OpenAI Adopts Google's SynthID Watermark for AI Images with Verification Tool

Original Article ↗ Hacker News Discussion ↗

Perceived Goals of SynthID Adoption

  • Many see the main motive as filtering AI-generated “slop” out of future training data, not just public-interest integrity.
  • Others frame it as a public-good measure against deepfakes, political disinformation, and fraud.
  • Some argue it’s largely performative and won’t stop serious bad actors.

Robustness and Removability

  • Several comments say SynthID survives common transforms like cropping, color shifts, resizing, compression, screenshots, and print–scan.
  • Others claim success removing or weakening it via:
    • Low-strength diffusion denoising (e.g., Stable Diffusion / Flux img2img loops).
    • Spectral analysis–based tools and GitHub repos targeting SynthID.
    • Masking alternating pixels and using models to inpaint.
  • Some note these methods often alter the image noticeably or still fail verification; reproducible, reliable removal remains debated and “unclear.”

Closed Source, Privacy, and DRM Concerns

  • Strong criticism that SynthID is closed and partner-only; seen as a “red flag” that it can be cloned or misused.
  • Fears it could encode user IDs, geolocation, or other hidden identifiers, enabling tracking and future mandates on all images.
  • Comparisons to printer tracking dots and DRM; some argue this normalizes pervasive watermarking and device attestation, pushing society toward surveillance and censorship.
  • Others counter that anonymous watermarks for “AI vs non-AI” are acceptable and not inherently privacy-violating.

Capabilities and Technical Details

  • Described as a learned, robust invisible watermark (e.g., special noise pattern) embedded in the pixels, not ordinary metadata.
  • Reported to detect partial-image watermarks and to work over low-complexity operations; unclear exactly how much payload is used in production.
  • Contrasted with C2PA/Content Credentials, which are open, metadata/signature-based, easily stripped, and serve different purposes.

Practical Impact and Limitations

  • Many note most users won’t bother to evade watermarks; those who care can just use non-watermarked open models.
  • Skeptics say gullible users and troll farms won’t rely on verification tools anyway, so disinformation persists.
  • Some expect platforms may eventually auto-flag AI images, making such watermarks more impactful in practice.