Text AI watermarks will always be trivial to remove

ch_sm•about 1 hour ago

here‘s what i don‘t get about this whole discussion. AI companies already store all prompts and responses for future training.

just make an API that returns the string distance between a previously generated paragraph and the query?

that would sidestep this whole problem class.

regulators could even specify how that has to work.

what am i missing?

mirashii•19 minutes ago

> AI companies already store all prompts and responses for future training.

They store some prompts and responses, not all, that's what you're missing.

dpoloncsak•about 1 hour ago

Local models?

dTal•about 1 hour ago

Local models enable:

- watermark-free generation

- the stripping of watermarking from the output of SAAS models

Any discussion of watermarking is dead in the water in a world where we are permitted to have these things. I fear for the future.

thisoneworks•37 minutes ago

Chill my dude. This is just a sane default which will catch normies copy pasting stuff from claude and chatgpt. It's good enough.

ramesh31•about 1 hour ago

Yeah but it's like saying "Masterlocks will always be easy to pop off with a hammer". Of course, but by doing so you are actively engaging in fraud, which then puts the onus on you and whoever you are attempting to deceive.

buf•about 1 hour ago

Except this isn't like saying that at all. This isn't fraud, because it's legal in almost every circumstance.

ramesh31•about 1 hour ago

>almost every circumstance

Key phrase. And I'm not saying fraud in the legal liability sense. If you're not trying to hide the fact that something was LLM generated, then you have no reason to remove it. If you are trying to hide it, then there's probably a reason, i.e. you would face consequences for doing so, therefore it is fraud.

burnte•about 1 hour ago

Or, you simply edit the text the LLM generated ruining the hidden message. That's not even remotely fraud. There are legitimate reasons to edit text. There are fewer legit reasons to bash off someone else's lock with a hammer.

Text AI watermarks will always be trivial to remove

⚡ Community Insights

Discussion (4 Comments)Read Original on HackerNews