Posted on

Watermark removal through ordinary editing and format conversion

A missing watermark does not prove that an image was made by a human.

That sounds obvious, but it matters because watermarking is often discussed as though it permanently divides synthetic media from everything else. In practice, digital files are copied, resized, recompressed, screenshotted, exported, and converted between formats constantly. Some provenance signals survive those operations. Others do not.

The first distinction is between visible watermarks and embedded information.

A visible mark is part of the pixels: a logo, label, or pattern intentionally placed where a viewer can see it. Embedded provenance can instead live in metadata or a cryptographically signed manifest associated with the file. Systems such as the C2PA specification are designed to record information about an asset’s origin and editing history.

Neither approach is indestructible.

Ordinary processing can erase evidence

A screenshot creates a new file from what was displayed on the screen. The screenshot may visually reproduce the original image almost perfectly while omitting the original file’s metadata.

Exporting from an image editor can do something similar. A JPEG may be converted to PNG. A platform may resize the image and create its own copy. A messaging service may recompress it. Metadata can disappear even when nobody intended to hide anything.

Visible marks have different weaknesses. Cropping may remove a mark near an edge. Resizing can make a subtle mark unreadable. Heavy compression can interfere with invisible signal-based watermarks. A screenshot generally preserves a visible watermark because the pixels are copied, but it may destroy metadata attached to the original file.

This is one reason provenance systems increasingly discuss more than one recovery method. C2PA, for example, supports the idea of durable credentials that can use mechanisms such as content fingerprints or watermarks to reconnect altered media with provenance stored elsewhere.

Absence is weak evidence

Suppose an image arrives without any AI label or provenance metadata.

That tells you what is present in the file you received. It does not reliably tell you what was present three transformations earlier.

The image may have originated in a camera and lost metadata. It may have been generated by a model and lost metadata. It may have been edited by a person, processed by a platform, downloaded, and screenshotted several times.

The same problem exists in reverse. A surviving provenance credential can provide useful evidence about origin and editing history, but it does not make the depicted claim true. Authentic provenance and factual accuracy are separate questions.

Watermarks therefore work best as evidence that can survive a chain of handling, not as a magical binary test.

The internet is an enormous file-conversion machine. Any detection system that assumes media will remain in its pristine original container is going to meet reality very quickly.

Posted on

Provenance labels and their survival through reposting

A provenance label is useful only while it remains attached to the thing it describes.

That sounds obvious until media starts moving through the internet.

An image leaves a camera, enters an editor, gets uploaded to a social network, downloaded, resized, screenshotted, pasted into a message, reposted by another account, and compressed again. Somewhere in that journey, the information explaining where the image came from may disappear.

The Coalition for Content Provenance and Authenticity is trying to make that chain more durable through the C2PA standard and Content Credentials. The current C2PA technical specification defines a system for attaching cryptographically verifiable provenance information to digital assets: who or what created them, which tools modified them, and how their history developed.

That is stronger than a plain text label saying “AI generated.”

It is still not magic glue.

The file and its history can become separated

Ordinary internet workflows routinely create new files.

A platform may resize a photograph. A messaging app may recompress it. A user may take a screenshot. An editor may export the picture into another format. A social network may strip metadata from the downloadable rendition even if it inspected that metadata during upload.

Once the distributed copy no longer carries the original manifest, a viewer may see the media without seeing its provenance.

C2PA explicitly anticipates this problem. Its specification includes soft bindings, such as content fingerprints or invisible watermarks, that can help reconnect a modified asset with provenance stored elsewhere. The standard describes a “Durable Content Credential” as one that uses such mechanisms so provenance can potentially be recovered even after embedded metadata is lost.

That is an important design choice because exact-file identity is fragile on the modern web.

Provenance is evidence, not a truth machine

Even an intact credential has limits.

It can provide tamper-evident claims about an asset’s history and the entities that signed those claims. It does not prove that every statement depicted in the media is factually true. A perfectly authentic photograph can have a misleading caption. A real camera can photograph a staged scene. An editor can truthfully disclose an AI-generated asset whose underlying claim is still nonsense.

Provenance answers questions such as where did this come from and what happened to it?

Truth requires additional evidence.

Reposting is the durability test

For provenance systems to matter at internet scale, information has to survive beyond the first platform that understands it.

That means compatible tools, durable bindings, visible labels, repositories that can recover manifests, and platforms willing to preserve or reconstruct provenance when they transform media.

Otherwise a credential may work beautifully at the point of creation and vanish three reposts later—exactly when somebody encounters the content without its original context.

Dead Internet Theory is partly a problem of uncertain origins. Synthetic media makes that uncertainty harder.

Provenance systems offer a practical response, but their real test is not whether a label can be attached.

It is whether the label can survive the internet.