Comment by raincole
8 hours ago
Stable Diffusion with 10%~15% denoising strength. Done.
I tested the day 1 when Nano Banana Pro was released and it worked. It still works today for Nano Banana 2.
I didn't post this anywhere because I (arrogantly) thought saying it publicly would make the internet worse. But it was pure arrogancy: if I came up with this the first day then of course other millions of programmers did too.
That being said, it'll introduce the typical artifacts from SD models and that might be detected by other methods (or just by zooming in a lot and looking carefully).
Yup, OOC a while back I put together a ComfyUI node that took in a NB image and start with the smallest amount of denoise strength using Flux.1 (but works with any model), then run img2img with a synthid check incrementing denoise in a loop until it was defeated.
Never released it, but it was obvious to most people in the SD community that denoising using a diffusion model was a relatively trivial means to beat most steganographic watermarks.
Yet is in itself fairly trivial to detect assuming you use some open-weight image model as a base.
> if I came up with this the first day then of course other millions of programmers did too.
Don't sell yourself short. I'm sure it was only hundreds of thousands.
Post a repro. I can do that too but then the similarity index is weak. The point is that it it looks indistinguishable then the integrity persists.
In my tests the image looks clearly distinct. In other words, if you can tell the difference then it isn’t a good test.