Top
Best
New

Posted by smooke 9 hours ago

OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool(openai.com)
224 points | 123 commentspage 2
julianozen 7 hours ago|
While these are great, isn’t the problem that malicious actors will create systems that do not use synthID
nerdsniper 7 hours ago|
It helps significantly in the current moment. A lot of people are lazy and are getting caught quickly by SynthID.

Eventually it won’t matter when image generation is cheap. But few self-host today and few are willing to pay unsubsidized prices, so the vast majority are using the Gemini, OpenAI, and Midjourney. If all 3 adopted SynthID, only a small fraction would use something else.

echelon 7 hours ago|||
These systems should be removed.

This is antithetical to freedom and privacy.

There should be no way for anyone to track down who posted a political meme, anti-religious message, or any other legally protected speech. This will come back to bite us in the ass if we keep building it.

Soon every image or communication we make will be watermarked if we continue to let this shit seep into the commons. Everything from your phone photos, to your screenshots, to your social media posts.

One day soon Republicans or Democrats or whoever doesn't like your freedoms will use this tech to identify you and control you.

There are laws for harms - CSAM, revenge porn, etc. Social media platforms can identify, ban, and report abusers. The framework of the law can take care of the rest.

Our digital footprint should not be tracked and barcoded.

Barbing 2 hours ago|||
Any privacy-respecting way for these big labs to keep selling their generators while minimizing e.g. political deepfake harms?

> Social media platforms can identify, ban, and report abusers.

& do but Americans nonetheless argue with troll farms[1] every day & it hurts us

[1] 2013-2023, just one known company https://en.wikipedia.org/wiki/Internet_Research_Agency

echelon 2 hours ago||
> minimizing e.g. political deepfake harms?

When your average gullible person will fall for a jpeg and a quote, you don't even need deepfake content. You just need to say something and they'll take it at face value. Deep fakes aren't even necessary. AI literally does not even matter.

If there's such a thing as a "sophisticated actor", they'll be able to remove identifying marks. Not that they'll need to.

What you'll be left with is the 99% of society that has everything they do tracked, and eventually platforms that won't allow anything except for signed and attested communication to take place.

We're building our own mouse trap here. Why don't you see this?

> & do but Americans nonetheless argue with troll farms[1] every day & it hurts us

Again, you don't even need the specter of AI. You just need to say words and certain people will trust it. There's nothing you can do about that. Yellow journalism and propaganda has been a thing for longer than any of us have been alive.

The "fix" you're proposing is a tool to put us all into permanent shackles. It is a tool that will strip away our rights and put us all into shackles. Perhaps within our lifetimes.

Stop building and advocating for this shit.

croes 5 hours ago||||
> There are laws for harms

These laws need a method to know what is true and what is fake. Good luck with that if you can’t tell if neither images, audio or video are true.

This fakes will pave the way for fascists.

How much freedom and privacy will they allow?

toraway 6 hours ago|||
That's a lot of hyperbole, there's no cause/effect relationship I can think of here that could realistically produce your slippery slope.

Google or anyone else could start adding those unique tracking watermarks you're concerned about any time they want, regardless of whether they use this AI detection watermark, that to be clear can not track you in any way.

akersten 6 hours ago|||
> That's a lot of hyperbole, there's no cause/effect relationship I can think of here that could realistically produce your slippery slope.

Have you been watching the headlines over the last year? It's like there's a global push towards locked down and verified computing (age verification, TPMs everywhere, Captchas that only work on non-rooted phones, ...).

You can look out the window and see movement in this direction happening right now. Governments and corporations around the world can't get enough of this shit. Privacy matters, advocating for it is not a "slippery slope."

> this AI detection watermark [...] that to be clear can not track you in any way.

Is that clear? We have no idea what metadata they are or aren't embedding in SynthID.

> Google or anyone else could start adding those unique tracking watermarks you're concerned about any time they want,

The point is that this is bad and should be denounced!

echelon 6 hours ago|||
I'm not going to mince words - what you're saying is dangerous and harmful.

