The most prestigious law school admissions discussion board in the world.
|
 |
 
|
New Claude models to include watermarks inside text - link
Poast new message in this thread
Date: August 10th, 2026 5:29 PM Author: Irradiated wild box office https://x.com/M1Astra/status/2086898041882030353
Does this mean teachers, judges, etc will be able to know you used Claude AI? Seems like a gift for ChatGPT if so. |
Date: August 10th, 2026 5:31 PM Author: Filthy Dashing Gas Station Open AI already looked into doing the same thing and decided there were major drawbacks (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058695) |
 |
Date: August 10th, 2026 5:37 PM Author: cowardly turquoise marketing idea roommate It seems useless anyway since you'd only have to change a few words and the only value is AI companies and governments acting like they're regulating AI transparency. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058710) |
|
Date: August 11th, 2026 1:45 PM Author: razzmatazz pistol Changing a few words, or even perhaps the entire thing, doesn’t necessarily get rid of the watermark. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060923) |
|
Date: August 11th, 2026 1:48 PM Author: Filthy Dashing Gas Station Yes it does, because the entire "watermark" is based on biasing the choice of certain tokens over others. It's extremely easy to attack. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060928) |
|
Date: August 11th, 2026 1:50 PM Author: cowardly turquoise marketing idea roommate The watermark is encoded into the plain text, so yes it would. Obviously they can make it difficult but that puts more constraint on what's possible to generate. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060933) |
|
Date: August 11th, 2026 1:54 PM Author: unhinged provocative nibblets Oh wow an LLM that encodes my text with hidden messages I can't parse *signs up for a paid plan* (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060944) |
|
Date: August 10th, 2026 5:33 PM Author: motley submissive parlour idgi. cant you just be like claude write me a 500 wd essay, then print it out and retype it into word? So you're just adding one step.
tbf even adding that one step might actually cut down significantly on ai plaigiarism. idk. people react funny to things |
|
Date: August 10th, 2026 5:34 PM Author: Filthy Dashing Gas Station No the "watermark" isn't in metadata or characters. It's a token bias that causes certain tokens to be selected over others in a way that doesn't change the overall meaning of the text, but it can be recovered that it was made by claude. You can still destroy it by rewriting pieces of the output or running it through a translator and back.
One of the reasons Open AI decided not to do this is they thought it could cause a DITHPARATE IMPACT to ESL users |
|
Date: August 10th, 2026 5:36 PM Author: exhilarant property coffee pot it's done via semantic patterns woven into the textual language itself (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058707) |
|
Date: August 10th, 2026 5:38 PM Author: motley submissive parlour wowza
like how shakespear supposedly snuck his name into Psalm 46 |
|
Date: August 10th, 2026 5:42 PM Author: Fear-inspiring slippery theatre ceo Yeah I worked on something like this in college for a corporate espionage thing (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058720) |
|
Date: August 10th, 2026 9:58 PM Author: Mahogany french karate huh. so do you break the pattern by randomly changing every fifth or tenth word or whatever? (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059650) |
|
Date: August 10th, 2026 10:01 PM Author: Filthy Dashing Gas Station They statistically bias certain tokens to enough of an extent that it leaves a detectable pattern, but they aren't releasing the exact pattern afaict. I would just put Claude's output into gpt and tell it to rewrite it in different words while maintaining the meaning. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059663) |
|
Date: August 10th, 2026 10:06 PM Author: Mahogany french karate ty cr. that's my reaction to this tactic also - just requires that the user do an extra step, and towards what end? i don't understand why they would do this (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059691) |
|
Date: August 10th, 2026 10:14 PM Author: Filthy Dashing Gas Station Open AI researched the same thing, and they decided not to do it, and one of their reasons was that it is really easy to break. Apparently also the more you try to harden it the more it has an affect on the quality of the output itself. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059716) |
|
Date: August 10th, 2026 10:23 PM Author: Mahogany french karate huh cr. the way i'm thinking about it is forcing content into iambic pentameter or whatever. sometimes the rule produces beautiful content, and a constraint may help to shape human creativity. but other times it just results in a stretch/cheat/weird content (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059744) |
|
Date: August 10th, 2026 10:31 PM Author: Filthy Dashing Gas Station Yeah that does seem like a good analogy. Like meter is nice to have for poetry, but at the same time it is constraining your generative creative capability, forcing you to make choices to fit the meter. Where here it probably comes down to if you bias too many tokens then you get a shittier output. More tokens you bias, more resilient the watermark, but then you risk forcing worse choices to fit the algorithm. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059775) |
|
Date: August 11th, 2026 8:11 PM Author: Mahogany french karate (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50062187) |
|
Date: August 10th, 2026 5:33 PM Author: Underhanded pit How would this work? If it's part of the text, the user can just delete it--assuming they can be bothered to look through the text to find it. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058700) |
|
Date: August 10th, 2026 5:36 PM Author: yellow boyish corner ratface "it will travel with the text when it's copied and pasted elsewhere, and may persist through some editing."
