Comment by dare944
3 hours ago
As I understand it, the current watermarking methods rely on a secret key, making the detection schemes a black box to anyone not in possession of the key. This means organizations like Anthropic are free to make any claim about authorship they want, true or not, and no one can call them on it.
Part of the legislation requires them to make a public AI text detector (ala GPTZero I assume).
Wouldn’t having that be enough to eventually reverse engineer the key?
Probably not to get the key, but you could certainly use it adversarially to remove the watermark.
Removal may come down to changing every third token to a different one.
Not if they designed the algorithm right.