{Juan Pedro Cerezo}~• retweetledi
🚨Google built an invisible watermark into every image Gemini has ever generated. Over 10 billion pieces of content marked.
One unemployed engineer just cracked it open. With 200 black images and math.
It's called reverse-SynthID.
SynthID is Google DeepMind's invisible watermark. It's embedded at the pixel level into every image, video, audio, and text generated by Gemini. Invisible to the human eye. Designed to survive cropping, compression, screenshots, and format changes.
It was supposed to be unbreakable.
Here's how he broke it:
→ Generated 200 pure black and pure white images from Gemini
→ When you average enough pure-black AI images, every non-zero pixel IS the watermark. Nothing to hide behind. Just the signal, naked.
→ Used FFT spectral analysis to map the exact carrier frequencies
→ Discovered the watermark uses a fixed phase template — identical across every image from the same model
→ Cross-image phase coherence at carrier frequencies: over 99.5%
→ Built a detector that identifies SynthID watermarks with 90% accuracy
→ Built a V3 bypass that drops 91% of the phase coherence and 75% of carrier energy — at 43+ dB PSNR. Almost zero visible quality loss.
No neural networks. No proprietary access. No leaked code. Just signal processing and too much free time.
Here's the wildest part:
The green channel carries the strongest watermark signal. The carrier frequencies change based on image resolution. And the entire phase template is fixed — meaning every single Gemini image carries the same fingerprint structure.
One engineer. 200 black images. A Fourier transform. That's all it took to reverse-engineer a system protecting 10 billion+ pieces of content.
519 GitHub stars. 39 forks. Python. Research and educational purposes only.
100% Open Source.
(Link in the comments)
English
