{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RAZAQIGF3VR47HBKVVIS4YD2OU","short_pith_number":"pith:RAZAQIGF","canonical_record":{"source":{"id":"2411.00154","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-31T18:59:46Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"79319b2e79e3596fbeb870298a4759afc51309c83ea43bebb976b716641c1bab","abstract_canon_sha256":"2b20dd0a17a5651be9bdd3fa439469c8ae0b37455d7c61b840e43d21f9eff701"},"schema_version":"1.0"},"canonical_sha256":"88320820c5dd63cf9c2aad512e607a75295a52902fe6da914cbf2fbfd3f5be60","source":{"kind":"arxiv","id":"2411.00154","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00154","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00154v2","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00154","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_12","alias_value":"RAZAQIGF3VR4","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_16","alias_value":"RAZAQIGF3VR47HBK","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_8","alias_value":"RAZAQIGF","created_at":"2026-07-05T10:08:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RAZAQIGF3VR47HBKVVIS4YD2OU","target":"record","payload":{"canonical_record":{"source":{"id":"2411.00154","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-31T18:59:46Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"79319b2e79e3596fbeb870298a4759afc51309c83ea43bebb976b716641c1bab","abstract_canon_sha256":"2b20dd0a17a5651be9bdd3fa439469c8ae0b37455d7c61b840e43d21f9eff701"},"schema_version":"1.0"},"canonical_sha256":"88320820c5dd63cf9c2aad512e607a75295a52902fe6da914cbf2fbfd3f5be60","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:08:53.984701Z","signature_b64":"qrqirImB++KTvvDzWn0G8w3pH7xKpwYMkx9TDdwXXRecOS2xreiEpSjPbsCon9IEy5lix3WyeOUWR+e3NUhTDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"88320820c5dd63cf9c2aad512e607a75295a52902fe6da914cbf2fbfd3f5be60","last_reissued_at":"2026-07-05T10:08:53.984269Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:08:53.984269Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.00154","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NnOgsFHEw7GkZqdDJ61xkDzRZHKOllcannpW4V/RR2cO/+pAZCaW43NHYzuYeixrWHfFkkaee0dVbW1satMEBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:59:29.304343Z"},"content_sha256":"09a2567bd1cad72420374ea0f86f8d7e7d57f0f1c93e0efda01f414f1d05d3d0","schema_version":"1.0","event_id":"sha256:09a2567bd1cad72420374ea0f86f8d7e7d57f0f1c93e0efda01f414f1d05d3d0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RAZAQIGF3VR47HBKVVIS4YD2OU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CL","authors_text":"Haritz Puerto, Martin Gubri, Sangdoo Yun, Seong Joon Oh","submitted_at":"2024-10-31T18:59:46Z","abstract_excerpt":"Membership inference attacks (MIA) attempt to verify the membership of a given data sample in the training set for a model. MIA has become relevant in recent years, following the rapid development of large language models (LLM). Many are concerned about the usage of copyrighted materials for training them and call for methods for detecting such usage. However, recent research has largely concluded that current MIA methods do not work on LLMs. Even when they seem to work, it is usually because of the ill-designed experimental setup where other shortcut features enable \"cheating.\" In this work, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00154","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.00154/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:08:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4GFBPK44jLncW5lf8rEIHKd/tIwXAo13GTNDsEmfYsM7aUharxE+6K87g9dem8xLm79+hPoUPGxJfG7bazI9DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:59:29.304897Z"},"content_sha256":"b26dac2e02c9409fda7d5f1a11ae64c4a45f811ede1fb91fd4810e345705329a","schema_version":"1.0","event_id":"sha256:b26dac2e02c9409fda7d5f1a11ae64c4a45f811ede1fb91fd4810e345705329a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/bundle.json","state_url":"https://pith.science/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:59:29Z","links":{"resolver":"https://pith.science/pith/RAZAQIGF3VR47HBKVVIS4YD2OU","bundle":"https://pith.science/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/bundle.json","state":"https://pith.science/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RAZAQIGF3VR47HBKVVIS4YD2OU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RAZAQIGF3VR47HBKVVIS4YD2OU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2b20dd0a17a5651be9bdd3fa439469c8ae0b37455d7c61b840e43d21f9eff701","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-31T18:59:46Z","title_canon_sha256":"79319b2e79e3596fbeb870298a4759afc51309c83ea43bebb976b716641c1bab"},"schema_version":"1.0","source":{"id":"2411.00154","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.00154","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"arxiv_version","alias_value":"2411.00154v2","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.00154","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_12","alias_value":"RAZAQIGF3VR4","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_16","alias_value":"RAZAQIGF3VR47HBK","created_at":"2026-07-05T10:08:53Z"},{"alias_kind":"pith_short_8","alias_value":"RAZAQIGF","created_at":"2026-07-05T10:08:53Z"}],"graph_snapshots":[{"event_id":"sha256:b26dac2e02c9409fda7d5f1a11ae64c4a45f811ede1fb91fd4810e345705329a","target":"graph","created_at":"2026-07-05T10:08:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.00154/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Membership inference attacks (MIA) attempt to verify the membership of a given data sample in the training set for a model. MIA has become relevant in recent years, following the rapid development of large language models (LLM). Many are concerned about the usage of copyrighted materials for training them and call for methods for detecting such usage. However, recent research has largely concluded that current MIA methods do not work on LLMs. Even when they seem to work, it is usually because of the ill-designed experimental setup where other shortcut features enable \"cheating.\" In this work, ","authors_text":"Haritz Puerto, Martin Gubri, Sangdoo Yun, Seong Joon Oh","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-31T18:59:46Z","title":"Scaling Up Membership Inference: When and How Attacks Succeed on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.00154","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09a2567bd1cad72420374ea0f86f8d7e7d57f0f1c93e0efda01f414f1d05d3d0","target":"record","created_at":"2026-07-05T10:08:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2b20dd0a17a5651be9bdd3fa439469c8ae0b37455d7c61b840e43d21f9eff701","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2024-10-31T18:59:46Z","title_canon_sha256":"79319b2e79e3596fbeb870298a4759afc51309c83ea43bebb976b716641c1bab"},"schema_version":"1.0","source":{"id":"2411.00154","kind":"arxiv","version":2}},"canonical_sha256":"88320820c5dd63cf9c2aad512e607a75295a52902fe6da914cbf2fbfd3f5be60","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"88320820c5dd63cf9c2aad512e607a75295a52902fe6da914cbf2fbfd3f5be60","first_computed_at":"2026-07-05T10:08:53.984269Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:08:53.984269Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qrqirImB++KTvvDzWn0G8w3pH7xKpwYMkx9TDdwXXRecOS2xreiEpSjPbsCon9IEy5lix3WyeOUWR+e3NUhTDg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:08:53.984701Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.00154","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09a2567bd1cad72420374ea0f86f8d7e7d57f0f1c93e0efda01f414f1d05d3d0","sha256:b26dac2e02c9409fda7d5f1a11ae64c4a45f811ede1fb91fd4810e345705329a"],"state_sha256":"6a037a4d019bea72b70aee93b0d9fd86ed42fce809e336652f1b587dfd353db6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B0NHFsCwIbEVMme4C7VFLqYQnbTkQBSncN3BhZb0g+MY/6vTVzDJhum9OnBmNenV+310ns3nIqYeAE6N6F2TCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:59:29.309931Z","bundle_sha256":"0b9c0e62695c3d17a76a35c8801df7e880e172b6a5b1ec49ab7c49676f0b9ca7"}}