The “ask Gemini” thing was so bad, because it made people think that worked with other chatbots. I know some smart, well-informed people who have been under the impression that they can ask Claude if something is AI-generated and get an accurate answer!

It also was the exact opposite of the commonly shared sentiment “Don’t blindly trust the ai”

I've tried to use their previous implementation many times (while not authenticated), only for it to give me some vague error.

That would be really cool! Do they already have something similar for guitar effects?

I'd imagine it's incoming. We already have VSTs that replicate patches using ML like Synplant 2. In the meantime, use Synthorial and go modular!

Yeah, same :/

Imagine modern splicing for layers beyond just instrumental, vocals, drums, and bass

Like something more specific

They don't want you to know, because they're the baddies. Imagine how much money they can get from advertisers if they're able to identify every single piece of code, reddit thread, email, GitHub readme that you've ever written based on your secret ID. They're creaming themselves just thinking about it.

"Excellent work acquiring that outlook data Anat, now let's cross check the defunct company emails against YouTube videos edited with Google PrivateEditAI™ to figure out what the social security number of this YouTube account is."

> It's a real shame Google isn't more transparent about how it actually works

> classifying images in bulk or offline

You've described exactly the elements spammers and fraudsters need to be able to defeat this mechanism.

These are "spy"marks, not watermarks:

https://brand.io/article/spymarks/

We need to inform everyone that this technology can encode database identifiers and enough entropy to uniquely identify you as an author (or downloader).

This extends to other forms of media as well.

It's presumably so they can rate-limit people who are trying to reverse-engineer or otherwise strip it (e.g. iteratively tweaking until it stops getting detected)

It's worth nothing that this IS Google.

Given that it's an ad company, they want something to connect what you're doing to the rest of their data, and they couldn't possibly keep the old image search results there if they want people to use this.

Any access to a watermark detector can be used to remove the watermark. Presumably they want to be able to track who is doing that.

Yeah I've been wanting to run a ton of Wikipedia images through the detector to see if fakes snuck in. Doesn't seem to be a practical way to do this. Even Open AIs tool has a low rate limit

OpenAI's tool is worse though, because it doesn't detect SynthID from non-OpenAI models. I just tried it with various images created by Imagen / Nano Banana.

The EULA you have to accept hints that they are afraid you are going to abuse it to remove synthID - e.g, set up and edit and check loop

I've never seen it mentioned anywhere so I will just here complain that Google also removed the ability to paste images into Google Image search some years ago for no apparent reason. It worked great and I used it all the time.

It's deliberate so that you can't find a way to bypass it.

Probably to help prevent people from reverse engineering synthID to build a filter.

to harvest user data, of course.

> This has got nothing to do with protecting any users, or public.

I don't see another good reason why the EU would force them to do this

> What benefit are AI generated images to an AI?

Apparently quite a bit as long as you're not indiscriminately feeding random slop back in. An AI-generated artifact deemed "high quality" or somehow desirable by humans is a good training input depending on what you're trying to do. Humans don't train exclusively on external inputs either.

There are ways to watermark text generated by an LLM, but i am curious about if and how they are doing it to STT services. If i say "The cat is on the mat", and the STT writes that down, the text is still technically transcribed by an ai. Is "transcribed" included in the wide definition covered by "generated"? well it seems it depends who you ask to. IANAL so i can't tell.

Thats what I was expecting. I thought so.

how would one "watermark text"

how is "abc" different from "abc" generated by LLM

Also it can't detect any Synths in The Commonwealth.

>Hey OpenAi, generate a text of 100 words.

Too short for watermarking but point taken of course.

Probably more like

    response = frontier_synthid_model(prompt)
    
    while frontier_synthid_validator(response) == false
        response = cheapo_chinese_model.prompt(
            "pls remove synthid",
            response
        )

Ah but that's the genius of the scheme. Every single one of those providers will detect your secret ID and refuse the request. And sneak their own one in for good measure.

In fairness, it is super hard to make a robust watermark if the general public has unlimited access to a detector.

Yes but OpenAI, NVIDIA, Kakao, Apple have said they will also implement SynthID