Skip to content
Tech News
← Back to articles

Spymarks, Not Watermarks

read original more articles
Why This Matters

This piece flags a growing but underreported shift: tech giants like Google and OpenAI are embedding hidden, machine-readable identifiers into AI-generated content under the banner of 'watermarking,' but these signals can be linked back to user identities and personal data, not just verifying authenticity. This distinction matters because it reframes a seemingly benign anti-misinformation tool as a covert surveillance mechanism embedded across images, audio, text, and video that users may not know exists or consent to.

Key Takeaways

Watermarks that spy on users are no mere watermarks

There’s a sneaky new evolution of the “watermark”, let’s call it — the spymark.

Spymark “Spymark”

A watermark is a visible mark embedded in a physical or digital medium to verify authenticity or assert ownership.

A spymark is a hidden signal that makes your work traceable without your knowledge or consent.

Spymarking is sneaking onto the internet

Google SynthID is a spymark that embeds secret hidden signals “imperceptible to humans” (Google’s own words) into images, audio, text, and video. This signal can encode database identifiers that map to your identity. Your user records, full name, IP addresses, date of birth, physical addresses, political party affiliation, and more.

Google’s SynthID-Image paper reports that its SynthID-O variant can encode a 136-bit payload in a 512x512-pixel image. That is enough room for a 64-bit database identifier, with 72 bits left for error correction.

SynthID was not the first spymark system designed, and it’s hardly the only one under active development. OpenAI and many other tech companies are developing these systems at scale. These companies claim spymarking can help identify AI-generated content, yet they’ve gone beyond simple watermarking and built in robust tracking mechanisms. Social media, content production tools, and smartphones may soon find themselves filled with spymarking algorithms that sneak these signals into everything you publish.

For example, images can be invisibly altered in their frequency domain to carry tracking information such as database IDs linked to users:

... continue reading