKUvvx+SLchC6G5kXLpyD5LbvTklcAw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:09:16.591867Z","signed_message":"canonical_sha256_bytes"},"source_id":"2101.07922","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:539ff3e42639addba702e389a417dfb3bcdf464db3dc6185816d51d9bfd06695","sha256:a7b8c632a8c9c8fb263517d4045453225ea0a1f7ce3e81ddfec1b1b02a5ace13"],"state_sha256":"154364bb026d488bfb79358ca033a4b9e48bb596fe1ebfd0a32c81f70143aced"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gQ98F9b+EPCKWKL0uLvsTAX6amCQE/UVjwt2w0Pa5kHoXNd/MH6ODwYJSH4YF560OA9oi7V8iHk4K5tmh0T4CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T17:19:42.674244Z","bundle_sha256":"b2c0ee6643dc601b519aaec69b826d927a8557a61cfed877aa18082a86412b8a"}}