MS Paint and Photos inivisibly watermark even locally generated output with GUID (xusheng.dev)

Article summary

Microsoft Paint and Photos embed a unique identifier, or GUID, into locally generated images as an invisible watermark. This GUID is obtained from a remote server during the image generation process, which also involves prompt moderation. The watermark is added to the image pixels and metadata, including C2PA Content Credentials. This feature is used for both local and cloud-based image generation, with the goal of providing provenance and authenticity information for AI-generated images.

Main themes

• image watermarking
• user privacy
• AI-generated images
• digital signing
• censorship
• data collection
• online moderation APIs
• provenance and authenticity

What commenters say

• The addition of invisible watermarks to images raises concerns about user privacy and potential misuse of the technology.
• Some commenters argue that digital signing of images could be beneficial for verifying authenticity, but others point out the potential risks of key extraction and exploitation.
• The use of online moderation APIs for local AI image generation is seen as worrying by some, as it may allow for censorship and data collection.
• Others argue that the focus on AI-generated images is a red herring, and the real issue is the secret addition of unique identifiers to all images, which could be used to compromise user anonymity.
• There are differing opinions on the effectiveness of digital signing in preventing image forgery, with some arguing that it could be easily circumvented.
• Some commenters suggest that the true purpose of the watermarking is to collect user data and associate it with their Microsoft account, rather than to provide any actual benefit to the user.
• The discussion also touches on the potential for abuse of such technology, including the possibility of fake evidence being created and used against individuals.
• Others propose alternative solutions, such as using open-source software or avoiding the use of Microsoft products altogether, to maintain user privacy and autonomy.