Black-box attack defeats statistical LLM watermarks including SynthID
The attack drops detection to at most 0.05 on seven schemes and three models without keys or weights.
52
The attack drops detection to at most 0.05 on seven schemes and three models without keys or weights.
Today 1.2K readers · 1.9K views · 1.5K reads · all time 160K views