{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:ZV2PFJNSL6YZG6KAXTZIDGFKTS","short_pith_number":"pith:ZV2PFJNS","canonical_record":{"source":{"id":"2202.11202","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T22:31:57Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"1f0094cf7efeb543036cf0d1b1eacd54ad42844cce8c674ee4cae7cc368c5976","abstract_canon_sha256":"7fc3ebdd8b5349f021f4b5ddafdb0a7d4f2ce14a7120cb9a5366a887d5d8d527"},"schema_version":"1.0"},"canonical_sha256":"cd74f2a5b25fb1937940bcf28198aa9c8b1dd3d87210ea2e899b488fcc0b4c87","source":{"kind":"arxiv","id":"2202.11202","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.11202","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"arxiv_version","alias_value":"2202.11202v3","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.11202","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_12","alias_value":"ZV2PFJNSL6YZ","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_16","alias_value":"ZV2PFJNSL6YZG6KA","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_8","alias_value":"ZV2PFJNS","created_at":"2026-07-05T05:49:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:ZV2PFJNSL6YZG6KAXTZIDGFKTS","target":"record","payload":{"canonical_record":{"source":{"id":"2202.11202","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T22:31:57Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"1f0094cf7efeb543036cf0d1b1eacd54ad42844cce8c674ee4cae7cc368c5976","abstract_canon_sha256":"7fc3ebdd8b5349f021f4b5ddafdb0a7d4f2ce14a7120cb9a5366a887d5d8d527"},"schema_version":"1.0"},"canonical_sha256":"cd74f2a5b25fb1937940bcf28198aa9c8b1dd3d87210ea2e899b488fcc0b4c87","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:49:27.962763Z","signature_b64":"VmarHXitG1bBu0T99k67bzddIPRlvnOS7DDafMxmSea3cn7R3SMR9Nj7NYYIhqShF9OnYe6aPAxv1x7f1Cg/AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd74f2a5b25fb1937940bcf28198aa9c8b1dd3d87210ea2e899b488fcc0b4c87","last_reissued_at":"2026-07-05T05:49:27.962365Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:49:27.962365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.11202","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JwxwX+OfRhuEnRQvjBfEpnnOP8P0SUCnkkmhFza8nRWrI9+1C5REa70FuLwVfUkqqHi9cnRQ2tt7TqhpmnSvBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T05:50:06.206240Z"},"content_sha256":"95a199e4fb75afe1fec60e89cd7088620237f45068e1f61403e6773a934e48b4","schema_version":"1.0","event_id":"sha256:95a199e4fb75afe1fec60e89cd7088620237f45068e1f61403e6773a934e48b4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:ZV2PFJNSL6YZG6KAXTZIDGFKTS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Dina Katabi, Hao He, Kaiwen Zha","submitted_at":"2022-02-22T22:31:57Z","abstract_excerpt":"Indiscriminate data poisoning attacks are quite effective against supervised learning. However, not much is known about their impact on unsupervised contrastive learning (CL). This paper is the first to consider indiscriminate poisoning attacks of contrastive learning. We propose Contrastive Poisoning (CP), the first effective such attack on CL. We empirically show that Contrastive Poisoning, not only drastically reduces the performance of CL algorithms, but also attacks supervised learning models, making it the most generalizable indiscriminate poisoning attack. We also show that CL algorithm"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.11202","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.11202/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:49:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kmlGL+nwguWOixb8o1FfBjnWsAKV+z4SbN2EemG/3TZeTnAt+1TzZQrc4cssIojFdq9hy8Gqp3cLkbqYL532CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T05:50:06.206826Z"},"content_sha256":"59afb3df910783caf6a2a3b062243808c9012da208d7b6b3d35a5ad0c0456a65","schema_version":"1.0","event_id":"sha256:59afb3df910783caf6a2a3b062243808c9012da208d7b6b3d35a5ad0c0456a65"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/bundle.json","state_url":"https://pith.science/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