Editorial illustration for Developer says he reverse‑engineered Google DeepMind’s SynthID watermark tool
DeepMind SynthID Watermark Cracked by GitHub Hacker
Developer says he reverse‑engineered Google DeepMind’s SynthID watermark tool
A software developer says he beat Google’s flagship AI watermark. He didn’t even break a sweat.
The developer, using the name Aloshdenny, says he reverse-engineered Google DeepMind’s SynthID system. His tools are now public on GitHub. The claim hinges on using about 200 images generated by Gemini, some basic signal processing, and what he calls “way too much free time.” A little weed helped too.
He didn’t delete the watermark. He learned to spoof it, either by making it unreadable or by injecting its signature into unrelated images. He admits the system is “genuinely good engineering.” So is one of the most widely deployed AI watermarks now effectively broken?
The situation is more interesting than a simple yes.
A software developer claims to have reverse-engineered Google DeepMind's SynthID system, showing how AI watermarks can be stripped from generated images or manually inserted into other works. A claim that, according to Google, isn't true. The developer, going by the username Aloshdenny, has open-sourced their work on GitHub and documented his process, claiming all it required was 200 Gemini-generated images, signal processing, and "way too much free time." A little weed also seemed to help.
"Turns out if you're unemployed and average enough 'pure black' AI-generated images, every nonzero pixel is literally just the watermark staring back at you." SynthID is a near-invisible watermarking system that tags content generated by Google's AI tools, embedding itself in the pixels of images at the point of creation. It was designed to be difficult to remove without degrading the image quality, and is used widely across the AI products offered by Google -- everything spat out by models like Nano Banana and Veo 3 carries SynthID watermarks, and it's even being applied to YouTube's AI-generated creator clones. Aloshdenny says he found the system to be "genuinely good engineering," and was still unable to remove SynthID entirely in tests, instead relying on confusing SynthID decoders that try to read watermarked images.
The process used to crack the underlying mechanics of Google's watermark is technically complex for non-developers.
Google says the claim is false. The company is technically correct in a narrow sense. The watermark can’t be cleanly removed without ruining the image.
But that’s not the point. Aloshdenny mapped its structure. He found the seams.
This means a person with enough patience can force the system to see watermarks that aren’t there, or fail to see ones that are. For Google, the real problem isn’t a single hobbyist. It’s that the method is now open source.
Anyone can probe the system’s limits. The statistical line between watermarked and clean will blur as more people learn where to push.
Aloshdenny called it a product of boredom and weed. The joke hides a serious logic. Watermarking works only if removing it is harder than it’s worth.
For a casual user, SynthID is solid. For someone motivated, it’s a solvable puzzle. That’s the deal with any provenance tool in a world where code gets published.
They make forgery more difficult. They don’t make it impossible. Every published postmortem makes the next watermark a bit tougher to crack, and the cycle continues.
Related Reading
Browse all Google news →
Open Source Trump cracks down on Anthropic after Amazon tip; staff largely foreign
Open Source SDOF Adds Two Defensive Layers via Intent Router and StateAwareDisp
Open Source D&B rebuilds 642 million‑business database after AI agents hit limits
Related Topic NVIDIA and Google Cloud let developers scale AI from prototype to production
Market Trends
Related Topic Google tests visual 'magazine-style' UI for Gemini 3 Pro users
LLMs & Generative AI
From Archives BlackRock's Aladdin AI platform processes large market data sets
From Archives 43% of AI‑generated code changes need debugging; Amazon outage cited
From Archives Google AI's Vantage protocol shows Executive LLM beats agents on 8 metrics
LLMs & Generative AI
From Archives Researchers say OpenAI's Sora and Google's Veo aren't true world models
Research & Benchmarks
Common Questions Answered
How did the developer claim to have reverse-engineered Google DeepMind's SynthID watermark system?
The developer, known as Aloshdenny, used 200 Gemini-generated images and signal processing techniques to analyze and potentially remove SynthID watermarks. By open-sourcing the work on GitHub, the developer documented a process that allegedly allows for stripping or manually inserting watermarks into AI-generated images.
What are the potential implications of successfully reverse-engineering the SynthID watermarking tool?
If the developer's claims are verified, it could significantly undermine the credibility of AI image provenance and watermarking systems. The ability to remove or falsely insert watermarks would weaken the trust and accountability mechanisms designed to identify AI-generated content.
What is Google's response to the developer's claim of reverse-engineering SynthID?
Google has publicly disputed the developer's claim, stating that the SynthID system has not been successfully reverse-engineered. The company maintains that the watermarking tool remains secure, despite the open-source documentation and code shared on GitHub.