> to be clear can not track you in any way

All they have to do is encode enough entropy for a database unique identifier. Systems like this have been used to do it for audio:

https://github.com/swesterfeld/audiowmark

SynthID payloads work the same way, and the paper discusses encoding a "user identifier":

https://arxiv.org/html/2510.09263v1#S5

All you need to do is encode a database identifier, GeoIP, or other identifying information, and you've violated a person's privacy without their knowledge or consent.

Once these systems become popular, the intelligence agencies will "suggest" that Google adds it to their phone cameras. It will start seeping into everything.

The "slippery slope" is not a fallacy. We're on the verge of having device attestation and identity verification to use the internet. This is so beyond fucked.

Stop defending this.

Saying this is okay is EVIL.

surgical_fire 4 hours ago||
You are not required to use AI generation for images.

You can go on living your life without it. I believe in you.

echelon 2 hours ago||
Hatred for AI and cheering a loss of privacy are strange bedfellows.

Would not have been on my bingo card.

surgical_fire 1 hour ago||
I don't really hate AI. You presume too much.
sigbeta 1 hour ago||
I think this is a move by openai/google to prevent their own models from training on ai slop rather than some morally righteous public initiative.
rickcarlino 6 hours ago||
What if they use advanced evasion techniques like printing it out and scanning it or taking a photo with their phone?
Retr0id 6 hours ago|
SynthID is fairly resistant to this sort of thing, although not perfect.
cosmobiosis 2 hours ago||
Well that's not very useful. I think that can easily be hacked and many people were doing that frankly
potsandpans 1 hour ago||
While this is definitely one of the topics of the moment. I find these threads really just ragebait magnets. A bunch of people effectively talking past one another: privacy vs preserving the status quo.

It's certain now that most of the Western world has slid into fascism. Privacy and common decency advocates are all but lost.

I will say this, for everyone celebrating this as something that is "extremely beneficial to the cultural moment",

If I were an adversarial nation-state actor, I might be extremely interested in reverse engineering this and poisoning the well by applying it to real images.

Let's make the world impossible to understand.

kube-system 8 hours ago||
Is there no way to do this without uploading it?
woadwarrior01 7 hours ago||
I'd built an on-device app for detecting C2PA and IPTC metadata in images, amongst other things. I might be able to add support for SynthID detection once it's been reverse engineered.
duskwuff 8 hours ago||
Currently, there is not. OpenAI has promised "public verification tooling" down the line, but I'll believe it when I see it.
minimaxir 8 hours ago||
I'm annoyed that Google is keeping it closed-sourced and limited to partners. Is there a negative externality about open-sourcing image watermark technology so anyone can use it and audit the watermarks independently? If not, then I may have a repository for an open-source invisible and tamper-resistant image watermarking approach that's feature complete...
thisisthenewme 7 hours ago||
potentially to stop bad actors from poisoning datasets by just adding the filter to real pictures?
parhamn 8 hours ago|||
might be easier to strip it?
bsder 4 hours ago||
The fact that they have to keep this closed source is a giant red flag. It means that you can copy it or strip it if you have the knowledge.

I'm not all that worried about stripping it (I'm sure that's trivial).

The problem that I am worried about is that it can be copied (I'd bet $20 that's trivial, too). People WILL put this on images so that they can be "discredited".

saberience 6 hours ago||
What happens if you generate an image with only a single pixel color or say two colors?
akersten 6 hours ago||
This was done in the past, Google saw it, and now either refuses to generate or doesn't emit the SynthID watermark for those images
userbinator 4 hours ago|||
You create an image so trivial that no one would care if it was AI-generated or not.
SiempreViernes 6 hours ago||
You waste a lot of compute on overhead?
PunchyHamster 8 hours ago||
so ? people wanting to make AI propaganda will just make tool to remove it. Possibly using AI to do it too
pta2002 8 hours ago|
I assume a selfish benefit is that OpenAI and Google don't want the models to train on their own data. There is just /so much/ AI generated content online that they definitely need to filter it out somehow when assembling the training data. This is a pretty effective way to do that, with the nice bonus of being mostly good from a PR standpoint.
sgc 4 hours ago||
I immediately thought that was the real reason. Their models will quickly break without some sort of consensus on how to reliably exclude them.
BhaskarDeo 1 hour ago|
[dead]