AI watermarking efforts must encourage independent public scrutiny nature.com

A Nature correspondence argues that AI text watermarks need independent public scrutiny because they can be attacked as well as used as transparency signals. Citing 2024 tests by N. Jovanović and colleagues, it says attackers could infer watermark patterns and spoof or remove them for under $50, with about 80% success.