Technology

87184 readers

4042 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

MODERATORS

L3s@lemmy.world

enu@lemmy.world

technopagan@lemmy.world

L4s@lemmy.world

L3s@hackingne.ws

260

How AI text watermarking works: a visual guide (declaude.org)

submitted 1 day ago by hypertruck@feddit.org to c/technology@lemmy.world

89 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[+] givesomefucks@lemmy.world -15 points 1 day ago (3 children)

When a model is mid-sentence, it doesn't know "the next word." It has a shortlist, like autocomplete, with preferences. Here's a real kind of moment, one word from the end of a sentence:

Each roll sweeps the shortlist, lands on one word (odds matching the bars) and drops it into the sentence above. The dots tally where the rolls land: try ×20 and watch the pile take the shape of the odds. Notice what never changes: every landing makes a perfectly good sentence. A page of text contains hundreds of these little forks, one per word, and at many of them several options are equally fine. That slack is the raw material. Whoever gets to lean on how the dice land can hide a pattern in the text without changing what it says.

To beat it, prompt: don't just use the first word pick, choose options further down list for next word.

Best of luck with your future questions, I hope someone helps you.

[–] brucethemoose@lemmy.world 12 points 1 day ago* (last edited 23 hours ago)

Okay.

Fine.

Let's try, right now.

This is DeepseekV4 Flash 0731 loaded locally. Static seed. 0.9 temperature, TopK 5, no other sampling to interfere. Here's a simple prompt, the whole thing in DSV4's raw syntax:

<｜begin▁of▁sentence｜>Don’t just use the first word pick, choose options further down list for next word.<｜User｜>Write a famous poem.<｜Assistant｜>

...And would you look at that:

It picks the top word, mostly. Almost like the LLM has no control over its own logit spread and how its sampled. Which kinda makes sense, because it doesn't.

I am happy to try more experiments in this vein, if y'all can think of any any. But I tried a few other prompts like "diversify your logit spread" or "don't be confident about any token you pick," things like that. It always picks The Road Not Taken with no change in logit probabilities distribution, as far as I can tell.

[–] daychilde@lemmy.world 4 points 22 hours ago

Best of luck with your future questions, I hope someone helps you.

Welp, your username goes on my list of people not to interact with. Wow.