264
OpenAI has built a text watermarking method to detect chatgpt written content
(www.tomshardware.com)
this post was submitted on 11 Aug 2024
264 points (95.5% liked)
Technology
59378 readers
3229 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The arstechnica article speculated it was more of a pattern of words thing.
I think it is lies, and doesn't exist or work anywhere near as good as they claim. Or, its incredibly easy to bypass.
https://arstechnica.com/ai/2024/08/openai-has-the-tech-to-watermark-chatgpt-text-it-just-wont-release-it/
Research on this topic exists, and it is possible to alter the output of an LLM in minor ways, that statistically "watermark" the results without drastically changing the quality of the output. OpenAI has probably implemented this into ChatGPT.
https://www.youtube.com/watch?v=2Kx9jbSMZqA
I think the tool exists, and is (at least close to) as good as they claim it is. They can't release it, because once the public can tell with high accuracy whether ChatGPT wrote some text, another AI can be developed to circumvent detection from this method, making the tool useless.
That is a long video, is the paper published somewhere?
Im willing to accept that you can statistically "watermark" the text, but I'm not convinced that it would be tamper resistant, which is a large part of what makes a watermark useful. If it can't survive an idiot with a thesaurus, its probably not gonna be terribly useful.
It can likely also be defeated by adding "In the style of X" to a prompt, changing the distribution and pattern of the responses.
...but that output is also from the AI so it would still be watermarked lol
You could feed it through a different, smaller model that could even be self-hosted. It isn't difficult to make a model that rephrases an input in another style.
Ah, okay. That's fair. It wasn't clear they meant a different system lol.