Pith. sign in

REVIEW 3 major objections 6 minor 154 references

Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)

T0 review · 3 major / 6 minor · reviewed 2026-08-02 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read Deepfake research targets fake images, not the people harmed by AI-generated sexual abuse.

desk verdict Conceptually strong position paper, but the '0 of 39' empirical claim is an artifact of a search string that pre-selects authenticity-oriented papers. read the letter →

arxiv 2607.18263 v2 pith:WNLEB4CW submitted 2026-05-16 cs.AI

Li Qiwei , Wells Lucas Santo , Sarita Schoenebeck , Eric Gilbert This is my paper
classification cs.AI
keywords deepfakesAI-generatednon-consensualintimateimageryAIG-NCIIdignityharmsauthenticitydetectioncontentprovenanceAIsafetygenerativeabuse
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This position paper argues that the AI/ML field's approach to deepfakes is misaligned with the actual dominant harm. The paper claims that technical interventions—detection, provenance, and watermarking—treat deepfakes as a threat to truth and authenticity, while the most common real-world abuse is AI-generated non-consensual intimate imagery (AIG-NCII), a dignity violation against the person depicted. A landscape analysis of 39 highly cited papers found zero technical implementations with a threat model specific to AIG-NCII. The core claim is that artificiality and consent are orthogonal axes of harm, so knowing an image is synthetic does not protect the subject and can actually worsen the harm. The paper calls for subject-centric threat models, harm-reduction metrics, and partnerships with experts in sexual violence prevention.

What carries the argument

The organizing device is the orthogonality claim (the paper's Table 1): the axis of artificiality (synthetic vs. authentic) is perpendicular to the axis of consent (safe vs. harmful), which means 'authentic ≠ safe' and that detection/provenance/watermarking tools measure the wrong axis. The framework is carried by a taxonomy of harms—viewer-centric epistemic harms versus subject-centric dignity harms—and by a landscape-analysis method that classifies papers into three tiers of engagement (no mention, mention only, technical implementation). AIG-NCII is defined as sexualized synthetic imagery of a specific real person created without consent, including 'nudification' via diffusion models.

What would settle it

A landscape analysis that searches security and human-computer-interaction venues using the field's own vocabulary—'nudification', 'NCII', 'non-consensual intimate imagery', 'image-based sexual abuse'—would surface papers with AIG-NCII-specific threat models. Finding even a small number of such papers would disprove the 'zero technical implementations' result, though not necessarily the larger point about the field's dominant focus.

Watch

Extended reading notes

Core claim

The paper establishes that the AI/ML community's deepfake defenses rest on a category error: treating authenticity as a proxy for safety. Drawing on the human right to dignity, it distinguishes viewer-centric epistemic harms (fraud, deception, erosion of shared reality) from subject-centric dignity harms (non-consensual identity preservation and non-consensual modification, such as nudification). Through a qualitative analysis of 39 highly cited papers published in top venues between 2020 and 2025, it shows that the literature is almost entirely devoted to synthetic-versus-authentic discrimination, with only five papers mentioning sexual abuse in passing and zero papers building a technical

Load-bearing premise

The paper's central claim hinges on the landscape analysis: if the 39-paper corpus, selected by authenticity-oriented search terms and top general-AI venues, is not representative of the broader research ecosystem, then the finding that zero technical interventions target AIG-NCII may be an artifact of the search rather than a fact about the field.

