# Unveiling Unicode's Unseen Underpinnings in Undermining Authorship Attribution

arXiv: https://arxiv.org/abs/2508.15840 · HTML: https://mlsanity.com/paper/2508.15840/

## Key facts

- Cited by 3 papers in the map (data through 14 Oct 2026).
- Builds on 17 of its 51 references that are in the map.
- First posted on arXiv 19 Aug 2025.

## Builds on (most cited first, 17 of 17)

- [PEGASUS: Pre-training with Extracted Gap-sentences for Abstractive Summarization](https://mlsanity.com/paper/1912.08777/) (2019)
- [Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Models](https://mlsanity.com/paper/2310.13828/) (2023)
- [A4NT: Author Attribute Anonymity by Adversarial Training of Neural Machine Translation](https://mlsanity.com/paper/1711.01921/) (2017)
- [Attribution and Obfuscation of Neural Text Authorship: A Data Mining Perspective](https://mlsanity.com/paper/2210.10488/) (2022)
- [Adversarial Stylometry in the Wild: Transferable Lexical Substitution Attacks on Author Profiling](https://mlsanity.com/paper/2101.11310/) (2021)
- [Style Pooling: Automatic Text Style Obfuscation for Improved Classification Fairness](https://mlsanity.com/paper/2109.04624/) (2021)
- [AuthorMist: Evading AI Text Detectors with Reinforcement Learning](https://mlsanity.com/paper/2503.08716/) (2025)
- [Fighting Authorship Linkability with Crowdsourcing](https://mlsanity.com/paper/1405.4918/) (2014)
- [Avengers Ensemble! Improving Transferability of Authorship Obfuscation](https://mlsanity.com/paper/2109.07028/) (2021)
- [On the Impact of Noise in Differentially Private Text Rewriting](https://mlsanity.com/paper/2501.19022/) (2025)
- [Masks and Mimicry: Strategic Obfuscation and Impersonation Attacks on Authorship Verification](https://mlsanity.com/paper/2503.19099/) (2025)
- [ALISON: Fast and Effective Stylometric Authorship Obfuscation](https://mlsanity.com/paper/2402.00835/) (2024)
- [Steering Large Language Models with Register Analysis for Arbitrary Style Transfer](https://mlsanity.com/paper/2505.00679/) (2025)
- [Preventing Author Profiling through Zero-Shot Multilingual Back-Translation](https://mlsanity.com/paper/2109.09133/) (2021)
- [A Girl Has A Name, And It's ... Adversarial Authorship Attribution for Deobfuscation](https://mlsanity.com/paper/2203.11849/) (2022)
- [Reproduction and Replication of an Adversarial Stylometry Experiment](https://mlsanity.com/paper/2208.07395/) (2022)
- [SHIELD: Thwarting Code Authorship Attribution](https://mlsanity.com/paper/2304.13255/) (2023)

## Built on by (most cited first, 3 of 3)

- [Tuning for TraceTarnish: Techniques, Trends, and Testing Tangible Traits](https://mlsanity.com/paper/2512.03465/) (2025)
- [StegoStylo: Squelching Stylometric Scrutiny through Steganographic Stitching](https://mlsanity.com/paper/2601.09056/) (2026)
- [Hijacking Text Heritage: Hiding the Human Signature through Homoglyphic Substitution](https://mlsanity.com/paper/2604.10271/) (2026)

## Abstract (arXiv)

When using a public communication channel -- whether formal or informal, such as commenting or posting on social media -- end users have no expectation of privacy: they compose a message and broadcast it for the world to see. Even if an end user takes utmost precautions to anonymize their online presence -- using an alias or pseudonym; masking their IP address; spoofing their geolocation; concealing their operating system and user agent; deploying encryption; registering with a disposable phone number or email; disabling non-essential settings; revoking permissions; and blocking cookies and fingerprinting -- one obvious element still lingers: the message itself. Assuming they avoid lapses in judgment or accidental self-exposure, there should be little evidence to validate their actual identity, right? Wrong. The content of their message -- necessarily open for public consumption -- exposes an attack vector: stylometric analysis, or author profiling. In this paper, we dissect the technique of stylometry, discuss an antithetical counter-strategy in adversarial stylometry, and devise enhancements through Unicode steganography.
