{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Z4XTSAFD6RYJOMSWHZ73Q2KM42","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b7cab1943b35f4a5e8d25f1db3e64a5eeb852f67cf686672be8dd81b231e01c5","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-01-29T22:38:21Z","title_canon_sha256":"8148630705fae906b0859681a2a3ad1b6ad91f0f7a0df17c5947e2f85ba3f4d5"},"schema_version":"1.0","source":{"id":"2201.12675","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.12675","created_at":"2026-07-05T06:16:00Z"},{"alias_kind":"arxiv_version","alias_value":"2201.12675v2","created_at":"2026-07-05T06:16:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.12675","created_at":"2026-07-05T06:16:00Z"},{"alias_kind":"pith_short_12","alias_value":"Z4XTSAFD6RYJ","created_at":"2026-07-05T06:16:00Z"},{"alias_kind":"pith_short_16","alias_value":"Z4XTSAFD6RYJOMSW","created_at":"2026-07-05T06:16:00Z"},{"alias_kind":"pith_short_8","alias_value":"Z4XTSAFD","created_at":"2026-07-05T06:16:00Z"}],"graph_snapshots":[{"event_id":"sha256:34c542bb0bebed9786ac864facff35d6461e17af5af526ef97aee94eb649d8dd","target":"graph","created_at":"2026-07-05T06:16:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.12675/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A central tenet of Federated learning (FL), which trains models without centralizing user data, is privacy. However, previous work has shown that the gradient updates used in FL can leak user information. While the most industrial uses of FL are for text applications (e.g. keystroke prediction), nearly all attacks on FL privacy have focused on simple image classifiers. We propose a novel attack that reveals private user text by deploying malicious parameter vectors, and which succeeds even with mini-batches, multiple users, and long sequences. Unlike previous attacks on FL, the attack exploits","authors_text":"Jonas Geiping, Liam Fowl, Micah Goldblum, Steven Reich, Tom Goldstein, Wojtek Czaja, Yuxin Wen","cross_cats":["cs.CL","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-01-29T22:38:21Z","title":"Decepticons: Corrupted Transformers Breach Privacy in Federated Learning for Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.12675","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9d9c340219c51686e91f329cba5f5900b3ec3720b4ca8d272e66ca503ada9917","target":"record","created_at":"2026-07-05T06:16:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b7cab1943b35f4a5e8d25f1db3e64a5eeb852f67cf686672be8dd81b231e01c5","cross_cats_sorted":["cs.CL","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-01-29T22:38:21Z","title_canon_sha256":"8148630705fae906b0859681a2a3ad1b6ad91f0f7a0df17c5947e2f85ba3f4d5"},"schema_version":"1.0","source":{"id":"2201.12675","kind":"arxiv","version":2}},"canonical_sha256":"cf2f3900a3f4709732563e7fb8694ce6b811ed0225ab49565fc3a87659c3b372","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cf2f3900a3f4709732563e7fb8694ce6b811ed0225ab49565fc3a87659c3b372","first_computed_at":"2026-07-05T06:16:00.026443Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:00.026443Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KZot1PnBuH360BAVrmFtUSKQFqZZ3lAfBTQ7wyU/Jze3kAXTZo5eVyTZLMsmiNHO6J6nOb19TjiHH3b6yEBCDw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:00.026937Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.12675","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9d9c340219c51686e91f329cba5f5900b3ec3720b4ca8d272e66ca503ada9917","sha256:34c542bb0bebed9786ac864facff35d6461e17af5af526ef97aee94eb649d8dd"],"state_sha256":"9681bfe85afda8bbcb1356729d96750655932a01144d7573a8b0233599d6f7cf"}