Appropriate_Ant_4629 t1_j5gb1kw wrote
Reply to comment by adt in [D] Couldn't devs of major GPTs have added an invisible but detectable watermark in the models? by scarynut
Stable Diffusion already includes one by default:
In particular it uses
Of course with open source software and models, you'd be free to create a fork that doesn't include one, or uses a different one.
ThisIsNotAnAlias t1_j5gjblv wrote
Last I checked image watermarks were super weak against rotations, seems to still be the case - but the better methods could cope with cropping way better than these.
Appropriate_Ant_4629 t1_j5gy6e3 wrote
> Last I checked image watermarks were super weak against rotations
Obviously depends on the technique. The old-school popular technique of "slap a signature in the painting" like Dürer's stylized A/D logo is very robust to rotations, but not robust to cropping from the bottom in that case.
> seems to still be the case - but the better methods could cope with cropping way better than these.
It's near impossible to have a watermark technology that's robust to all transformations, at least if you reveal what watermark algorithm you used.
One easy attack that works on most some techniques, would be to just re-encode the content, but writing your own watermark over the original using the same watermarking algorithm.
Freonr2 t1_j5hx9s5 wrote
Yeah but its trivial to remove that when you run the source yourself.
marr75 t1_j5joben wrote
Watermarks are a great way to ensure I use GPT-NeoX and allies instead of Da Vinci and allies.
Viewing a single comment thread. View all comments