Editorial extensions

If this is right

  • Public labeling of suspected AIG-NCII should be replaced by backend flags that trigger suppression or triage, treating synthetic abuse like traditional NCII.
  • Research goals should shift from maximizing detection accuracy to minimizing identity preservation, making it harder for a few reference photos to be cloned into sexualized content.
  • Threat models should incorporate adversaries who know the victim personally, as in intimate-partner violence, rather than assuming a stranger fraudster.
  • Safety metrics for generative AI should be validated by measured reductions in abuse prevalence, not by benchmark accuracy alone.
  • Release norms for high-fidelity identity-preserving and inpainting models should be revisited, with gated or researcher-only access.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • If the orthogonality claim is right, then adding synthetic-authentic labels to intimate imagery is not a neutral act; a direct test would compare victim-survivor outcomes on platforms that label-and-keep versus platforms that remove on suspicion.
  • The landscape analysis likely undercounts AIG-NCII-specific technical work, since its search terms ('detection', 'watermark', etc.) and venue filter exclude security and HCI venues where the paper itself cites relevant studies; a broader search would yield a more accurate denominator.
  • The argument implies that today's deepfake detection benchmarks, built on accuracy against synthetic-image datasets, may optimize for the wrong objective; a testable replacement is a benchmark that measures a model's ability to suppress generation of a specific identity after fine-tuning.
Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 6 minor

Summary. This position paper argues that AI/ML deepfake research is structurally misaligned with the dominant real-world abuse of AI-generated non-consensual intimate imagery (AIG-NCII). The authors claim that current technical interventions focus on viewer-centric epistemic harms—authenticity, fraud, misinformation—while ignoring subject-centric dignity harms such as AIG-NCII. They support this with a landscape analysis of 39 highly-cited papers (2020–2025) that finds zero AIG-NCII-specific technical implementations, review detection/provenance/watermarking as the three dominant intervention paradigms, introduce an orthogonality framework distinguishing artificiality from consent (Table 1), and discuss ways in which authenticity tools may exacerbate dignity harms. The paper concludes with nine recommendations for realigning the field and a section addressing three alternative views.

Significance. If the empirical claim is supported, this paper makes an important conceptual contribution by reframing deepfake research and AI safety around consent and dignity rather than truth and authenticity. The orthogonality of artificiality and consent in Table 1 is a simple, useful corrective to the field's default assumption that synthetic detection equals safety. The paper is also methodologically honest: it concedes in §5 that definitive solutions cannot always be proposed, and in AV2 that adversarial defenses are brittle. The recommendations are concrete and ethically cautious, and the paper explicitly calls for partnerships with sexual-violence prevention experts. However, the central descriptive claim—that technical interventions 'almost entirely ignore' AIG-NCII—is currently not established by the landscape analysis, because the search and venue filters predetermine an authenticity-focused corpus. The conceptual argument is valuable, but the empirical framing must be revised or properly scoped.

major comments (3)
  1. [§2.2 and Table 2] The landscape analysis's Google Scholar query uses only authenticity-verification terms ('detection', 'detector', 'forensics', 'recognition', 'watermark') and excludes harm-related terms such as 'non-consensual', 'NCII', 'intimate imagery', 'nudify', or 'consent'. The venue filter (CVPR/ICCV/ECCV/NeurIPS/ICML/ICLR plus high-citation outliers) also excludes security venues. Yet the paper itself cites Gibson et al. (2025) and Han et al. (2025), both USENIX Security 25 papers on the AIG-NCII ecosystem, and Van Le et al. (2023), an ICCV paper on Anti-Dreambooth, as substantive AIG-NCII-related or subject-centric work; none appear in Table 2. Consequently, the '0 technical implementations' result and the abstract's claim that the research ecosystem is 'limited to authenticity detection tools' are at least partly artifacts of the search design. Please re-run the search with harm-specific terms
  2. [§2.2 and Figure 1] The classification of the 39 papers into 'No mention', 'Mention only', and 'Technical implementation' is presented without a coding protocol, inter-rater reliability, or a definition of 'meaningfully engaged'. The paper's headline result is the zero count in the last category, but this depends on a subjective threshold. Making the coding reproducible—for example, by including a coding sheet, specifying decision rules, and reporting dual-coding—would substantially strengthen the empirical claim.
  3. [Abstract and §5 R4] The paper's own recommendations and literature review cite subject-centric technical defenses—Anti-Dreambooth (Van Le et al., 2023), Glaze (Shan et al., 2023), AdvPaint (Jeon et al., 2025), and BlurGuard (Kim et al., 2026)—that are not detection, provenance, or watermarking. This is in tension with the abstract's statement that the research ecosystem is 'limited to authenticity detection tools.' Either these works were excluded from the landscape analysis because of the query/venue filters (reinforcing the issue in the first major comment), or they are considered out of scope, in which case the paper should say so explicitly. As written, the paper both asserts a monolithic authenticity-only ecosystem and cites counterexamples to that assertion.
minor comments (6)
  1. [§2.2] Table 2 includes several arXiv preprints (e.g., Liu et al., 2023; Ma et al., 2023) despite the stated top-venue filter. Clarify the inclusion rule for preprints and high-citation outliers.
  2. [References] The reference key '(tel, 2024)' appears in text as the author and should be formatted properly (The New York Times piece by Conger et al. or the Telegram article).
  3. [§2.2] 'This initial search criteria yielded 965 papers' — 'criteria' is plural; use 'criterion' or rephrase.
  4. [Figure 1] The figure caption states 'No papers found in our landscape analysis meaningfully engaged with AIG-NCII,' but the bar chart itself is not shown in the manuscript text; ensure the figure is legible and the axes are labeled.
  5. [§4.2 / Table 1] Consider replacing 'Consensual pornography' with 'Consensual intimate imagery' to avoid normative overtones and to align with the terminology used elsewhere in the paper.
  6. [References] Several references are missing venue or page information (e.g., Rini, 2020; Diel et al., 2025). Complete these for reproducibility.

