{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:QDB3CXKPSN72SO5MOJETU45YRO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ac0c95ee09d492233758c8b2b2b17d0d9f6fd2c07dd8605f08391eb0bca7020","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-20T08:28:43Z","title_canon_sha256":"825fedd0f100e55f2f14687bdee01bae09993b7c39af547c4c83aaa0745e2726"},"schema_version":"1.0","source":{"id":"2404.13320","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.13320","created_at":"2026-07-05T08:14:23Z"},{"alias_kind":"arxiv_version","alias_value":"2404.13320v2","created_at":"2026-07-05T08:14:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.13320","created_at":"2026-07-05T08:14:23Z"},{"alias_kind":"pith_short_12","alias_value":"QDB3CXKPSN72","created_at":"2026-07-05T08:14:23Z"},{"alias_kind":"pith_short_16","alias_value":"QDB3CXKPSN72SO5M","created_at":"2026-07-05T08:14:23Z"},{"alias_kind":"pith_short_8","alias_value":"QDB3CXKP","created_at":"2026-07-05T08:14:23Z"}],"graph_snapshots":[{"event_id":"sha256:823d397aeca817d8a79612384b169d5aef7a9fc4adb990b2166efb0bc58bb5bb","target":"graph","created_at":"2026-07-05T08:14:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.13320/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples for diffusion models are widely used as solutions for safety concerns. By adding adversarial perturbations to personal images, attackers can not edit or imitate them easily. However, it is essential to note that all these protections target the latent diffusion model (LDMs), the adversarial examples for diffusion models in the pixel space (PDMs) are largely overlooked. This may mislead us to think that the diffusion models are vulnerable to adversarial attacks like most deep models. In this paper, we show novel findings that: even though gradient-based white-box attacks ca","authors_text":"Haotian Xue, Yongxin Chen","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-20T08:28:43Z","title":"Pixel is a Barrier: Diffusion Models Are More Adversarially Robust Than We Think"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.13320","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1e0fc237a62cb55e979b841389dd1fbb3b076b32c118787f61128ab49be683ef","target":"record","created_at":"2026-07-05T08:14:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ac0c95ee09d492233758c8b2b2b17d0d9f6fd2c07dd8605f08391eb0bca7020","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-04-20T08:28:43Z","title_canon_sha256":"825fedd0f100e55f2f14687bdee01bae09993b7c39af547c4c83aaa0745e2726"},"schema_version":"1.0","source":{"id":"2404.13320","kind":"arxiv","version":2}},"canonical_sha256":"80c3b15d4f937fa93bac72493a73b88bb45e842387e5246aaf7a2f909cb2d6e9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"80c3b15d4f937fa93bac72493a73b88bb45e842387e5246aaf7a2f909cb2d6e9","first_computed_at":"2026-07-05T08:14:23.685761Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:14:23.685761Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d6sF5Fpqqec0Qfxs04qDqkbqVUzj/wnix65yyMapqH7+PeB2ZEr4PLTvfIuQ7F2lJmu2xb2ZygE3Oz+xLzacAA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:14:23.686286Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.13320","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1e0fc237a62cb55e979b841389dd1fbb3b076b32c118787f61128ab49be683ef","sha256:823d397aeca817d8a79612384b169d5aef7a9fc4adb990b2166efb0bc58bb5bb"],"state_sha256":"a65be85b562815ac01788a890ffa9fcd1ec481fbdf3a10f7d8c9769642c42cb5"}