{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:RZUTK7XZVK4KHMWUNPMXKY6QCV","short_pith_number":"pith:RZUTK7XZ","canonical_record":{"source":{"id":"2104.07815","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-04-15T23:15:12Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8e3976b4878665f34b650a557dba224d0260748fe7366d98684670357aebd696","abstract_canon_sha256":"c6e92a7c99571e940c4c8da16c35f119b19e57212ff281aa93c65d472cfee01d"},"schema_version":"1.0"},"canonical_sha256":"8e69357ef9aab8a3b2d46bd97563d01542fa13e1d12639fe67a76fb1d97e635b","source":{"kind":"arxiv","id":"2104.07815","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.07815","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"arxiv_version","alias_value":"2104.07815v1","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.07815","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_12","alias_value":"RZUTK7XZVK4K","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"RZUTK7XZVK4KHMWU","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"RZUTK7XZ","created_at":"2026-07-05T02:32:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:RZUTK7XZVK4KHMWUNPMXKY6QCV","target":"record","payload":{"canonical_record":{"source":{"id":"2104.07815","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-04-15T23:15:12Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"8e3976b4878665f34b650a557dba224d0260748fe7366d98684670357aebd696","abstract_canon_sha256":"c6e92a7c99571e940c4c8da16c35f119b19e57212ff281aa93c65d472cfee01d"},"schema_version":"1.0"},"canonical_sha256":"8e69357ef9aab8a3b2d46bd97563d01542fa13e1d12639fe67a76fb1d97e635b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:32:37.949774Z","signature_b64":"lvl6BBkFN6FSGS4FiUKqhPkFx+KXixzSXprvyRwhuuh+iWNjWxRpyx9rOruu5KJZIRDrm3E3R5bLQiFks182Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8e69357ef9aab8a3b2d46bd97563d01542fa13e1d12639fe67a76fb1d97e635b","last_reissued_at":"2026-07-05T02:32:37.949375Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:32:37.949375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.07815","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:32:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"486kmi8XvWchhKEEuARLLBlphiw2Ai5jrS4CUDbCkhb/P0Z4Pk5DsRY3YTFme5K689+d+KuoNENlx80jmfiQAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:21:05.955772Z"},"content_sha256":"40ce6abd731e612163a14175af07cc35634b16a6ce69c47a06adc918c02290c5","schema_version":"1.0","event_id":"sha256:40ce6abd731e612163a14175af07cc35634b16a6ce69c47a06adc918c02290c5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:RZUTK7XZVK4KHMWUNPMXKY6QCV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Method to Reveal Speaker Identity in Distributed ASR Training, and How to Counter It","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CL","authors_text":"Fran\\c{c}oise Beaufays, Om Thakkar, Peter Chin, Rajiv Mathews, Swaroop Ramaswamy, Trung Dang","submitted_at":"2021-04-15T23:15:12Z","abstract_excerpt":"End-to-end Automatic Speech Recognition (ASR) models are commonly trained over spoken utterances using optimization methods like Stochastic Gradient Descent (SGD). In distributed settings like Federated Learning, model training requires transmission of gradients over a network. In this work, we design the first method for revealing the identity of the speaker of a training utterance with access only to a gradient. We propose Hessian-Free Gradients Matching, an input reconstruction technique that operates without second derivatives of the loss function (required in prior works), which can be ex"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.07815","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.07815/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:32:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vcAqLXN7gEZ/2MTwnRn6fvq3Ez2Gwxkhpfp2xl3rOCFNZY6dBFTNv3CsOErm4mj++kFDwYQDawFwaIFfX0UCBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T07:21:05.956457Z"},"content_sha256":"c0d710844e3ab481d867ff095bc9ee2b01d45da582c058a4897ce2cbdcb0e178","schema_version":"1.0","event_id":"sha256:c0d710844e3ab481d867ff095bc9ee2b01d45da582c058a4897ce2cbdcb0e178"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/bundle.json","state_url":"https://pith.science/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T07:21:05Z","links":{"resolver":"https://pith.science/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV","bundle":"https://pith.science/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/bundle.json","state":"https://pith.science/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RZUTK7XZVK4KHMWUNPMXKY6QCV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:RZUTK7XZVK4KHMWUNPMXKY6QCV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c6e92a7c99571e940c4c8da16c35f119b19e57212ff281aa93c65d472cfee01d","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-04-15T23:15:12Z","title_canon_sha256":"8e3976b4878665f34b650a557dba224d0260748fe7366d98684670357aebd696"},"schema_version":"1.0","source":{"id":"2104.07815","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.07815","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"arxiv_version","alias_value":"2104.07815v1","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.07815","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_12","alias_value":"RZUTK7XZVK4K","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"RZUTK7XZVK4KHMWU","created_at":"2026-07-05T02:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"RZUTK7XZ","created_at":"2026-07-05T02:32:37Z"}],"graph_snapshots":[{"event_id":"sha256:c0d710844e3ab481d867ff095bc9ee2b01d45da582c058a4897ce2cbdcb0e178","target":"graph","created_at":"2026-07-05T02:32:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.07815/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"End-to-end Automatic Speech Recognition (ASR) models are commonly trained over spoken utterances using optimization methods like Stochastic Gradient Descent (SGD). In distributed settings like Federated Learning, model training requires transmission of gradients over a network. In this work, we design the first method for revealing the identity of the speaker of a training utterance with access only to a gradient. We propose Hessian-Free Gradients Matching, an input reconstruction technique that operates without second derivatives of the loss function (required in prior works), which can be ex","authors_text":"Fran\\c{c}oise Beaufays, Om Thakkar, Peter Chin, Rajiv Mathews, Swaroop Ramaswamy, Trung Dang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-04-15T23:15:12Z","title":"A Method to Reveal Speaker Identity in Distributed ASR Training, and How to Counter It"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.07815","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:40ce6abd731e612163a14175af07cc35634b16a6ce69c47a06adc918c02290c5","target":"record","created_at":"2026-07-05T02:32:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c6e92a7c99571e940c4c8da16c35f119b19e57212ff281aa93c65d472cfee01d","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2021-04-15T23:15:12Z","title_canon_sha256":"8e3976b4878665f34b650a557dba224d0260748fe7366d98684670357aebd696"},"schema_version":"1.0","source":{"id":"2104.07815","kind":"arxiv","version":1}},"canonical_sha256":"8e69357ef9aab8a3b2d46bd97563d01542fa13e1d12639fe67a76fb1d97e635b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8e69357ef9aab8a3b2d46bd97563d01542fa13e1d12639fe67a76fb1d97e635b","first_computed_at":"2026-07-05T02:32:37.949375Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:32:37.949375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lvl6BBkFN6FSGS4FiUKqhPkFx+KXixzSXprvyRwhuuh+iWNjWxRpyx9rOruu5KJZIRDrm3E3R5bLQiFks182Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:32:37.949774Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.07815","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:40ce6abd731e612163a14175af07cc35634b16a6ce69c47a06adc918c02290c5","sha256:c0d710844e3ab481d867ff095bc9ee2b01d45da582c058a4897ce2cbdcb0e178"],"state_sha256":"3648108dff36570597b8311889de6e5bd49ac4b91e37e640dfeba17cdd06020e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QQc32vgzIS1dNRQHX3KymAl390NGUVWrtg0byeuEel0LY1M5fx8Eti0wi2XjZEdkga0hlNYozaxClWcXfFzzDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T07:21:05.961141Z","bundle_sha256":"d739ff31b1544c1ba73cadb87fc0724ce4d98a0f8d8fccad73530363bc5d9e75"}}