Redditor argues local-model translation could strip Claude's text watermark

Some_Kitchen7030 · reddit · 2026-10-09

A Reddit user walks through a theoretical bypass of Anthropic's probabilistic text watermarking: write an essay in Thai with Claude, then translate it to English with a local open-source model. Their argument: a local model won't adhere to the "green set" word subset Claude uses for tracking, structural watermarks would also be rewritten, and local models aren't bound by vendor policies — making the output very hard to detect.

Original post →

More from Safety

Safety channel →