Discovering, detecting, and surgically removing Google's AI watermark

Dev drops a “watermark wiper,” fans cheer, critics cry foul

TLDR: A new tool claims to detect and erase Google’s invisible AI image watermark, igniting a fight over openness vs. responsibility. Commenters split between praising reverse‑engineering and slamming a turnkey remover, while jokers spot AI artifacts and others warn image trust could take a big hit.

Google’s invisible AI “fingerprint” just met its drama-filled match—and the comment section is chaos. A new project claims it can spot Google’s hidden image watermark and even scrub it clean using fancy math, then ships a handy command‑line app with modes labeled “aggressive” and “maximum.” Cue the internet yelling.

On one side, open‑research hype: a commenter bragged they called this technique months ago and is thrilled someone finally built it. On the other, ethics alarms blaring: critics say you can’t claim “responsible research” while delivering a one‑click watermark eraser. “Trying to have it both ways” is the mood, with readers uneasy about a tool that could make AI images look human‑made.

The project’s quirks added fuel: it’s crowdsourcing “blank” images from a model hilariously named Nano Banana Pro to improve its watermark map—half the thread is baffled, the other half giggling. Meanwhile, skeptics claim simple edits already break watermarks, so this just makes the arms race official. And of course, the roast squad piled on: one commenter joked the README itself shows telltale AI goofs.

Bottom line: it’s Watermark Wars—security researchers vs. misinformation worriers, free‑tool fans vs. “don’t ship this” scolds. The stakes feel big: if AI fingerprints don’t stick, how do we trust what we see online?

Key Points

  • The project reports reverse‑engineering Google’s SynthID watermark in Gemini images using spectral analysis without proprietary tools.
  • A detector is claimed to identify SynthID with 90% accuracy, and a V3 multi‑resolution spectral bypass targets carrier frequencies per resolution.
  • Findings indicate the watermark’s carriers vary with image resolution and exhibit >99.5% cross‑image phase coherence, strongest in the green channel.
  • V3 codebook‑based subtraction reportedly achieves a 75% carrier energy drop, 91% phase coherence drop, and 43+ dB PSNR.
  • The team requests black/white images from Nano Banana Pro outputs to expand a SpectralCodebook, improving cross‑resolution detection and removal.

Hottest takes

“Calling this research while shipping turnkey watermark stripping is… uncomfortable” — refulgentis
“Why would we remove one of the only ways to tell an image is AI?” — khernandezrt
“Kinda ironic you can clearly see signs of Claude” — armanj
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.