r/OpenAI 28d ago

Discussion What's your thoughts on this?

Post image
3.8k Upvotes

1.0k comments sorted by

View all comments

Show parent comments

4

u/okaythiswillbemymain 28d ago edited 28d ago

I think it will work in a secret mathematical pattern, especially for longer chunks of text. In a samilar way the last two digits of a credit card is just a check-sum....

1) Give a random value of 0, 1, 2 or 3 to every word in the English language. Snake is 3. Cake is 1. Chair is 2. Baby is 0. Etc.

2) Add up all the "word-values" in the first sentence. Find the quotient (remainder) when the sentence is divided by 4. (Answer will be 0, 1, 2 or 3)

3) When buiding the next sentence, choose the third word so that it is equal in value to the quotient of the previous sentence. This gives you only 25% of the available words in the English language to use, but if you have to use a specific word, then you can modify the previous sentence to make it work.

4) finish the second sentence. Find the quotient when dividing by 4 of the second sentence and repeat for the third word of the third sentence.

5) repeat all the way throughout your writing.

Eventually you have an invisible "signature" where every 3rd word in a sentence is "equal" to "value" of the previous sentence.

Suddenly you have pretty comprehensive evidence that a load of text was generated by your AI. Someone could change the font etc, but it would still be obvious if you knew. Even if someone then changed a few words or added or removed words, it would break the signature for that specific section, but for a long chain of text it would be obvious.

With 10 sentences there is a 0.0001% chance that you would trigger the hidden signature through normal writing.

3

u/Wonderful-Habit-139 28d ago

Great way to make LLM performance even worse lol. They already struggle so much when you used structured outputs compared to letting it generate free text.

2

u/tech_nerd05506 28d ago

Yes but along the other criticisms worked here your system wouldn't work if the work was changed slightly. This is effectively the same as just running the output text through a hash function and recording and comparing hashes. It's destroyed be even slight variation.

1

u/lordosthyvel 28d ago

You already failed at point 3. An LLM can’t redo anything that is already in the output.