{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:ZU2P37XFDSPJCUY2OXVLYYFGXG","short_pith_number":"pith:ZU2P37XF","schema_version":"1.0","canonical_sha256":"cd34fdfee51c9e91531a75eabc60a6b9b9aba85968a70353279b10e3abee9df3","source":{"kind":"arxiv","id":"2502.13998","version":2},"attestation_state":"computed","paper":{"title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"eess.IV","authors_text":"Hengyue Liang, Ju Sun, Taihui Li","submitted_at":"2025-02-19T07:30:19Z","abstract_excerpt":"Image watermarks have been considered a promising technique to help detect AI-generated content, which can be used to protect copyright or prevent fake image abuse. In this work, we present a black-box method for removing invisible image watermarks, without the need of any dataset of watermarked images or any knowledge about the watermark system. Our approach is simple to implement: given a single watermarked image, we regress it by deep image prior (DIP). We show that from the intermediate steps of DIP one can reliably find an evasion image that can remove invisible watermarks while preservin"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2502.13998","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.IV","submitted_at":"2025-02-19T07:30:19Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"d2e4fafe95a1197d0427a87e8c62a0e7ef24c4b5a2a7cf65993faecdd168771e","abstract_canon_sha256":"685ba14144e4642085615cd98f07083de798cf9a3bf02c4b3d0cf379f73cf756"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:30:41.629678Z","signature_b64":"lniZt24Mol+4k2TAbZZtxhtrFw61npxhcOND+rEYm4lKrFtFRLmQmKQdKS4lme2N3wFaUKobdcHjzvDcCi6uDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd34fdfee51c9e91531a75eabc60a6b9b9aba85968a70353279b10e3abee9df3","last_reissued_at":"2026-07-05T11:30:41.629164Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:30:41.629164Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"eess.IV","authors_text":"Hengyue Liang, Ju Sun, Taihui Li","submitted_at":"2025-02-19T07:30:19Z","abstract_excerpt":"Image watermarks have been considered a promising technique to help detect AI-generated content, which can be used to protect copyright or prevent fake image abuse. In this work, we present a black-box method for removing invisible image watermarks, without the need of any dataset of watermarked images or any knowledge about the watermark system. Our approach is simple to implement: given a single watermarked image, we regress it by deep image prior (DIP). We show that from the intermediate steps of DIP one can reliably find an evasion image that can remove invisible watermarks while preservin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.13998","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.13998/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2502.13998","created_at":"2026-07-05T11:30:41.629224+00:00"},{"alias_kind":"arxiv_version","alias_value":"2502.13998v2","created_at":"2026-07-05T11:30:41.629224+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.13998","created_at":"2026-07-05T11:30:41.629224+00:00"},{"alias_kind":"pith_short_12","alias_value":"ZU2P37XFDSPJ","created_at":"2026-07-05T11:30:41.629224+00:00"},{"alias_kind":"pith_short_16","alias_value":"ZU2P37XFDSPJCUY2","created_at":"2026-07-05T11:30:41.629224+00:00"},{"alias_kind":"pith_short_8","alias_value":"ZU2P37XF","created_at":"2026-07-05T11:30:41.629224+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG","json":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG.json","graph_json":"https://pith.science/api/pith-number/ZU2P37XFDSPJCUY2OXVLYYFGXG/graph.json","events_json":"https://pith.science/api/pith-number/ZU2P37XFDSPJCUY2OXVLYYFGXG/events.json","paper":"https://pith.science/paper/ZU2P37XF"},"agent_actions":{"view_html":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG","download_json":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG.json","view_paper":"https://pith.science/paper/ZU2P37XF","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2502.13998&json=true","fetch_graph":"https://pith.science/api/pith-number/ZU2P37XFDSPJCUY2OXVLYYFGXG/graph.json","fetch_events":"https://pith.science/api/pith-number/ZU2P37XFDSPJCUY2OXVLYYFGXG/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG/action/storage_attestation","attest_author":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG/action/author_attestation","sign_citation":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG/action/citation_signature","submit_replication":"https://pith.science/pith/ZU2P37XFDSPJCUY2OXVLYYFGXG/action/replication_record"}},"created_at":"2026-07-05T11:30:41.629224+00:00","updated_at":"2026-07-05T11:30:41.629224+00:00"}