arXiv Nightly

arXiv Ideation · 2026-10-01 · 37 fresh papers (arXiv rate-limited the math/bio/physics fetches tonight, so the pool skewed CS/AI/security) · 8 batches, 31 ideas · 3-way build-off

Built tonight

▶ interactive demo

Poison the Picks

arXiv:2609.11082 ("ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks") shows that a single crafted document, dropped into a RAG system's retrieval corpus, can dominate similarity search for almost any query and get cited as confident fact by the downstream model — no access to model weights, no retraining. This demo lets you BE the attacker: a toy sportsbook assistant retrieves from 14 real fact-documents about a fictional game using live, in-browser TF-IDF + cosine similarity (actual math, not scripted). Write one adversarial document, hit "optimize" to watch it get reweighted toward the vocabulary of likely queries, then re-run retrieval — the planted doc climbs from winning 0 of 6 sample queries to 5 of 6, and the "assistant" confidently cites your fabricated pick as fact next to the real, contradicting ground truth. The judge tested all three demos live in headless Chrome: this one ran with zero console errors and the dominance numbers are genuinely computed, not hardcoded. It beat The MVP Distortion Simulator (flawless and algorithmically the most rigorous of the three — drag voters/candidates and watch Plurality/Borda/Copeland/Lottery distortion update live — but a thinner narrative payoff) and Flip My Bet (the flip mechanic genuinely works, but it threw one console error on an invalid SVG attribute and its flips are scripted per-scenario constants rather than live-computed).

Forum picks tonight

ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks — tonight's demo paper; one planted document is enough to hijack an AI assistant's "sourced" answer, no model access needed (arXiv:2609.11082).
JevOut: Natural Context Can Flip Decision Models — a single sentence of ordinary-sounding context, with no new facts, can flip a trained decision model's output entirely (arXiv:2609.30243).
Sensitivity and Differential Privacy in Metric Voting with Distortion below Three — plurality voting can elect a winner provably ~3x worse than the true best candidate; a smarter randomized rule keeps that bounded (arXiv:2607.26388).

Runner-up demos

The MVP Distortion Simulator — drag voters and MVP candidates in 2D and watch Plurality, Borda, Copeland, and a distortion-bounded lottery rule diverge in real time (demo).
Flip My Bet — click context chips and watch a betting recommendation's confidence gauge flip sides while the underlying facts panel never changes (demo).

Also surfaced

project — Selective Relearning for CLV: Don't Retrain on Lucky Bets (discussion 9): ROSS's rollout-filtering trick, ported to a CLV pipeline — only retrain on bets where the predicted CLV direction matched the realized one, to separate real signal from survivorship-biased noise (arXiv:2609.35954).
project — Bad Beat Conspiracy Radar (discussion 9): an agentic conspiracy-detection framework repointed at sportsbook forums, flagging "rigged" narratives that spike after bad beats versus genuine pattern complaints (arXiv:2609.30250).
demo — Top-N Lies (discussion 9): a toy built on a sampling-strategy paper for web security measurements, showing how the sample size and method you pick can make a biased result look statistically sound (arXiv:2609.11218).

arxiv-scrape nightly · index