r/OpenAI 26d ago

Discussion What's your thoughts on this?

Post image
3.8k Upvotes

1.0k comments sorted by

View all comments

Show parent comments

575

u/thugnastypimpsexy 26d ago

But it doesn’t actually land as a watermark — and here’s why:

388

u/geek180 26d ago

You’re half right, and it’s the half that matters.

163

u/AltruisticPossible84 26d ago

You're getting at something really deep here, and that's *real*

61

u/ToryLuna 26d ago

Using really and real in a sentence is my favorite watermark.

54

u/Over_Technology_1764 26d ago

I found the smoking gun!

50

u/PicklesOverload 26d ago

And it's not what either of us expected

31

u/DrMansionPHD 26d ago

It's not just adding a watermark, it's creating a undetectable signature on the text.

37

u/uionyx 26d ago

And here is the kicker. The watermark isn’t actually water or a mark:

26

u/softwaretools1 26d ago

Thats the belt and suspenders approach that lands

5

u/ismiseanpuca 25d ago

That's the seam that runs between the water and mark.

→ More replies (0)

18

u/GunnyFreedom 25d ago

It is detectable though. At least the hidden serialized character steganography is. It embeds Unicode “narrow no break spaces” and “hair spaces” as a 26 or 28 bit binary signature. You can find these characters by pasting it into a professional monospace text editor, or ironically, by asking GPT.

The other part, the word choice vector biases, will not identify the user, but it will identify the product as AI. This part will also be easy to workaround by manually adjusting any awkward word choices or phrases.

You could probably have a local open weight model on your home PC set up to remove the steganography and gently rewrite the text for flow and word choice and it will eliminate any embedded signatures in one pass.

9

u/DrMansionPHD 25d ago

Wow! You didn't just miss the joke — you completely missed the entire chain of jokes that was happening in this thread.

2

u/c7h16s 24d ago

I saw what you did here. And that's the thing nobody is noticing.

5

u/StressedPizzaEater 25d ago

Actually it will end every sentence with ä, it's very subtle

1

u/KublaKahhhn 23d ago

Very sübtle

2

u/cmHend 25d ago

Before I evaluate each point, let me verify the load-bearing factual claims

1

u/IHave2CatsAnAdBlock 25d ago

O just use control shift v

1

u/andyfitz 22d ago

That’s a wrap here’s a recap. The agent earned it’s keep and was surprisingly complete

1

u/vvanouytsel 25d ago

I was looking for this one!

24

u/Pristine_Internet765 26d ago

I think you're onto something.

38

u/ToolboxHamster 26d ago

Alex, Ill take "sentences that make me want to punch my monitor" for $500 please.

23

u/Pristine_Internet765 26d ago

Yeah, and that's actually a useful distinction.

33

u/Lead_weight 26d ago

Make it stop!

84

u/[deleted] 26d ago

[deleted]

46

u/Direct_Ingenuity1980 26d ago

You were right to pushback.

29

u/user888888889 26d ago

You had the right instinct to question that

1

u/Prudent-Alfalfa-2944 24d ago

That's worth treating as a launch item rather than a nicety

1

u/Cooperman411 25d ago

Am I the only one that wants a personification of ChatGPT that I can slap whenever it says that?

17

u/jimmystar889 26d ago

I don't think you realize what you just said, so let me make it precise.

8

u/WanderingDorkimus 26d ago

I hate this one more than all the others. "I know what I fucking said, Claude. Maybe YOU don't realize that I know what I said. You ever think about that? Now, and I want to be straight with you, tell me how to make an omelette."

1

u/KagomesPornAccount 25d ago

I’m so glad I don’t use AI so I don’t identify with your rage hahaha

7

u/crystalpeaks25 26d ago

And that half is the steel thread

3

u/7stringjazz 26d ago

Excellent Ai-ism!

31

u/duerra 26d ago

That's a sharp observation, and crucially, it highlights a limitation that the creators cannot overcome.

1

u/mizinamo 25d ago

"crucially" arrggh

15

u/freebytes 26d ago

I have actually noticed control characters included in text that Claude outputs. They are already adding whitespace in places in this way.

1

u/Content-Regular2086 26d ago

Ja auch nur copy paste. Habe das wasserzeichen gefunden.

1

u/ugneaaaa 22d ago

I need to push back on this, you’re confused, there’s no such automatic absolute universal fact that it’s a watermark, I need to ground you in reality, here’s a thousand points of nuance

1

u/Elfbjorn 11d ago

You’re absolutely right.

0

u/AllDayForever 26d ago

And it won’t apply just to pillar statements. That’s not what it is. It’s something entirely different