they know it can just be deleted, but many people are dumb enough to do a blatant copypasta |
|
Date: August 10th, 2026 5:40 PM Author: Fear-inspiring slippery theatre ceo You could watermark AI text by using a secret key to bias otherwise natural word choices.
At selected points, a keyed PRNG decides which of several semantically equivalent choices is preferred. Those choices encode bits, and a verifier with the same key checks whether the observed choices correlate with the expected pattern.
For example:
"however" = 0, "but" = 1 "large" = 0, "big" = 1 "because" = 0, "since" = 1
If the secret pattern is:
1 0 1 1 0 0 1...
the model subtly favors the corresponding choices. To a reader, the prose still looks completely normal.
A more sophisticated version would not use obvious synonym pairs. Instead, candidate next tokens could be secretly divided into two groups with something like:
bit(token) = HMAC(K, context || token) mod 2
To encode a 0, slightly favor tokens from group 0; to encode a 1, favor group 1. The result is a keyed statistical signature rather than an obvious hidden message.
You also would not need every bit to survive. Add redundancy with an error-correcting code, parity bits, and repeated/interleaved copies of the watermark throughout the text. Then even if large sections are deleted, reordered, or rewritten, the verifier can recover enough surviving signal to identify the watermark statistically.
For example, across 500 surviving tokens, if 68 percent match the secret expected groups instead of the roughly 50 percent expected by chance, the verifier can assign a confidence score that the text came from the watermarked generator.
|
|
Date: August 10th, 2026 5:45 PM Author: Filthy Dashing Gas Station Yeah its retarded though because you can technically destroy it just by changing one token, because that can alter the watermark state for subsequent positions. Theoretically, depending on the specific strategy they are using for biasing it, and which token you pick. But the more robust they try to make the watermarking, the more constrained and janky the writing and output capability becomes. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058734) |
|
Date: August 10th, 2026 11:56 PM Author: Underhanded pit Interesting. It's going to get people into trouble when it looks like the text might be from AI but it's not totally clear. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060025) |
|
Date: August 10th, 2026 5:43 PM Author: cowardly turquoise marketing idea roommate A pattern is encrypyed into the text. Think something like making every word occurring in a prime number sequence starting with an advancing vowel, but obviously more complicated. An AI could write anything under those rules without changing the content or quality that much. But yeah, obviously anything encrypted into plain text can be destroyed by simply changing a couple words. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058724) |
|
Date: August 10th, 2026 9:58 PM Author: Mahogany french karate (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059652) |
|
Date: August 10th, 2026 5:39 PM Author: maniacal forum background story taking a screenshot then telling chatgpt to type the text from it is an obvious workaround (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058714) |
|
Date: August 10th, 2026 5:46 PM Author: Filthy Dashing Gas Station Huh? How would that do anything? You can just copy and paste it into gpt and tell it to rewrite it in different words and it will destroy the watermark. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058739) |
|
Date: August 10th, 2026 5:44 PM Author: cowardly turquoise marketing idea roommate AI writing "I want to kill myself too" next to your 4pt white text watermark. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058727) |
|
Date: August 10th, 2026 5:49 PM Author: amber kink-friendly institution community account "I'm gay"
- This text was generated using Claude Fable 5, a "Mythos-level" frontier AI model by Anthropic. |
|
Date: August 10th, 2026 5:52 PM Author: exhilarant property coffee pot (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058754) |
|
Date: August 10th, 2026 5:52 PM Author: azure histrionic university international law enforcement agency (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058756) |
