A new article has emerged detailing a method to circumvent AI watermarks, including advanced statistical bias-based systems like Google's SynthID, through the use of pseudorandom generators. The author of the article suggests this technique could bypass even theoretically optimal watermarking solutions designed to identify AI-generated content.
The core of the proposed method involves what is described as "dribbling the AI watermark directly in-prompt." While specific technical details of the implementation are still being disseminated, the underlying concept appears to leverage the inherent flexibility and generative capabilities of large language models (LLMs) to obscure or remove the subtle statistical patterns that constitute an AI watermark. Watermarking systems like SynthID embed imperceptible signals into generated content, making it identifiable as AI-created. These signals are often based on statistical biases introduced during the generation process.