Nature correspondence warns AI text watermarks are vulnerable to cheap attacks
Responding to a Nature news story on Anthropic's invisible watermarking of AI-generated text, researchers point out that such watermarks can be undermined. They cite a 2024 study in which attackers inferred a watermark's pattern by querying the model, then spoofed or removed it for under $50, succeeding roughly 80% of the time.