|
Date: August 10th, 2026 5:58 PM Author: motley submissive parlour (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058771) |
|
Date: August 10th, 2026 5:59 PM Author: Odious Painfully Honest Headpube Site (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058776) |
|
Date: August 10th, 2026 6:02 PM Author: Filthy Dashing Gas Station (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058782) |
|
Date: August 11th, 2026 2:09 PM Author: stirring knife (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060995) |
|
Date: August 10th, 2026 6:03 PM Author: Contagious Chestnut Voyeur Write your own words you weird fags (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50058785) |
|
Date: August 11th, 2026 1:00 PM Author: Galvanic Party Of The First Part "It's too hard to think." (xo po (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060818) |
|
Date: August 11th, 2026 1:53 PM Author: supple base (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060943) |
|
Date: August 10th, 2026 10:41 PM Author: hairraiser field it's an acrostic that spells out 'I AM GAY' (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059794) |
|
Date: August 10th, 2026 11:37 PM Author: Fear-inspiring slippery theatre ceo (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50059957) |
|
Date: August 11th, 2026 1:12 PM Author: amber kink-friendly institution community account (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060852) |
|
Date: August 11th, 2026 1:46 PM Author: razzmatazz pistol Next step. Release higher cost “watermark free” subscription tier. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060926) |
|
Date: August 11th, 2026 1:55 PM Author: supple base can some1 pls answer a q. why, tf, is this subject worthy of 40 poas and the reems of screed included within each? this seems like the most trivial shit one could possibly conceive of which? (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060945) |
|
Date: August 11th, 2026 2:01 PM Author: cowardly turquoise marketing idea roommate It's funny when people complain about a thread they don't enjoy getting more traction then they think it deserves, thus increasing the poast count they're complaining about. (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060967) |
|
Date: August 11th, 2026 2:04 PM Author: supple base no bro it's not that i don't enjoy this thread i just don't understand why this topic is worthy of literally anything longer than like maybe 0 seconds of discussion? can you help me understand why this is important or even worthy of a second thought? since you're a super smart and good looking dude, i expect i'll be all in on watermarks or not in if that's what you want me to think after you explain (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50060975) |
|
Date: August 11th, 2026 2:10 PM Author: cowardly turquoise marketing idea roommate It's interesting to me that they're encoding a watermark into plain text and that there are efforts to make AI identifiable at all.
Retardless, this isn't some bait thread with a misleading title. If it doesn't interest you don't click on it. And especially don't click it again when the link turns blue to read updates. The frontpage is 90% NSAM spam, it's not like this thread getting bumped is competing with quality content. |
|
Date: August 11th, 2026 2:17 PM Author: supple base ok because you are so smart and sexy and i bet you're one of those hot nerds whose like pretty muscular and i like you (like that), i read up on this a bit. i am now interested in it given EU GDPR-like regulation is the driving force. once again, our poor and slightly fruity European cousins have saved the day and shown the cajones to push back against the Rise of the Machines (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50061016) |
|
Date: August 11th, 2026 2:34 PM Author: cowardly turquoise marketing idea roommate Idk why you're so irate and implying I think this thread should have broad interest. It is a niche topic, and clearly labeled, if it doesn't interest you just don't click? Why do you care others are interested? (http://www.autoadmit.com/thread.php?thread_id=5891530&forum_id=2�id.#50061062) |