Circularity Check

1 steps flagged · score 6.0 of 10

Landscape analysis partially constructs its own finding: the search and coding scheme are built from the authenticity paradigm, so the '0 AIG-NCII implementations' result is partly an artifact of the inclusion filter.

  1. self definitional [§2.2 Methodology and Results; cf. §4.1]
    "We queried Google Scholar for papers containing a specific set of keywords, using the following query: (“detection” OR “detector” OR “forensics” OR “recognition” OR “watermark”) AND (“deepfake” OR “synthetic image” OR “fake image” OR “diffusion”). ... 3. Technical implementation (0 papers): The authors design an intervention with a threat model specific to AIG-NCII."

    The corpus is defined by authenticity-verification keywords (detection/detector/forensics/recognition/watermark), so the survey's finding that the community 'has coalesced around' detection, provenance, and watermarking and that 0 papers implement AIG-NCII-specific defenses largely recapitulates the inclusion filter. A subject-centric defense need not contain any query keyword, and the paper itself, in §4.1, identifies Anti-Dreambooth (Van Le et al., 2023) as a defense against the AIG-NCII harm mode of non-consensual identity preservation; that paper is absent from Table 2. The coding of 'technical implementation' is also term-based (NCII, revenge porn, nudity, undress, etc.), so the conclusion that no AIG-NCII-specific intervention exists is an artifact of the search/coding definition rat

full rationale

The central normative argument—that authenticity (synthetic/authentic) is orthogonal to consent (safe/harmful), so labels do not remediate dignity harms—does not reduce to any fitted parameter or self-citation; it is a conceptual argument supported by external reports, the Meta Oversight Board, and domain literature. The paper's self-citations (Qiwei et al. 2025 on DMCA inefficacy; Schoenebeck et al. 2021 on restorative justice) are contextual and not load-bearing. However, the paper's headline empirical claim, that deepfake technical research 'almost entirely ignores' AIG-NCII, rests on a landscape analysis whose query terms are themselves the authenticity paradigm. That result is thereby partly constructed by the search and coding scheme; the paper even cites subject-centric defenses in §4.1/R4 that would not enter the corpus. I therefore score partial circularity (6), not full circularity, since the paper's recommendations and the authentic≠safe framework retain independent content.

