{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:OQGUFJDHHGIOTNXZT6DZ552DMU","short_pith_number":"pith:OQGUFJDH","canonical_record":{"source":{"id":"2310.15469","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T02:48:19Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"2a9593ce2b37a927054325987960e3ae1a6b340246a45b3ac6bc8a6d32992ecf","abstract_canon_sha256":"4dcbca20e40c3c62b7073ea184bdc87f6b05fa9dae5cc6d54dcd712870c56cd5"},"schema_version":"1.0"},"canonical_sha256":"740d42a4673990e9b6f99f879ef743650e38a02ba86ebe145bc670e83bc8e946","source":{"kind":"arxiv","id":"2310.15469","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.15469","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"arxiv_version","alias_value":"2310.15469v3","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.15469","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_12","alias_value":"OQGUFJDHHGIO","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_16","alias_value":"OQGUFJDHHGIOTNXZ","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_8","alias_value":"OQGUFJDH","created_at":"2026-07-05T08:50:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:OQGUFJDHHGIOTNXZT6DZ552DMU","target":"record","payload":{"canonical_record":{"source":{"id":"2310.15469","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T02:48:19Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"2a9593ce2b37a927054325987960e3ae1a6b340246a45b3ac6bc8a6d32992ecf","abstract_canon_sha256":"4dcbca20e40c3c62b7073ea184bdc87f6b05fa9dae5cc6d54dcd712870c56cd5"},"schema_version":"1.0"},"canonical_sha256":"740d42a4673990e9b6f99f879ef743650e38a02ba86ebe145bc670e83bc8e946","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:50:25.182897Z","signature_b64":"6fDZEpU/IUmc0s8erD5vyvIxN8aR0ozvbudXcnierP6plsOyDbpLt0arXRELjuMFdPkfEidXml/UDqaDib+nCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"740d42a4673990e9b6f99f879ef743650e38a02ba86ebe145bc670e83bc8e946","last_reissued_at":"2026-07-05T08:50:25.182540Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:50:25.182540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.15469","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:50:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"diuw/DEl10Q/757ljGrqLpNfc8HDnCmNiKR3Ha25XlEzCfoIGVD3s4ekmZHcNSJrksaaKMFUDIJACvINrF+fCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:33:51.512395Z"},"content_sha256":"577371bbb3d319acedfec71a3c323658b9c89cdb133c6f21a803672797a31d7a","schema_version":"1.0","event_id":"sha256:577371bbb3d319acedfec71a3c323658b9c89cdb133c6f21a803672797a31d7a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:OQGUFJDHHGIOTNXZT6DZ552DMU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Risks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Haixu Tang, Lei Jin, Liya Su, Rui Zhu, Shijun Yan, Siyuan Tang, Xiaofeng Wang, Xiaoyi Chen, Zhikun Zhang, Zihao Wang","submitted_at":"2023-10-24T02:48:19Z","abstract_excerpt":"The rapid advancements of large language models (LLMs) have raised public concerns about the privacy leakage of personally identifiable information (PII) within their extensive training datasets. Recent studies have demonstrated that an adversary could extract highly sensitive privacy data from the training data of LLMs with carefully designed prompts. However, these attacks suffer from the model's tendency to hallucinate and catastrophic forgetting (CF) in the pre-training stage, rendering the veracity of divulged PIIs negligible. In our research, we propose a novel attack, Janus, which explo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.15469","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.15469/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:50:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZAvZQI5sg6jX4sqshNvnEyf9HQg1VIgJTogKI85G62ULjGlaIGSXnoKyujdiC8fnKMEKB18Ip57zsZVSDusQAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T04:33:51.512920Z"},"content_sha256":"b8b9f31250112381464ae45ef9f5fc49b1209b51107a3974f76d4ff2cf90b4c1","schema_version":"1.0","event_id":"sha256:b8b9f31250112381464ae45ef9f5fc49b1209b51107a3974f76d4ff2cf90b4c1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/bundle.json","state_url":