{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:O6FYZZQ4APZU754QVT7Z74RLE2","short_pith_number":"pith:O6FYZZQ4","canonical_record":{"source":{"id":"2110.13057","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-25T15:52:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f7adc1478489967080066de9006b17582efbbc112dfbbda9a63d88d41052c468","abstract_canon_sha256":"08febb540e9ca4bc47412bb7063aadd4107fc84b37f185c9dace4f1aa8f63286"},"schema_version":"1.0"},"canonical_sha256":"778b8ce61c03f34ff790acff9ff22b26b1c89d74f23b4c71a44a099cf77fc347","source":{"kind":"arxiv","id":"2110.13057","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.13057","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2110.13057v2","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.13057","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"O6FYZZQ4APZU","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"O6FYZZQ4APZU754Q","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"O6FYZZQ4","created_at":"2026-07-05T04:06:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:O6FYZZQ4APZU754QVT7Z74RLE2","target":"record","payload":{"canonical_record":{"source":{"id":"2110.13057","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-25T15:52:06Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"f7adc1478489967080066de9006b17582efbbc112dfbbda9a63d88d41052c468","abstract_canon_sha256":"08febb540e9ca4bc47412bb7063aadd4107fc84b37f185c9dace4f1aa8f63286"},"schema_version":"1.0"},"canonical_sha256":"778b8ce61c03f34ff790acff9ff22b26b1c89d74f23b4c71a44a099cf77fc347","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:06:17.686878Z","signature_b64":"SbAj1bEgbxapce88k4/fQ8NnAuJCy83ugI41/bJLIJtYXPPFGakDCZQRzZdE4G8xOWcAJ7XOphJPZCWl2mH5DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"778b8ce61c03f34ff790acff9ff22b26b1c89d74f23b4c71a44a099cf77fc347","last_reissued_at":"2026-07-05T04:06:17.686407Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:06:17.686407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.13057","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KkC6Ghv3nxw7hWR0nDviyvAalsDLThwyWZIzcOHk+sE7lCw/0F3lBsI1iMXPkBcJWbYScoyec5HpUSvdhVrFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T18:28:08.058399Z"},"content_sha256":"78984d4aa4ca9819aa2422314c852d7fc0bf2faa0a2451859f66c7634b6f37d8","schema_version":"1.0","event_id":"sha256:78984d4aa4ca9819aa2422314c852d7fc0bf2faa0a2451859f66c7634b6f37d8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:O6FYZZQ4APZU754QVT7Z74RLE2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Jonas Geiping, Liam Fowl, Micah Goldblum, Tom Goldstein, Wojtek Czaja","submitted_at":"2021-10-25T15:52:06Z","abstract_excerpt":"Federated learning has quickly gained popularity with its promises of increased user privacy and efficiency. Previous works have shown that federated gradient updates contain information that can be used to approximately recover user data in some situations. These previous attacks on user privacy have been limited in scope and do not scale to gradient updates aggregated over even a handful of data points, leaving some to conclude that data privacy is still intact for realistic training regimes. In this work, we introduce a new threat model based on minimal but malicious modifications of the sh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.13057","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.13057/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:06:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ONfHlYXQkr+maVORlzjev+vIgEAzi7D5Q/kHu1XmPkkRlisV2Yubyb+n0JgvoNgi0n0W/qdBvTKU58ryHWSCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T18:28:08.058995Z"},"content_sha256":"fc4d73327f998e96e2dd5c83176f1fed5dfbd61a0357eb272bc1e14374ce1d84","schema_version":"1.0","event_id":"sha256:fc4d73327f998e96e2dd5c83176f1fed5dfbd61a0357eb272bc1e14374ce1d84"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O6FYZZQ4APZU754QVT7Z74RLE2/bundle.json","state_url":"https://pith.science/pith/O6FYZZQ4APZU754QVT7Z74RLE2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O6FYZZQ4APZU754QVT7Z74RLE2