Meta's Un-Stable Signature(hackerfactor.com) |
Meta's Un-Stable Signature(hackerfactor.com) |
https://digital-strategy.ec.europa.eu/en/policies/eu-icons-l...
If Facebook already embeds user IDs in images (AI or no AI) I can only drool to think what kind tracking, advertising and mass surveillance opportunities are coming.
> (Summary) The icon should be directly embedded into the deep fake or published text (except for creative works), unless equivalent alternatives are available such as a user interface overlay. The icon must be visible when content is reshared or downloaded.
I am working on Saigon Watermarks: https://apps.apple.com/us/app/saigon-watermark/id6777061197 for detecting and removing provenence markers in AI.
The tool also removes c2pa markers, which google is now linking the device that took the photo with the photo.
scary stuff.
https://security.googleblog.com/2025/09/pixel-android-truste...
Edit: Thinking through this a bit more, I think the goal of _authenticating_ a photo using C2PA is still useful. If the goal is to remove them to get a "naked" image, that's fine, such an image is then inherently no more or less trustworthy than any other image. If the goal is to figure out how to reproduce a valid provenance chain on top of an altered image then I have problems with that.
I'm waiting on Apple to approve the MacOS version. After I will either focus on removing SynthID (currently not supported) or releasing android.
Keep in mind that the replacement must be a first class citizen in the society I live in. That means being able to easily transfer money using the app everyone uses where I live. It means public transport ticket apps. It means banking apps. It means iMessage, Facebook Messenger, Snapchat and Signal.
Or are you referring to the claims from Meta, Google, and Adobe -- which failed to hold up under independent evaluation.
You are also correct that one of the meta authors wrote in a comment. However, he demonstrated a clear lack of understanding regarding what makes the bits "independent" or how to resolve the independence problem.
This.
> However, he demonstrated a clear lack of understanding regarding what makes the bits "independent" or how to resolve the independence problem.
Yes, I didn’t want to call it out explicitly, but this is exactly the kind of thing that would have made my undergraduate statistics professor lose patience.
“According to Google's peer-reviewed and published paper, they claim to have a true positive rate (TPR) above 99.97% -- meaning that they will miss their own watermarks less than 1 in 10,000 times. However, my own empirical testing found that is it much closer to 1 in 20.”
What "watermark" are they talking about if not the label/icons? The label/icon in question are what the whole "EU Icons for labelling AI-generated content" thing is about, someone correct me if I'm having a big brain fart.