How does Fable 5.1 hide messages in images?

(lesswrong.com)

59 points | by gmays 11 hours ago ago

12 comments

  • tech234a 3 minutes ago ago

    Interesting, so this is nothing like the way OutGuess worked [1]. Though OutGuess worked with JPG images and these are apparently SVGs.

    [1]: https://en.wikipedia.org/wiki/OutGuess

  • hagen8 10 minutes ago ago

    This seems very trivial... There are way more subtle and information dense ways to encode information in images.

  • jurakovic 21 minutes ago ago

    But to be honest, images like these seem really strange, and even without this article I'd suspect something is encoded in building heights etc. Because normal image would never have such "weird" buildings. But nevertheless I guess it's able to encode message in even more subtle ways.

  • Trusteando 36 minutes ago ago

    Here using images is incidental. In fact, what Fable is actually doing is generic encoding/decoding of a message into a medium. Ask it to hide a message in a poem and it should try to apply a strong (signal to noise ratio) family of schemes, for example quantized, margin-rich encoding. Robustness of features depends on the medium, so Fable is selecting strong encoding and robust features tailored to it. This frames AI steganography not as a trick of computer vision, but as an emergent property of a model reasoning about information density across arbitrary media.

  • adrianhqs 7 minutes ago ago

    I think all AI models do that

  • avaer an hour ago ago

    Will be interesting to see agents intentionally hiding this stuff in a way operators can't spot from any human readable output or thinking trace, evading detection. Wonder if this has happened yet, but it seems inevitable.

  • walrus01 2 hours ago ago

    Let's see if we can stego secret messages into SVG pelicans on bicycles, as a test.

    • BlackRabbit1 an hour ago ago

      That's how LLM organizing the takeover of the modern world.

      IP-over-Pelican

      • wartywhoa23 27 minutes ago ago

        No, the LLM takeover is mostly by the samurai sword, but IPoP would definitely be of aid!

      • nolok an hour ago ago

        Apparently they prefer amateur german message boards or something

      • walrus01 an hour ago ago

        The author of RFC1149 would like a word

        • BlackRabbit1 an hour ago ago

          The machines will spare his life