Unverified60% confidenceFactExact time
Translation attacks, which translate text into another language and back, can almost completely eliminate the original watermark.
2
Sources
60%
Confidence
Long-term
Relevance
8/12/2026
First Seen
Sources
Related Claims
Unverified强对抗性攻击如使用另一个模型完整改写或翻译往返仍可能破坏水印信号，鲁棒性与文本质量之间存在权衡74% similarUnverifiedSynonym substitution, text blending, and round-trip translation can all weaken or eliminate the watermark signal.73% similarUnverifiedParaphrasing is the most straightforward watermark removal attack: using another language model to synonymously rephrase the text can scramble the token sequence, breaking the hash dependency between the green list and red list and causing the watermark signal to significantly attenuate or even disappear.72% similarUnverifiedTypical techniques for linguistic illegibility attacks include replacing sensitive vocabulary with Unicode variant characters, mixing multiple languages, using low-resource languages to bypass filters, and fragmenting harmful intent across multiple conversation turns.70% similarUnverified文本水印技术在文本被改写或翻译后容易失效，需要所有模型提供商统一实施标准69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/736428API
curl https://kongchang.com/api/v1/knowledge/claims/736428MCP
get_claim(id=736428)