跳到正文
Rohan Paul· @rohanpaul_ai · X·· 4 小时前AI 评分45
AI 导读

Meta 新论文提出 TextSeal2,将两个密钥融合为一个虚拟密钥并加入新噪声,使每个 token 都携带完整水印信号。在 Qwen3.5-9B 上配合投机解码、保持同等多样性时,TextSeal2 在 0.1% 误报率下检出 89% 的 200-token 回答,高于 TextSeal 的 71% 和 textGrain 的 67%,且接受率不变。

正文

New Meta paper shows that blending 2 secret keys into 1 makes hidden watermarks in AI-written text easier to detect, even when the AI uses a common trick (like speculative decoding) to write faster.

Watermarks hide a secret-key signal in which tokens an LLM samples, so a detector can later flag its text. Meta's earlier TextSeal picked 1 of 2 keys per token at random, so detection had to average both and lost signal.

TextSeal2 blends both keys into 1 virtual key plus fresh noise, so answers stay varied and every token carries full signal. For speculative decoding, it picks replacement tokens from the leftovers of the drafts' random races, so acceptance rates stay unchanged.

On Qwen3.5-9B with speculative decoding and equal diversity, it detected 89% of 200-token answers at a 0.1% false-positive rate. TextSeal caught 71% and textGrain 67%, at the same acceptance rate.

来源:Rohan Paul · x.com