Yup, OOC a while back I put together a ComfyUI node that took in a NB image and start with the smallest amount of denoise strength using Flux.1 (but works with any model), then run img2img with a synthid check incrementing denoise in a loop until it was defeated.
replyNever released it, but it was obvious to most people in the SD community that denoising using a diffusion model was a relatively trivial means to beat most steganographic watermarks.
Yet is in itself fairly trivial to detect assuming you use some open-weight image model as a base.
reply> if I came up with this the first day then of course other millions of programmers did too.
replyDon't sell yourself short. I'm sure it was only hundreds of thousands.
Post a repro. I can do that too but then the similarity index is weak. The point is that it it looks indistinguishable then the integrity persists.
replyIn my tests the image looks clearly distinct. In other words, if you can tell the difference then it isn’t a good test.