Assumptions & free parameters 0 free parameters · 4 assumptions · 0 invented entities

No numeric free parameters. The central claim rests on empirical prevalence assumptions and normative premises about consent and dignity, not on fitted quantities.

assumptions (4)
  • domain assumption The majority of generative AI usage is AIG-NCII
    Supported by third-party reports about a single platform and period (Bouchaud 2026; CCDH 2026; Security Hero 2023); not independently verified in the paper.
  • domain assumption Dignity is a fundamental human right and subject-centric dignity harms are a valid criterion for evaluating technical interventions
    Adopted from UN UDHR and Citron (2018); a normative premise that the paper argues for but does not prove.
  • domain assumption Safety for AIG-NCII is determined by consent, not artificiality; authenticity tools therefore cannot be sufficient interventions
    Central conceptual claim built on Table 1 and qualitative arguments; plausible but not empirically demonstrated.
  • domain assumption Adversarial immunization and gated release can add sufficient friction to reduce abuse
    Recommendation-level assumption citing Jeon et al. 2025, Kim et al. 2026, and Van Le et al. 2023; the paper itself concedes brittleness in AV2.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)." pith.science (2026). https://pith.science/paper/WNLEB4CW

@misc{pith2026260718263,
  author       = {Pith},
  title        = {Pith review of: Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/WNLEB4CW}},
  note         = {Machine review of arXiv:2607.18263}
}
read the original abstract

AI-generated non-consensual intimate imagery (AIG-NCII) is not adequately addressed in AI/ML literature regarding AI-generated media, commonly referred to as "deepfakes". While research on deepfakes currently focuses on its epistemic harms -- or harms relating to truth and authenticity -- this is misaligned with the dominant reality of generative AI abuse involving sexualized imagery. We conduct a landscape analysis of highly-cited works to demonstrate that technical interventions addressing deepfakes almost entirely ignore AIG-NCII, limiting the research ecosystem to authenticity detection tools. In this position paper, we argue that existing interventions address viewer-centric epistemic harms, such as fraud or scams, but ignore subject-centric dignity harms, such as AIG-NCII. We illustrate that knowing an image is synthetic does not mitigate harms to subjects and may, in some cases, even exacerbate them. We conclude by offering recommendations to realign the field, including updating threat models to consider subject-centric harms and addressing AIG-NCII in AI safety research. Finally, we caution that researchers should only engage in this high-risk domain if they implement safety guardrails for both subjects and researchers and establish partnerships with domain experts in sexual violence prevention.

Figures

Figures reproduced from arXiv: 2607.18263 by the authors.

Figure 1
Figure 1. [PITH_FULL_IMAGE:figures/full_fig_p003_1.png] view at source ↗
Figure 2
Figure 2. Examples of deepfakes that cause harm to the viewer, subject, or both parties. 4. Consequences of ignoring AIG-NCII The intervention paradigms around detection, provenance, and watermarking are meant to restore the viewer’s ability to discern what is authentic. For AIG-NCII cases, however, the subject suffers from violation of their dignity regard￾less of authenticity. In this section, we discuss possible consequenc… view at source ↗

Discussion (0). Sign in to comment.

Reference graph

Works this paper leans on

154 extracted references · 2 canonical work pages

  1. [1]

    2021 10th International Conference on Information and Automation for Sustainability (ICIAfS) , pages=

    Deepfakes detection methods: a literature survey , author=. 2021 10th International Conference on Information and Automation for Sustainability (ICIAfS) , pages=. 2021 , organization=

    2021

  2. [2]

    International Conference on Learning Representations , volume=

    Adversarial perturbations cannot reliably protect artists from generative ai , author=. International Conference on Learning Representations , volume=

  3. [3]

    Proceedings of the IEEE/CVF international conference on computer vision , pages=

    Erasing concepts from diffusion models , author=. Proceedings of the IEEE/CVF international conference on computer vision , pages=

  4. [4]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Safe latent diffusion: Mitigating inappropriate degeneration in diffusion models , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  5. [5]

    Ethics of data and analytics , pages=

    Machine bias , author=. Ethics of data and analytics , pages=. 2022 , publisher=

    2022

  6. [6]

