{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:WUTYO3WY42DYAIPR3ZL6QBGUEC","short_pith_number":"pith:WUTYO3WY","canonical_record":{"source":{"id":"2301.13838","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T18:31:20Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"53b535b9516f608b308eab7ecf7635925968bf4b67f46743d843dd5a85aaafa3","abstract_canon_sha256":"8fed43a54abc2ea8aa7a33a6ea0cea77410e2a569323611424a63078f12040a8"},"schema_version":"1.0"},"canonical_sha256":"b527876ed8e6878021f1de57e804d420bcb5b19747ebcac9f64f18edeab96435","source":{"kind":"arxiv","id":"2301.13838","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.13838","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"arxiv_version","alias_value":"2301.13838v2","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.13838","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_12","alias_value":"WUTYO3WY42DY","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_16","alias_value":"WUTYO3WY42DYAIPR","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_8","alias_value":"WUTYO3WY","created_at":"2026-07-05T06:23:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:WUTYO3WY42DYAIPR3ZL6QBGUEC","target":"record","payload":{"canonical_record":{"source":{"id":"2301.13838","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T18:31:20Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"53b535b9516f608b308eab7ecf7635925968bf4b67f46743d843dd5a85aaafa3","abstract_canon_sha256":"8fed43a54abc2ea8aa7a33a6ea0cea77410e2a569323611424a63078f12040a8"},"schema_version":"1.0"},"canonical_sha256":"b527876ed8e6878021f1de57e804d420bcb5b19747ebcac9f64f18edeab96435","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:23:58.951017Z","signature_b64":"m3TqvNclOXKjBaKRYdtOF5F1etkU/ZCAR44GASNgDJ17gS8oR9nJGriYjyN27hAFj67vbF09zDZu3XKQpK2sAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b527876ed8e6878021f1de57e804d420bcb5b19747ebcac9f64f18edeab96435","last_reissued_at":"2026-07-05T06:23:58.950521Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:23:58.950521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2301.13838","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:23:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qqkPka21Q020QkOJZbbuN1/MwDy22zGfyEHyqvOGF6OrSAndOiBfsUcLuz1pgmwRNJOfrdwthrN5SIzEjSIPBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:32:44.955627Z"},"content_sha256":"ac0c291b61683bdf5bc2c5e16d40f3180a1697bd6cb4df471b5f9317f25a3748","schema_version":"1.0","event_id":"sha256:ac0c291b61683bdf5bc2c5e16d40f3180a1697bd6cb4df471b5f9317f25a3748"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:WUTYO3WY42DYAIPR3ZL6QBGUEC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Martha Larson, Zhengyu Zhao, Zhuoran Liu","submitted_at":"2023-01-31T18:31:20Z","abstract_excerpt":"Perturbative availability poisons (PAPs) add small changes to images to prevent their use for model training. Current research adopts the belief that practical and effective approaches to countering PAPs do not exist. In this paper, we argue that it is time to abandon this belief. We present extensive experiments showing that 12 state-of-the-art PAP methods are vulnerable to Image Shortcut Squeezing (ISS), which is based on simple compression. For example, on average, ISS restores the CIFAR-10 model accuracy to $81.73\\%$, surpassing the previous best preprocessing-based countermeasures by $37."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.13838","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.13838/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:23:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HnLfqeXh+f4mBx9YAJuwXmiY9XKZqb6UvdWtR2OZ5siv1480ThuJoxuHB79cRcJjXqUWLoBxlWihqv9LzBfnCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T15:32:44.956145Z"},"content_sha256":"fb1791a2c53d428e76cdf26dd253c19fd6beb0824920f85fdecd7b391cda28ee","schema_version":"1.0","event_id":"sha256:fb1791a2c53d428e76cdf26dd253c19fd6beb0824920f85fdecd7b391cda28ee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/bundle.json","state_url":"https://pith.science/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T15:32:44Z","links":{"resolver":"https://pith.science/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC","bundle":"https://pith.science/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/bundle.json","state":"https://pith.science/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WUTYO3WY42DYAIPR3ZL6QBGUEC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:WUTYO3WY42DYAIPR3ZL6QBGUEC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fed43a54abc2ea8aa7a33a6ea0cea77410e2a569323611424a63078f12040a8","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T18:31:20Z","title_canon_sha256":"53b535b9516f608b308eab7ecf7635925968bf4b67f46743d843dd5a85aaafa3"},"schema_version":"1.0","source":{"id":"2301.13838","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2301.13838","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"arxiv_version","alias_value":"2301.13838v2","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.13838","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_12","alias_value":"WUTYO3WY42DY","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_16","alias_value":"WUTYO3WY42DYAIPR","created_at":"2026-07-05T06:23:58Z"},{"alias_kind":"pith_short_8","alias_value":"WUTYO3WY","created_at":"2026-07-05T06:23:58Z"}],"graph_snapshots":[{"event_id":"sha256:fb1791a2c53d428e76cdf26dd253c19fd6beb0824920f85fdecd7b391cda28ee","target":"graph","created_at":"2026-07-05T06:23:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2301.13838/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Perturbative availability poisons (PAPs) add small changes to images to prevent their use for model training. Current research adopts the belief that practical and effective approaches to countering PAPs do not exist. In this paper, we argue that it is time to abandon this belief. We present extensive experiments showing that 12 state-of-the-art PAP methods are vulnerable to Image Shortcut Squeezing (ISS), which is based on simple compression. For example, on average, ISS restores the CIFAR-10 model accuracy to $81.73\\%$, surpassing the previous best preprocessing-based countermeasures by $37.","authors_text":"Martha Larson, Zhengyu Zhao, Zhuoran Liu","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T18:31:20Z","title":"Image Shortcut Squeezing: Countering Perturbative Availability Poisons with Compression"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.13838","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ac0c291b61683bdf5bc2c5e16d40f3180a1697bd6cb4df471b5f9317f25a3748","target":"record","created_at":"2026-07-05T06:23:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fed43a54abc2ea8aa7a33a6ea0cea77410e2a569323611424a63078f12040a8","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2023-01-31T18:31:20Z","title_canon_sha256":"53b535b9516f608b308eab7ecf7635925968bf4b67f46743d843dd5a85aaafa3"},"schema_version":"1.0","source":{"id":"2301.13838","kind":"arxiv","version":2}},"canonical_sha256":"b527876ed8e6878021f1de57e804d420bcb5b19747ebcac9f64f18edeab96435","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b527876ed8e6878021f1de57e804d420bcb5b19747ebcac9f64f18edeab96435","first_computed_at":"2026-07-05T06:23:58.950521Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:23:58.950521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m3TqvNclOXKjBaKRYdtOF5F1etkU/ZCAR44GASNgDJ17gS8oR9nJGriYjyN27hAFj67vbF09zDZu3XKQpK2sAA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:23:58.951017Z","signed_message":"canonical_sha256_bytes"},"source_id":"2301.13838","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ac0c291b61683bdf5bc2c5e16d40f3180a1697bd6cb4df471b5f9317f25a3748","sha256:fb1791a2c53d428e76cdf26dd253c19fd6beb0824920f85fdecd7b391cda28ee"],"state_sha256":"29a8a2025219ff58e5a336f69eea7df3f8ae41e75d27dc9ac30b8a91dfe67132"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xNPPcnScZeIl675D6Wy8YGRLGUW8O6OUyqz8UfduM2Kbaw/A28syYqCly6KmiG4u6h/F5DNK0BQ3nCl4E2GmCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T15:32:44.960477Z","bundle_sha256":"15a13d19b7709b35fad14ac2e90d89c90d5df14e031dbf28dfbb16e0ab601491"}}