@distilledscience: It’s super easy to remove the metadata from the image, but just having it in there makes Anthropic comply with the legal requirements. They're not an image generation platform but the future of trusted visuals online is really going to be a whitelist approach of "assume false unless proven true by cryptographically sealed metadata" rather than using metadata to show that it's AI. This text example is directionally accurate, making it easy to understand how the watermark is really just a manipulation of which still-random set of flexible outputs get chosen, but it’s not quite accurate to how the actual system works. In reality, it needs to be able to evaluate a block of text without knowing the prompt or a specific pattern that will be followed, so the text carries its own seeds. The "random" number at each step is a hash of the secret key plus the last four words just written: seed = hash(key + previous 4 tokens) The seed feeds a pseudorandom function g(word, seed) that assigns a secret score (effectively a thumbs-up or thumbs-down) to *every word in the entire vocabulary* at that step. The generation step then takes the candidate words through a knockout tournament where thumbs-up words tend to win (the paper uses 30 layers of this). The detector then asks a question that requires no knowledge of the alternatives: take each word that actually appears, recompute its g-score from the key and the preceding four words, and check: is this text suspiciously full of thumbs-up words? Human-written or unwatermarked text should average 50% thumbs-ups; watermarked text should run consistently above that. The final “Planted Probability, Is This AI Score” is the mean across the whole text. But any time that there’s one word that *really works better* as an output in a given slot, the watermarking can’t really work there without forcing a lower-quality output, hence the type and length of output text significantly impacting things. #Science #ai #technology #claude
Avisha |🧬Scientist Mythbuster
Region: US
Tuesday 18 August 2026 03:28:13 GMT
Music
Download
Comments
Invader :
whatever the AI does to make it detectable another AI can remove it to make it undetectable
2026-08-18 04:37:56
51
manuelromero8726 :
So use ChatGPT? So Claude just stopped people from using Claude for writing? Are the other LLM doing this?
2026-08-18 23:55:16
1
a :
There’s already a skill to remove it 😂
2026-08-18 12:35:08
13
🔬🐟⚛️pale king⚛️📖🔐 :
how would this work for code
2026-08-28 21:32:46
0
Mbokomu :
I am going to start encoding messages in my text like this now
2026-08-18 19:53:36
4
umbreon222 :
Does detection only work then if it's checked by Claude itself? I imagine only Claude would know what the other predictions/possibilities would be.
2026-08-18 17:05:04
9
A.S. You. :
so if I rephrase the work completely myself? 🤔
2026-08-18 15:59:08
3
C :
If I see one more person say it’s in the metadata… I’m like “text doesn’t have metadata!”
2026-08-18 16:11:39
1
Technically Web3 :
Oh damn. Have I been exposing myself this whole time? Am I the only one disclosing what was drafted/revised with AI?
2026-08-18 11:57:14
4
ShadowKeebler :
how can I personally use this to check for Ai is ther a app or website?
2026-08-27 02:12:09
0
Tweep :
I used to use it a fair bit for research. it's awful. it got so many things wrong.
2026-08-18 04:53:29
5
bangalodashkar :
I can't wait until my pupils realise the best way to avoid AI detectors is to write in their own words. AI can be an excellent tool for helping navigate a complex topic, but not if you just copy paste it's output without even reading it.
2026-08-18 07:52:47
5
egg :
sooo dose it change if we add misspellings on purpose before sending?
2026-08-19 02:13:47
0
Takip Silim :
imagine an actual human writing in an AI way to fool AI that it was written ny AI.🤔🤔🤔
2026-08-18 09:15:35
0
TheDailyMapleSyrup :
Like I said before if you know two languages have it generate in one language and then run the output through a different service in the intended language so if Claude writes you something in French and then you have Google Translate translate it to English it shouldn’t flag the AI detection cause something that has multiple choices in French may not in English and something that has multiple choices in English may not have multiple choices in French
2026-08-18 20:52:59
1
🤙мішаня🤙 :
but the pi is infinite, so every combination of words, translated into combinations of numbers, IS in pi. Means every text ever written is gonna be labeled ai. Have i misunderstood sth?
2026-08-18 12:04:56
1
xandersnyder685 :
And there will be transformers to fool this up on Github in less than a week to defeat this 😂
2026-08-18 08:16:00
2
Xsg78 :
A tool like this is hard to make without affecting the quality of the response even if it didn’t , can’t just I use the detector to reverse engineer a model using distillation? , i think they will make a useless detector just to shut the UE up.
2026-08-18 09:49:10
1
pumpkin 2 :
ppl will start re writing ai prompts to a points the ai was not needed
2026-08-18 10:01:00
3
Ace of Swords :
as a writer who hates ai YES YES YES. this is brilliant and all gen-ais should be forced to do this. because unfortunately rn, people will just avoid claude in favor of a non watermarked option
2026-08-22 11:39:04
0
Katevolution :
Prompt AI, translate to French, translate to German, have AI fix, translate to Japanese, translate back to English, have AI fix, manually edit.
2026-08-21 17:07:28
0
devco81 :
Images don't only use metadata. It's sort of steganography.
2026-08-23 16:03:43
0
TheFilthyMick :
There are already open source watermark removal repos on GitHub for it. The current pace of frontier development is such that every release of a new safeguard will have a counter-release within days, if not sooner.
2026-08-19 01:38:32
0
NADIR :
bye bye claude
2026-08-18 21:46:16
0
devco81 :
I can't image this ever being accurate enough to be proof of guilt.
2026-08-23 16:05:47
0
To see more videos from user @distilledscience, please go to the Tikwm
homepage.