Black-box attack defeats statistical LLM watermarks including SynthID
The attack drops detection to at most 0.05 on seven schemes and three models without keys or weights.
2 stories, newest first · one card per story
The attack drops detection to at most 0.05 on seven schemes and three models without keys or weights.
MarkSec unifies evaluation of stealing, scrubbing, and spoofing attacks against LLM watermarks with quality-constrained success metrics under shared reporting protocols.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views