"https://pith.science/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T04:33:51Z","links":{"resolver":"https://pith.science/pith/OQGUFJDHHGIOTNXZT6DZ552DMU","bundle":"https://pith.science/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/bundle.json","state":"https://pith.science/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OQGUFJDHHGIOTNXZT6DZ552DMU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:OQGUFJDHHGIOTNXZT6DZ552DMU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4dcbca20e40c3c62b7073ea184bdc87f6b05fa9dae5cc6d54dcd712870c56cd5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T02:48:19Z","title_canon_sha256":"2a9593ce2b37a927054325987960e3ae1a6b340246a45b3ac6bc8a6d32992ecf"},"schema_version":"1.0","source":{"id":"2310.15469","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.15469","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"arxiv_version","alias_value":"2310.15469v3","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.15469","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_12","alias_value":"OQGUFJDHHGIO","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_16","alias_value":"OQGUFJDHHGIOTNXZ","created_at":"2026-07-05T08:50:25Z"},{"alias_kind":"pith_short_8","alias_value":"OQGUFJDH","created_at":"2026-07-05T08:50:25Z"}],"graph_snapshots":[{"event_id":"sha256:b8b9f31250112381464ae45ef9f5fc49b1209b51107a3974f76d4ff2cf90b4c1","target":"graph","created_at":"2026-07-05T08:50:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.15469/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid advancements of large language models (LLMs) have raised public concerns about the privacy leakage of personally identifiable information (PII) within their extensive training datasets. Recent studies have demonstrated that an adversary could extract highly sensitive privacy data from the training data of LLMs with carefully designed prompts. However, these attacks suffer from the model's tendency to hallucinate and catastrophic forgetting (CF) in the pre-training stage, rendering the veracity of divulged PIIs negligible. In our research, we propose a novel attack, Janus, which explo","authors_text":"Haixu Tang, Lei Jin, Liya Su, Rui Zhu, Shijun Yan, Siyuan Tang, Xiaofeng Wang, Xiaoyi Chen, Zhikun Zhang, Zihao Wang","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T02:48:19Z","title":"The Janus Interface: How Fine-Tuning in Large Language Models Amplifies the Privacy Risks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.15469","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:577371bbb3d319acedfec71a3c323658b9c89cdb133c6f21a803672797a31d7a","target":"record","created_at":"2026-07-05T08:50:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4dcbca20e40c3c62b7073ea184bdc87f6b05fa9dae5cc6d54dcd712870c56cd5","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-24T02:48:19Z","title_canon_sha256":"2a9593ce2b37a927054325987960e3ae1a6b340246a45b3ac6bc8a6d32992ecf"},"schema_version":"1.0","source":{"id":"2310.15469","kind":"arxiv","version":3}},"canonical_sha256":"740d42a4673990e9b6f99f879ef743650e38a02ba86ebe145bc670e83bc8e946","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"740d42a4673990e9b6f99f879ef743650e38a02ba86ebe145bc670e83bc8e946","first_computed_at":"2026-07-05T08:50:25.182540Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:50:25.182540Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6fDZEpU/IUmc0s8erD5vyvIxN8aR0ozvbudXcnierP6plsOyDbpLt0arXRELjuMFdPkfEidXml/UDqaDib+nCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:50:25.182897Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.15469","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:577371bbb3d319acedfec71a3c323658b9c89cdb133c6f21a803672797a31d7a","sha256:b8b9f31250112381464ae45ef9f5fc49b1209b51107a3974f76d4ff2cf90b4c1"],"state_sha256":"67a52c8272a4e523712c1827d7e61e61dfc36e4c713bc4cf7bedab82166c19ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uTrB0JDsPeWokypf5ArG1/OBYmFSLauhwuEK+Daz6oD9WbdsPKe3RlOMcC25P8XuhBlIi8DNZ3ZE488szMn+Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T04:33:51.517397Z","bundle_sha256":"bd7fd20dd0288545708b28a89c3cee4ed19477b2e9e3f0ad1a3631ee8123e571"}}