5 ms·
These tools do not work in the real world for several reasons: first, people who train LoRA or models curate their datasets, removing adversarial noise is trivi
by GaggiX 3y ago
These tools do not work in the real world for several reasons: first, people who train LoRA or models curate their datasets, removing adversarial noise is trivial: https://github.com/lllyasviel/AdverseCleaner https://github.com/lllyasviel/AdverseCleaner ; second, if they are trying to defend themselves against training AI models, then it will probably do almost nothing at all, models trained from scratch will learn the distribution, even one where the samples have adversarial noise (which can only attack a frozen model, like a VAE), SDXL has a new VAE, so the VAE will just be more robust if there is adversarial noise on the images, because it will learn to ignore it, many other models do not have a VAE to begin with.
Also, resizing the image (as is almost always done when training the model) will probably destroy most if not all of the adversarial noise.
- brookst 3y agoIt’s hilarious that we all know DRM for video is doomed because anything someone can see can be copied. And yet people think that somehow visual art is different; that there must be some technical solution that will keep the wrong people/computers from being able to see it, while letting the right ones in. It is not now, and it never has been, and it never will be possible to have widespread distribution and absolute control over copies.
- hamandcheese 3y ago> It is not now, and it never has been, and it never will be possible to have widespread distribution and absolute control over copies. I sure hope this is true, but this strikes me as a bold statement given the ongoing war on general-purpose computing.
- Turskarama 3y agoEven if you went to such extreme lengths as encrypting it such that decryption happened on monitors, a camera with a high enough resolution could still just make an (imperfect) copy.
- hex4def6 3y agoScanners and printers that don't scan/print currency have been around for decades. It doesn't seem that much of a stretch to have a "do not duplicate" watermark embedded in audio/video streams that recording devices respect. I could imagine (say) the latest and greatest video encoder consortium requiring that as a condition of licence. This might seem overly pessimistic, but I feel like the relationship between the customer and the computing device is steadily tilting towards "consumer / user" vs "customer / owner"
- BuyMyBitcoins 3y agoOne mechanism behind that is the EURion Constellation. I believe there are others out there as well. https://en.wikipedia.org/wiki/EURion_constellation https://en.wikipedia.org/wiki/EURion_constellation
- Turskarama 3y agoThe difference there is that printed money has to be very high quality to be worth copying, so you can enforce it on the few companies which make good enough printers. A camera on the other hand is very cheap to make. You could maybe enforce all smartphones to obey your watermark, but what about a raspberry pi?
- dotancohen 3y agoBecause if the Raspberry Pi camera can not take photographs that support the current iPhone coolness (live photo, or depth, or on-viewing selectable dynamic range, or I don't know what else) because the latest codec is not licensed, then the camera will not sell. So the quality Raspberry Pi camera makers don't even sell a model that doesn't respect the copy protection.
- Turskarama 3y agoYou would literally need to deprecate jpg, png, every other image format in existence to make that happen. It's not gonna happen.
- drakythe 3y agoIsn’t an artist’s works being removed from the training set _the goal_? That’s not “trivial to get around”. That’s the whole point. I totally believe that the folks who don’t care about artist wishes will find a way around this, but it’s a game we’ll have to let play out.
- cwkoss 3y agoIt's trivial to remove the adversarial noise and train on the artwork anyways if someone chooses to. This wouldn't remove the artists work from the database. (Unless you consider the adversarial noise a meaningful part of the art...)