    Conference on fairness, accountability and transparency , pages=

    Gender shades: Intersectional accuracy disparities in commercial gender classification , author=. Conference on fairness, accountability and transparency , pages=. 2018 , organization=

    2018

  7. [7]

    Stanford Internet Observatory, Cyber Policy Center, December , volume=

    Identifying and eliminating csam in generative ml training data and models , author=. Stanford Internet Observatory, Cyber Policy Center, December , volume=

  8. [8]

    The Fourteenth International Conference on Learning Representations , year=

    DiffVax: Optimization-Free Image Immunization Against Diffusion-Based Editing , author=. The Fourteenth International Conference on Learning Representations , year=

Show all 154 references
  1. [9]

    Advances in Neural Information Processing Systems , volume=

    BlurGuard: A Simple Approach for Robustifying Image Protection Against AI-Powered Editing , author=. Advances in Neural Information Processing Systems , volume=

  2. [10]

    a stalker's paradise

    “a stalker's paradise” how intimate partner abusers exploit technology , author=. Proceedings of the 2018 CHI conference on human factors in computing systems , pages=

    2018

  3. [11]

    arXiv preprint arXiv:2005.05535 , year=

    DeepFaceLab: Integrated, flexible and extensible face-swapping framework , author=. arXiv preprint arXiv:2005.05535 , year=

    2005 arXiv

  4. [12]

    Proceedings of the IEEE/CVF international conference on computer vision , pages=

    Adding conditional control to text-to-image diffusion models , author=. Proceedings of the IEEE/CVF international conference on computer vision , pages=

  5. [13]

    The Impact of AI-Generated Deepfake Social Media Content on Women in Bangladesh: A Qualitative Study , author=

  6. [14]

    2025 , note =

    Article 50: Transparency Obligations for Providers and Deployers of Certain AI Systems , author =. 2025 , note =

    2025

  7. [15]

    2024 , month =

    Our Approach to Labeling AI-Generated Content and Manipulated Media , author =. 2024 , month =

    2024

  8. [16]

    2026 , note =

    About AI-generated Content , author =. 2026 , note =

    2026

  9. [17]

    Cognition and Emotion , volume=

    Real is the new sexy: The influence of perceived realness on self-reported arousal to sexual visual stimuli , author=. Cognition and Emotion , volume=. 2024 , publisher=

    2024

  10. [18]

    Social & legal studies , volume=

    Sexual violence in the digital age: The scope and limits of criminal law , author=. Social & legal studies , volume=. 2016 , publisher=

    2016

  11. [19]

    Trauma, Violence, & Abuse , volume=

    Image-based sexual abuse perpetration: A scoping review , author=. Trauma, Violence, & Abuse , volume=. 2024 , publisher=

    2024

  12. [20]

    2025 , note =

    Faridabad Student Dies by Suicide After AI-Generated Deepfake Blackmail , author =. 2025 , note =

    2025

  13. [21]

    , author=

    Lora: Low-rank adaptation of large language models. , author=. ICLR , volume=

  14. [22]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    Dreambooth: Fine tuning text-to-image diffusion models for subject-driven generation , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  15. [23]

    Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

    High-resolution image synthesis with latent diffusion models , author=. Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

  16. [24]

    Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

    Conditional image-to-image translation , author=. Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

  17. [25]

    Communications of the ACM , volume=

    Generative adversarial networks , author=. Communications of the ACM , volume=. 2020 , publisher=

    2020

  18. [26]

    Violation of my \ body: \

    " Violation of my \ body: \ " Perceptions of \ AI-generated \ non-consensual (intimate) imagery , author=. Twentieth Symposium on Usable Privacy and Security (SOUPS 2024) , pages=

    2024

  19. [27]

    arXiv preprint arXiv:2512.11815 , year=

    Video Deepfake Abuse: How Company Choices Predictably Shape Misuse Patterns , author=. arXiv preprint arXiv:2512.11815 , year=

    arXiv

  20. [28]

    Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , volume=

    A Closer Look at the Existing Risks of Generative AI: Mapping the Who, What, and How of Real-World Incidents , author=. Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , volume=

  21. [29]

    proceedings of the 2022 international conference on multimodal interaction , pages=

    On the horizon: Interactive and compositional deepfakes , author=. proceedings of the 2022 international conference on multimodal interaction , pages=

    2022

  22. [30]

    arXiv preprint arXiv:2504.17663 , year=

    The Malicious Technical Ecosystem: Exposing Limitations in Technical Governance of AI-Generated Non-Consensual Intimate Images of Adults , author=. arXiv preprint arXiv:2504.17663 , year=

  23. [31]

    Information, Communication & Society , pages=

    ‘It's still abuse’: community attitudes and perceptions on AI-generated image-based sexual abuse , author=. Information, Communication & Society , pages=. 2026 , publisher=

    2026

  24. [32]

    Applications of Digital Image Processing XLV , volume=

    C2PA: the world’s first industry standard for content provenance (Conference Presentation) , author=. Applications of Digital Image Processing XLV , volume=. 2022 , organization=

    2022

  25. [33]

    arXiv preprint arXiv:2305.20030 , year=

    Tree-ring watermarks: Fingerprints for diffusion images that are invisible and robust , author=. arXiv preprint arXiv:2305.20030 , year=

    arXiv

  26. [34]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    The stable signature: Rooting watermarks in latent diffusion models , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  27. [35]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Towards universal fake image detectors that generalize across generative models , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  28. [36]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    Dire for diffusion-generated image detection , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  29. [37]

    International conference on machine learning , pages=

    Leveraging frequency analysis for deep fake image recognition , author=. International conference on machine learning , pages=. 2020 , organization=

    2020

  30. [38]

    Applied Sciences , volume=

    Deep fake image detection based on pairwise learning , author=. Applied Sciences , volume=. 2020 , publisher=

    2020

  31. [39]

    ICASSP 2023-2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) , pages=

    On the detection of synthetic images generated by diffusion models , author=. ICASSP 2023-2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) , pages=. 2023 , organization=

    2023

  32. [40]

    First Monday , year=

    Nothing new here: Emphasizing the social and cultural context of deepfakes , author=. First Monday , year=

  33. [41]

    Deep fakes: A looming challenge for privacy, democracy, and national security , author=. Calif. L. Rev. , volume=. 2019 , publisher=

    2019

  34. [42]

    Yale LJ , volume=

    Sexual privacy , author=. Yale LJ , volume=. 2018 , publisher=

    2018

  35. [43]

    2022 , publisher=

    The fight for privacy: Protecting dignity, identity and love in the digital age , author=. 2022 , publisher=

    2022

  36. [44]

    Deepfakes and the epistemic backstop , author=

  37. [45]

    34th USENIX Security Symposium (USENIX Security 25) , pages=

    Analyzing the \ AI \ nudification application ecosystem , author=. 34th USENIX Security Symposium (USENIX Security 25) , pages=

  38. [46]

    2019 International Conference on Biometrics (ICB) , pages=

    Vulnerability assessment and detection of deepfake videos , author=. 2019 International Conference on Biometrics (ICB) , pages=. 2019 , organization=

    2019

  39. [47]

    34th USENIX Security Symposium (USENIX Security 25) , pages=

    Characterizing the \ MrDeepFakes \ Sexual Deepfake Marketplace , author=. 34th USENIX Security Symposium (USENIX Security 25) , pages=

  40. [48]

    arXiv preprint arXiv:2503.02250 , year=

    Ai automatons: Ai systems intended to imitate humans , author=. arXiv preprint arXiv:2503.02250 , year=

    arXiv

  41. [49]

    Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , volume=

    Stop the nonconsensual use of nude images in research , author=. Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society , volume=

  42. [50]

    2023 13th International Conference on Cloud Computing, Data Science & Engineering (Confluence) , pages=

