Reverse-SynthID is a project aimed at uncovering and neutralizing Google's AI-generated SynthID watermark. Utilizing advanced spectral analysis techniques, it identifies and effectively extracts the watermark from images produced by Gemini, achieving a remarkable detection accuracy of 90%. Dive into cutting-edge signal processing to understand and combat digital watermarking.
The reverse-SynthID project focuses on the reverse engineering of Google's SynthID, a watermarking system embedded in images generated by Google Gemini. This project aims to understand, detect, and remove this invisible watermark through advanced spectral analysis techniques without requiring access to the proprietary encoding or decoding processes.
The SynthID watermark operates by embedding a subtle pattern within the pixel values of an image, which can be revealed under specific processing conditions. By analyzing the residual signal from images, the project identifies the watermark's spatial frequency signature and utilizes this information to develop counter-techniques that can effectively disrupt the watermark during image processing.
The development process includes multiple attack stages leveraging various techniques:
To engage with the project:
# Building the codebook from the dataset
python scripts/build_codebook_v4.py \
--root /path/to/reverse-synthid-dataset \
--output artifacts/spectral_codebook_v4.npz
# Running the bypass against a set of images to obtain variants
python scripts/dissolve_batch.py \
--input ./to_clean/ \
--output ./runs/round_06/ \
--codebook artifacts/spectral_codebook_v4.npz \
--model gemini-3.1-flash-image-preview \
--strengths final nuke
This project is part of an ongoing research initiative and is intended for educational and academic purposes only, focusing on watermark robustness and AI-generated content identification analysis. Feedback and contributions from the community are encouraged to help refine the techniques and expand the dataset for improved performance.
No comments yet.
Sign in to be the first to comment.