OpenAI 将默认给 ChatGPT 输出添加水印，但仅限欧盟

OpenAI 宣布，将开始在欧盟范围内自动为 ChatGPT 生成的文本添加水印。该公司也会在其他地区提供水印功能，但在欧盟以外的地区，这项功能将默认关闭。

OpenAI 在欧洲采取这一举措，是出于遵守今年 8 月生效的《欧盟人工智能法案》的需要。该法案要求以可由其他工具检测的方式标记由 AI 模型生成的内容。遗憾的是，目前仍不存在一种完全有效且可靠的实现方式。已有一些标准，例如 SynthID 和 C2PA 项目，但对于具备基本技术知识的人来说，它们相对容易被规避。

OpenAI 的水印方案很可能也面临同样的问题。其方法属于专有技术；该公司将其命名为 textGrain，并发布了一篇技术论文，解释其工作原理。但总体而言，它与我们过去见过的其他 LLM 水印工具类似：它会在词语选择中嵌入人类读者难以察觉的模式，这些模式不会显著改变输出内容的整体质量，但掌握密钥的人可以使用专门的检测器将其识别出来。OpenAI 表示，将向数量有限的研究人员和机构开放该检测器，并为其他申请加入的对象提供审批流程，逐步扩大访问范围。

OpenAI will begin automatically watermarking text generated with ChatGPT in the European Union, the company has announced. It will also offer the watermarking feature in other regions, but it will be off by default outside of the EU.

The move in Europe is driven by a need to comply with the EU AI Act, which took effect in August. It requires marking content produced by AI models in a way that another tool can detect. Unfortunately, there is still no completely effective and reliable way to do that. A few standards already exist, like SynthID and the C2PA project, but they are relatively easy to circumvent for anyone with basic know-how.

The same is likely true for OpenAI’s watermark. Its method is proprietary; the company calls it textGrain, and has published a technical paper explaining how it works. But in general, it works like other LLM watermarking tools we’ve seen in the past: It puts patterns in the word choices that are not clear to a human reader, and that don’t meaningfully change the general quality of the output, but that someone with a key can use a specialized detector to find. OpenAI says it will be giving access to the detector to a limited number of researchers and organizations, and providing a request-for-approval process for others to be added over time.