Date: August 10th, 2026 5:37 PM Author: gunneratttt (gunneratttt)
It seems useless anyway since you'd only have to change a few words and the only value is AI companies and governments acting like they're regulating AI transparency.
Date: August 11th, 2026 1:50 PM Author: gunneratttt (gunneratttt)
The watermark is encoded into the plain text, so yes it would. Obviously they can make it difficult but that puts more constraint on what's possible to generate.
Date: August 10th, 2026 5:34 PM Author: odious sooty den toaster
No the "watermark" isn't in metadata or characters. It's a token bias that causes certain tokens to be selected over others in a way that doesn't change the overall meaning of the text, but it can be recovered that it was made by claude. You can still destroy it by rewriting pieces of the output or running it through a translator and back.
One of the reasons Open AI decided not to do this is they thought it could cause a DITHPARATE IMPACT to ESL users
Date: August 10th, 2026 10:01 PM Author: odious sooty den toaster
They statistically bias certain tokens to enough of an extent that it leaves a detectable pattern, but they aren't releasing the exact pattern afaict. I would just put Claude's output into gpt and tell it to rewrite it in different words while maintaining the meaning.
Date: August 10th, 2026 10:06 PM Author: Crystalline senate
ty cr. that's my reaction to this tactic also - just requires that the user do an extra step, and towards what end? i don't understand why they would do this
Date: August 10th, 2026 10:14 PM Author: odious sooty den toaster
Open AI researched the same thing, and they decided not to do it, and one of their reasons was that it is really easy to break. Apparently also the more you try to harden it the more it has an affect on the quality of the output itself.
Date: August 10th, 2026 10:23 PM Author: Crystalline senate
huh cr. the way i'm thinking about it is forcing content into iambic pentameter or whatever. sometimes the rule produces beautiful content, and a constraint may help to shape human creativity. but other times it just results in a stretch/cheat/weird content
Date: August 10th, 2026 10:31 PM Author: odious sooty den toaster
Yeah that does seem like a good analogy. Like meter is nice to have for poetry, but at the same time it is constraining your generative creative capability, forcing you to make choices to fit the meter. Where here it probably comes down to if you bias too many tokens then you get a shittier output. More tokens you bias, more resilient the watermark, but then you risk forcing worse choices to fit the algorithm.
Date: August 10th, 2026 5:40 PM Author: dead ticket booth
You could watermark AI text by using a secret key to bias otherwise natural word choices.
At selected points, a keyed PRNG decides which of several semantically equivalent choices is preferred. Those choices encode bits, and a verifier with the same key checks whether the observed choices correlate with the expected pattern.
For example:
"however" = 0, "but" = 1
"large" = 0, "big" = 1
"because" = 0, "since" = 1
If the secret pattern is:
1 0 1 1 0 0 1...
the model subtly favors the corresponding choices. To a reader, the prose still looks completely normal.
A more sophisticated version would not use obvious synonym pairs. Instead, candidate next tokens could be secretly divided into two groups with something like:
bit(token) = HMAC(K, context || token) mod 2
To encode a 0, slightly favor tokens from group 0; to encode a 1, favor group 1. The result is a keyed statistical signature rather than an obvious hidden message.
You also would not need every bit to survive. Add redundancy with an error-correcting code, parity bits, and repeated/interleaved copies of the watermark throughout the text. Then even if large sections are deleted, reordered, or rewritten, the verifier can recover enough surviving signal to identify the watermark statistically.
For example, across 500 surviving tokens, if 68 percent match the secret expected groups instead of the roughly 50 percent expected by chance, the verifier can assign a confidence score that the text came from the watermarked generator.
Date: August 10th, 2026 5:45 PM Author: odious sooty den toaster
Yeah its retarded though because you can technically destroy it just by changing one token, because that can alter the watermark state for subsequent positions. Theoretically, depending on the specific strategy they are using for biasing it, and which token you pick. But the more robust they try to make the watermarking, the more constrained and janky the writing and output capability becomes.
Date: August 10th, 2026 5:43 PM Author: gunneratttt (gunneratttt)
A pattern is encrypyed into the text. Think something like making every word occurring in a prime number sequence starting with an advancing vowel, but obviously more complicated. An AI could write anything under those rules without changing the content or quality that much. But yeah, obviously anything encrypted into plain text can be destroyed by simply changing a couple words.
Date: August 10th, 2026 5:46 PM Author: odious sooty den toaster
Huh? How would that do anything? You can just copy and paste it into gpt and tell it to rewrite it in different words and it will destroy the watermark.
can some1 pls answer a q. why, tf, is this subject worthy of 40 poas and the reems of screed included within each? this seems like the most trivial shit one could possibly conceive of which?
Date: August 11th, 2026 2:01 PM Author: gunneratttt (gunneratttt)
It's funny when people complain about a thread they don't enjoy getting more traction then they think it deserves, thus increasing the poast count they're complaining about.
no bro it's not that i don't enjoy this thread i just don't understand why this topic is worthy of literally anything longer than like maybe 0 seconds of discussion? can you help me understand why this is important or even worthy of a second thought? since you're a super smart and good looking dude, i expect i'll be all in on watermarks or not in if that's what you want me to think after you explain
Date: August 11th, 2026 2:10 PM Author: gunneratttt (gunneratttt)
It's interesting to me that they're encoding a watermark into plain text and that there are efforts to make AI identifiable at all.
Retardless, this isn't some bait thread with a misleading title. If it doesn't interest you don't click on it. And especially don't click it again when the link turns blue to read updates. The frontpage is 90% NSAM spam, it's not like this thread getting bumped is competing with quality content.
ok because you are so smart and sexy and i bet you're one of those hot nerds whose like pretty muscular and i like you (like that), i read up on this a bit. i am now interested in it given EU GDPR-like regulation is the driving force. once again, our poor and slightly fruity European cousins have saved the day and shown the cajones to push back against the Rise of the Machines
Date: August 11th, 2026 2:34 PM Author: gunneratttt (gunneratttt)
Idk why you're so irate and implying I think this thread should have broad interest. It is a niche topic, and clearly labeled, if it doesn't interest you just don't click? Why do you care others are interested?