T05:50:06Z","links":{"resolver":"https://pith.science/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS","bundle":"https://pith.science/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/bundle.json","state":"https://pith.science/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZV2PFJNSL6YZG6KAXTZIDGFKTS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:ZV2PFJNSL6YZG6KAXTZIDGFKTS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7fc3ebdd8b5349f021f4b5ddafdb0a7d4f2ce14a7120cb9a5366a887d5d8d527","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T22:31:57Z","title_canon_sha256":"1f0094cf7efeb543036cf0d1b1eacd54ad42844cce8c674ee4cae7cc368c5976"},"schema_version":"1.0","source":{"id":"2202.11202","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.11202","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"arxiv_version","alias_value":"2202.11202v3","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.11202","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_12","alias_value":"ZV2PFJNSL6YZ","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_16","alias_value":"ZV2PFJNSL6YZG6KA","created_at":"2026-07-05T05:49:27Z"},{"alias_kind":"pith_short_8","alias_value":"ZV2PFJNS","created_at":"2026-07-05T05:49:27Z"}],"graph_snapshots":[{"event_id":"sha256:59afb3df910783caf6a2a3b062243808c9012da208d7b6b3d35a5ad0c0456a65","target":"graph","created_at":"2026-07-05T05:49:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.11202/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Indiscriminate data poisoning attacks are quite effective against supervised learning. However, not much is known about their impact on unsupervised contrastive learning (CL). This paper is the first to consider indiscriminate poisoning attacks of contrastive learning. We propose Contrastive Poisoning (CP), the first effective such attack on CL. We empirically show that Contrastive Poisoning, not only drastically reduces the performance of CL algorithms, but also attacks supervised learning models, making it the most generalizable indiscriminate poisoning attack. We also show that CL algorithm","authors_text":"Dina Katabi, Hao He, Kaiwen Zha","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T22:31:57Z","title":"Indiscriminate Poisoning Attacks on Unsupervised Contrastive Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.11202","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:95a199e4fb75afe1fec60e89cd7088620237f45068e1f61403e6773a934e48b4","target":"record","created_at":"2026-07-05T05:49:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7fc3ebdd8b5349f021f4b5ddafdb0a7d4f2ce14a7120cb9a5366a887d5d8d527","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-02-22T22:31:57Z","title_canon_sha256":"1f0094cf7efeb543036cf0d1b1eacd54ad42844cce8c674ee4cae7cc368c5976"},"schema_version":"1.0","source":{"id":"2202.11202","kind":"arxiv","version":3}},"canonical_sha256":"cd74f2a5b25fb1937940bcf28198aa9c8b1dd3d87210ea2e899b488fcc0b4c87","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cd74f2a5b25fb1937940bcf28198aa9c8b1dd3d87210ea2e899b488fcc0b4c87","first_computed_at":"2026-07-05T05:49:27.962365Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:49:27.962365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VmarHXitG1bBu0T99k67bzddIPRlvnOS7DDafMxmSea3cn7R3SMR9Nj7NYYIhqShF9OnYe6aPAxv1x7f1Cg/AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:49:27.962763Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.11202","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:95a199e4fb75afe1fec60e89cd7088620237f45068e1f61403e6773a934e48b4","sha256:59afb3df910783caf6a2a3b062243808c9012da208d7b6b3d35a5ad0c0456a65"],"state_sha256":"d1bdcfb8f44b8233cc973c5b908184e018edc2b38e3aed8e27747c1cc3f6f26d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PSJl3v2pAh5Mzk+/10RUcOPSYZfmIrvnFVyl4vQnPsPNngmoVON1kqlXKVR3VhLIwEdcvqj8oTnQMU8h2jOiAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T05:50:06.210477Z","bundle_sha256":"d1acbf5b3695585b2b01b81e76d452ced96df5c0c1b8a7b4258411f9782fa06f"}}