logoalt Hacker News

CSMastermindyesterday at 8:13 PM5 repliesview on HN

Aren't these kinds of watermarks easy to remove or distort? Seems like they're only helpful as long as people are relying on them sparingly so it's not worth the effort to circumvent.

If social media platforms started banning images with these watermarks seems like they'd be stripped out overnight.


Replies

amazingamazingyesterday at 8:15 PM

No, they are very resistant to modification that can be done easily. That being said I doubt it is impossible

show 2 replies
Tiberiumyesterday at 8:14 PM

I still don't think there's a single GitHub repo that actually removes real SynthID watermarks from Nano Banana 2/NBPro outputs. Most of them are just some research projects that haven't achieved this. The only methods so far I've seen are weird tricks with transparency/overlaying the original image if you're using edits, and also using a diffusion model to regenerate the NB-generated image at low noise levels, but this also modifies the original.

show 1 reply
programdyesterday at 8:40 PM

Define easily. There is an approach that apparently works and is based on spectral analysis of the images.

https://github.com/aloshdenny/reverse-SynthID

show 1 reply
Arntyesterday at 8:24 PM

This one was released a few years ago and still seems unbroken. I'm sure it will be broken at some point, but if you have to wait a year or two from when you make a deepfake until you can post it on Facebook, maybe that's enough. Maybe even a month is enough.

ZeWakayesterday at 9:26 PM

I imagine the technique of having AI recreate the image from scratch based on a very detailed description might work.

show 1 reply