upvote
i wouldn't have any confidence in being able to remove a 0.5 bit watermark (presence/absence). what you see is probably a functional decoy.
reply
[dead]
reply
but with more time and a model fine tuned for this specific use-case would be able to remove any kind of ai watermarking without too many issues.

Always amusing to see AI used against itself.

reply
Can an image just be stretched or compressed a very tiny bit?
reply
No, to give you an example, it needed 51% gaussian noise over this image to prevent it from seeing it's watermark. Changing the proportions or compressing it will not do anything. This is what 51% gaussian noise looks like: https://gov.f9.is/r2s8UB7a - here is 49% where it can still detect it: https://gov.f9.is/FQi3AL2I
reply
It’s definitely hackable, Some of our engineers worked on this long time ago

https://deepwalker.xyz/blog/bypassing-synthid-in-gemini-phot...

reply
But why
reply
Because we are on Hacker News.
reply
good point
reply
[dead]
reply