{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XZQ6GVCIDGIBL6XM2IJJ4ZBGDT","short_pith_number":"pith:XZQ6GVCI","canonical_record":{"source":{"id":"2408.01228","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-02T12:36:13Z","cross_cats_sorted":[],"title_canon_sha256":"772db543dc1b00f7e4205f3304f6166cce60425227cca90c01866056a965f7a6","abstract_canon_sha256":"6de49261e10ef1f1e7a57ded0788dc4507a643e432b28bdc8bd1cb240cf37982"},"schema_version":"1.0"},"canonical_sha256":"be61e35448199015faecd2129e64261cc111747846e1515603bd816f7adfb147","source":{"kind":"arxiv","id":"2408.01228","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01228","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01228v2","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01228","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_12","alias_value":"XZQ6GVCIDGIB","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_16","alias_value":"XZQ6GVCIDGIBL6XM","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_8","alias_value":"XZQ6GVCI","created_at":"2026-07-05T08:56:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XZQ6GVCIDGIBL6XM2IJJ4ZBGDT","target":"record","payload":{"canonical_record":{"source":{"id":"2408.01228","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-02T12:36:13Z","cross_cats_sorted":[],"title_canon_sha256":"772db543dc1b00f7e4205f3304f6166cce60425227cca90c01866056a965f7a6","abstract_canon_sha256":"6de49261e10ef1f1e7a57ded0788dc4507a643e432b28bdc8bd1cb240cf37982"},"schema_version":"1.0"},"canonical_sha256":"be61e35448199015faecd2129e64261cc111747846e1515603bd816f7adfb147","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:56:48.328279Z","signature_b64":"5xvTc0bUqhCFG3DO07vqMX9oKmHzEvUtjNsZ+YAYbnWMBZuLB85IBKPAwWKqsMLUL1RJzTjkP7IOWHapkrIFCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"be61e35448199015faecd2129e64261cc111747846e1515603bd816f7adfb147","last_reissued_at":"2026-07-05T08:56:48.327687Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:56:48.327687Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.01228","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5uz9/SDUKUbMrXOwSFNYhWYe7GAKN20IW7rFl98osvIrKMkFzd2h85GmvJvIBaIhmQZXe+PriD0DiaBocfWRBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:17:42.853110Z"},"content_sha256":"94a261ad216a75db14cdf68c3c9c69d3aecbc9e2734146befc4dd48e8604421c","schema_version":"1.0","event_id":"sha256:94a261ad216a75db14cdf68c3c9c69d3aecbc9e2734146befc4dd48e8604421c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XZQ6GVCIDGIBL6XM2IJJ4ZBGDT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Elisa Ricci, Massimiliano Mancini, Rahaf Aljundi, Simone Caldarella","submitted_at":"2024-08-02T12:36:13Z","abstract_excerpt":"Vision-Language Models (VLMs) combine visual and textual understanding, rendering them well-suited for diverse tasks like generating image captions and answering visual questions across various domains. However, these capabilities are built upon training on large amount of uncurated data crawled from the web. The latter may include sensitive information that VLMs could memorize and leak, raising significant privacy concerns. In this paper, we assess whether these vulnerabilities exist, focusing on identity leakage. Our study leads to three key findings: (i) VLMs leak identity information, even"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01228","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.01228/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:56:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bYPVwmypZ+J9aPEQJpJctnltci3v0i14aflaqxVLdO7SwCuA70Ss4W5Z0dn10cLN36NAIiPdH8YIHvIaPqSBBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:17:42.853608Z"},"content_sha256":"e3690b290101f2646939181909cbb3d44b9c763cc5b39c91450674806e5cd77e","schema_version":"1.0","event_id":"sha256:e3690b290101f2646939181909cbb3d44b9c763cc5b39c91450674806e5cd77e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/bundle.json","state_url":"https://pith.science/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T11:17:42Z","links":{"resolver":"https://pith.science/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT","bundle":"https://pith.science/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/bundle.json","state":"https://pith.science/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XZQ6GVCIDGIBL6XM2IJJ4ZBGDT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XZQ6GVCIDGIBL6XM2IJJ4ZBGDT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6de49261e10ef1f1e7a57ded0788dc4507a643e432b28bdc8bd1cb240cf37982","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-02T12:36:13Z","title_canon_sha256":"772db543dc1b00f7e4205f3304f6166cce60425227cca90c01866056a965f7a6"},"schema_version":"1.0","source":{"id":"2408.01228","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.01228","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"arxiv_version","alias_value":"2408.01228v2","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.01228","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_12","alias_value":"XZQ6GVCIDGIB","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_16","alias_value":"XZQ6GVCIDGIBL6XM","created_at":"2026-07-05T08:56:48Z"},{"alias_kind":"pith_short_8","alias_value":"XZQ6GVCI","created_at":"2026-07-05T08:56:48Z"}],"graph_snapshots":[{"event_id":"sha256:e3690b290101f2646939181909cbb3d44b9c763cc5b39c91450674806e5cd77e","target":"graph","created_at":"2026-07-05T08:56:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.01228/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Language Models (VLMs) combine visual and textual understanding, rendering them well-suited for diverse tasks like generating image captions and answering visual questions across various domains. However, these capabilities are built upon training on large amount of uncurated data crawled from the web. The latter may include sensitive information that VLMs could memorize and leak, raising significant privacy concerns. In this paper, we assess whether these vulnerabilities exist, focusing on identity leakage. Our study leads to three key findings: (i) VLMs leak identity information, even","authors_text":"Elisa Ricci, Massimiliano Mancini, Rahaf Aljundi, Simone Caldarella","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-02T12:36:13Z","title":"The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.01228","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94a261ad216a75db14cdf68c3c9c69d3aecbc9e2734146befc4dd48e8604421c","target":"record","created_at":"2026-07-05T08:56:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6de49261e10ef1f1e7a57ded0788dc4507a643e432b28bdc8bd1cb240cf37982","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2024-08-02T12:36:13Z","title_canon_sha256":"772db543dc1b00f7e4205f3304f6166cce60425227cca90c01866056a965f7a6"},"schema_version":"1.0","source":{"id":"2408.01228","kind":"arxiv","version":2}},"canonical_sha256":"be61e35448199015faecd2129e64261cc111747846e1515603bd816f7adfb147","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"be61e35448199015faecd2129e64261cc111747846e1515603bd816f7adfb147","first_computed_at":"2026-07-05T08:56:48.327687Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:56:48.327687Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5xvTc0bUqhCFG3DO07vqMX9oKmHzEvUtjNsZ+YAYbnWMBZuLB85IBKPAwWKqsMLUL1RJzTjkP7IOWHapkrIFCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:56:48.328279Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.01228","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94a261ad216a75db14cdf68c3c9c69d3aecbc9e2734146befc4dd48e8604421c","sha256:e3690b290101f2646939181909cbb3d44b9c763cc5b39c91450674806e5cd77e"],"state_sha256":"9fc64ac72951e4cfbc41b3107c71a36911e12cd4baa9c4974d7d162c7f4584c3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oug2uzq5OgzUsyhnEBh5mQsPFTSwHW3Ymx8X7ux5DG4audxvTaSrQmB8n6SFpCy8nLhRXrAXX1BQHm3EciLHCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T11:17:42.858394Z","bundle_sha256":"d12598967981405fe2875e2a08ab58018d808daf3750cf4acf11844a40920821"}}