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T18:28:08Z","links":{"resolver":"https://pith.science/pith/O6FYZZQ4APZU754QVT7Z74RLE2","bundle":"https://pith.science/pith/O6FYZZQ4APZU754QVT7Z74RLE2/bundle.json","state":"https://pith.science/pith/O6FYZZQ4APZU754QVT7Z74RLE2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O6FYZZQ4APZU754QVT7Z74RLE2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:O6FYZZQ4APZU754QVT7Z74RLE2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"08febb540e9ca4bc47412bb7063aadd4107fc84b37f185c9dace4f1aa8f63286","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-25T15:52:06Z","title_canon_sha256":"f7adc1478489967080066de9006b17582efbbc112dfbbda9a63d88d41052c468"},"schema_version":"1.0","source":{"id":"2110.13057","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.13057","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"arxiv_version","alias_value":"2110.13057v2","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.13057","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_12","alias_value":"O6FYZZQ4APZU","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_16","alias_value":"O6FYZZQ4APZU754Q","created_at":"2026-07-05T04:06:17Z"},{"alias_kind":"pith_short_8","alias_value":"O6FYZZQ4","created_at":"2026-07-05T04:06:17Z"}],"graph_snapshots":[{"event_id":"sha256:fc4d73327f998e96e2dd5c83176f1fed5dfbd61a0357eb272bc1e14374ce1d84","target":"graph","created_at":"2026-07-05T04:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.13057/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Federated learning has quickly gained popularity with its promises of increased user privacy and efficiency. Previous works have shown that federated gradient updates contain information that can be used to approximately recover user data in some situations. These previous attacks on user privacy have been limited in scope and do not scale to gradient updates aggregated over even a handful of data points, leaving some to conclude that data privacy is still intact for realistic training regimes. In this work, we introduce a new threat model based on minimal but malicious modifications of the sh","authors_text":"Jonas Geiping, Liam Fowl, Micah Goldblum, Tom Goldstein, Wojtek Czaja","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-25T15:52:06Z","title":"Robbing the Fed: Directly Obtaining Private Data in Federated Learning with Modified Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.13057","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78984d4aa4ca9819aa2422314c852d7fc0bf2faa0a2451859f66c7634b6f37d8","target":"record","created_at":"2026-07-05T04:06:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"08febb540e9ca4bc47412bb7063aadd4107fc84b37f185c9dace4f1aa8f63286","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-10-25T15:52:06Z","title_canon_sha256":"f7adc1478489967080066de9006b17582efbbc112dfbbda9a63d88d41052c468"},"schema_version":"1.0","source":{"id":"2110.13057","kind":"arxiv","version":2}},"canonical_sha256":"778b8ce61c03f34ff790acff9ff22b26b1c89d74f23b4c71a44a099cf77fc347","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"778b8ce61c03f34ff790acff9ff22b26b1c89d74f23b4c71a44a099cf77fc347","first_computed_at":"2026-07-05T04:06:17.686407Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:06:17.686407Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SbAj1bEgbxapce88k4/fQ8NnAuJCy83ugI41/bJLIJtYXPPFGakDCZQRzZdE4G8xOWcAJ7XOphJPZCWl2mH5DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:06:17.686878Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.13057","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78984d4aa4ca9819aa2422314c852d7fc0bf2faa0a2451859f66c7634b6f37d8","sha256:fc4d73327f998e96e2dd5c83176f1fed5dfbd61a0357eb272bc1e14374ce1d84"],"state_sha256":"6e2360127ffdd268f53dabe8d4afc02b365841fd11cf1583907ff69eae6f6673"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"epZBehU/TnrOEGAevjAp+nhlYBPu0t+gKjTyybh7XrIj1fgbLyzDpoYUxxc6AV6pyAPXFbtjlPFS5eDdr5tqAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T18:28:08.063240Z","bundle_sha256":"08cda7f39bf3373ce65891ce937c574963abf6f9f1fabe913a0399e695ca21c9"}}