Spymarks, Not Watermarks

The Spymarks essay raises a privacy question about invisible watermarks: could a hidden identifier connect a shared image to a person? The essay argues that an embedded payload could hold an identifier that an operator links to a separate database, and it proposes a new label to emphasize that potential use.

Google DeepMind's SynthID-Image paper reports that its externally available variant can encode 136-bit payloads in 512-by-512 images. That establishes capacity to carry information. Google's product description describes identifying AI-generated content; it does not establish the essay's suggested linkage to personal records. Identifying AI-generated material and identifying the person who made it require different evidence.