{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WP6RA5HAGGQBV52RFOAYLAHSTP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c1ca10685e9d2f7fc1731c4fb0d03d88f0069deba42f19f7b9cd93c8c0ed7e2c","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-14T07:05:18Z","title_canon_sha256":"a39c6d5e15e27cf950fa14524710557fe42d74e6f62427cdaafb2716a51cc4ec"},"schema_version":"1.0","source":{"id":"2405.08363","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.08363","created_at":"2026-07-05T09:39:06Z"},{"alias_kind":"arxiv_version","alias_value":"2405.08363v2","created_at":"2026-07-05T09:39:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.08363","created_at":"2026-07-05T09:39:06Z"},{"alias_kind":"pith_short_12","alias_value":"WP6RA5HAGGQB","created_at":"2026-07-05T09:39:06Z"},{"alias_kind":"pith_short_16","alias_value":"WP6RA5HAGGQBV52R","created_at":"2026-07-05T09:39:06Z"},{"alias_kind":"pith_short_8","alias_value":"WP6RA5HA","created_at":"2026-07-05T09:39:06Z"}],"graph_snapshots":[{"event_id":"sha256:e65b5d808c224bf4579ad66e3828b835f97038c8eb742b5866543ad848cc3975","target":"graph","created_at":"2026-07-05T09:39:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.08363/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Reports regarding the misuse of Generative AI (GenAI) to create deepfakes are frequent. Defensive watermarking enables GenAI providers to hide fingerprints in their images and use them later for deepfake detection. Yet, its potential has not been fully explored. We present UnMarker -- the first practical universal attack on defensive watermarking. Unlike existing attacks, UnMarker requires no detector feedback, no unrealistic knowledge of the watermarking scheme or similar models, and no advanced denoising pipelines that may not be available. Instead, being the product of an in-depth analysis ","authors_text":"Andre Kassis, Urs Hengartner","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-14T07:05:18Z","title":"UnMarker: A Universal Attack on Defensive Image Watermarking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.08363","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1bc5e7f509d3721e8861b044212c9ed2e6d3ab0d5c2af9abbade33ca9c1817c","target":"record","created_at":"2026-07-05T09:39:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c1ca10685e9d2f7fc1731c4fb0d03d88f0069deba42f19f7b9cd93c8c0ed7e2c","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-14T07:05:18Z","title_canon_sha256":"a39c6d5e15e27cf950fa14524710557fe42d74e6f62427cdaafb2716a51cc4ec"},"schema_version":"1.0","source":{"id":"2405.08363","kind":"arxiv","version":2}},"canonical_sha256":"b3fd1074e031a01af7512b818580f29bc2d825fd047d18f1d58c59824c3f643f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b3fd1074e031a01af7512b818580f29bc2d825fd047d18f1d58c59824c3f643f","first_computed_at":"2026-07-05T09:39:06.282266Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:39:06.282266Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6bv6TJEJFFcpaVE5rE8McvgrG+nkZ1yPN8o3BKpe8IrQhbsq67F96Uc3LVkRcqfwMbGJg4aOZRCK4lX2DAuYCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:39:06.282710Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.08363","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1bc5e7f509d3721e8861b044212c9ed2e6d3ab0d5c2af9abbade33ca9c1817c","sha256:e65b5d808c224bf4579ad66e3828b835f97038c8eb742b5866543ad848cc3975"],"state_sha256":"a448135441c7226e8727c221ea2f1d5d3d3b6571378f039624003dde0545cdad"}