Spymarks, Not Watermarks: SynthID Can Hide a 136-bit Tracking Payload in Images
jedisct1 · x · 2026-09-22
A brand.io essay coins spymark: unlike visible watermarks that assert ownership, spymarks are hidden signals that make your work traceable without your knowledge or consent — and they're quietly spreading across the internet.
Key points:
- Google SynthID is cited as a prime example: embedding imperceptible signals into images, audio, text, and video that can encode database identifiers mapping to user identity (full name, IP, date of birth, address, party affiliation, etc.).
- The SynthID-Image paper reports the SynthID-O variant can encode a 136-bit payload in a 512x512 image — enough for a 64-bit database ID plus 72 bits of error correction.
- SynthID wasn't the first such system; OpenAI and many other companies are developing these at scale, going beyond identifying AI content to building robust tracking mechanisms.
- A demo shows images invisibly altered in the frequency domain to carry tracking IDs that can be decoded by amplifying pixel differences.
Warning: social media, content tools, and smartphones may soon spymark everything you publish.
More from Safety
- Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps — uriwa · 2026-11-12
- AI Analysis of 42 Jensen Huang Podcasts Tracks Shift on China and Chip Controls — ShakeelHashim · 2026-11-12
- Small AI sites under 20 MW mostly skip the permitting fights battering big data centers — antavedissian · 2026-11-12
- Newsweek op-ed: US should fund hospitals and universities in federated AI learning — Saul_Loveman · 2026-11-12
- Ron Bodkin: automated research taste advances faster than expected, but the evidence is weak — ronbodkin · 2026-11-11
- DEF CON panel with Bruce Schneier and Google security VP posted: scaling laws and open weights — JasonDClinton · 2026-11-11