    A comparative study: deepfake detection using deep-learning , author=. 2023 13th International Conference on Cloud Computing, Data Science & Engineering (Confluence) , pages=. 2023 , organization=

    2023

  43. [51]

    2020 25th international conference on pattern recognition (ICPR) , pages=

    Video face manipulation detection through ensemble of cnns , author=. 2020 25th international conference on pattern recognition (ICPR) , pages=. 2021 , organization=

    2020

  44. [52]

    Bond, Shannon , year = 2024, month = dec, journal =. How

    2024

  45. [53]

    , year = 2026, month = jan, journal =

    Conger, Kate and Freedman, Dylan and Thompson, Stuart A. , year = 2026, month = jan, journal =. Musk's

    2026

  46. [54]

    Deepfakes of

    New, Brian and Salazar, Lexi and Lozano, Mike and Fralicks, Scott , year = 2024, month = nov, journal =. Deepfakes of

    2024

  47. [55]

    arXiv preprint arXiv:2602.04759 , year=

    How to Stop Playing Whack-a-Mole: Mapping the Ecosystem of Technologies Facilitating AI-Generated Non-Consensual Intimate Images , author=. arXiv preprint arXiv:2602.04759 , year=

    arXiv

  48. [56]

    The Harm of Deepfakes: A Scoping Review of Deepfakes' Negative Effects on Human Mind and Behavior , shorttitle =

    Diel, Alexander and Lalgi, Tania and Mellis, Finley Sam and Teufel, Alexander and B. The Harm of Deepfakes: A Scoping Review of Deepfakes' Negative Effects on Human Mind and Behavior , shorttitle =. AI & SOCIETY , issn =. doi:10.1007/s00146-025-02774-0 , urldate =

    doi

  49. [57]

    404 Media , author =

    Hugging. 404 Media , author =

  50. [58]

    CivitAI , year =. Policy

  51. [59]

    2024 , author =

    South. 2024 , author =

    2024

  52. [60]

    Bicker, Laura , url =. Cho

  53. [61]

    arXiv preprint arXiv:2504.13959 , year=

    AI Safety Should Prioritize the Future of Work , author=. arXiv preprint arXiv:2504.13959 , year=

    arXiv

  54. [62]

    Gibson, Jenna , year =. Korea

  55. [63]

    Millions of

    Burgess, Matt , urldate =. Millions of

  56. [64]

    New media & society , volume=

    \# Gamergate and The Fappening: How Reddit’s algorithm, governance, and culture support toxic technocultures , author=. New media & society , volume=. 2017 , publisher=

    2017

  57. [65]

    Porn Studies , volume=

    ‘A Deepfake Porn Plot Intended to Silence Me’: exploring continuities between pornographic and ‘political’deep fakes , author=. Porn Studies , volume=. 2020 , publisher=

    2020

  58. [66]

    GOV.UK , file =

    Online. GOV.UK , file =

  59. [67]

    2025 , author =

    S.146 - 119th. 2025 , author =

    2025

  60. [68]

    Durbin, Richard J

    Sen. Durbin, Richard J. [D-IL , month = jul, year =. S.3696 - 118th

  61. [69]

    Deepfake ‘

    Burgess, Matt , file =. Deepfake ‘

  62. [70]

    Singer, Natasha , url =. Real

  63. [71]

    Available at SSRN 4641526 , year=

    Building the epistemic community of AI safety , author=. Available at SSRN 4641526 , year=

  64. [72]

    arXiv preprint arXiv:2512.13500 , year=

    Platforms as Crime Scene, Judge, and Jury: How Victim-Survivors of Non-Consensual Intimate Imagery Report Abuse Online , author=. arXiv preprint arXiv:2512.13500 , year=

  65. [73]

    Journal of Academic Ethics , volume=

    Secondary trauma: Emotional safety in sensitive research , author=. Journal of Academic Ethics , volume=. 2020 , publisher=

    2020

  66. [74]

    Nature Machine Intelligence , pages=

    AI safety for everyone , author=. Nature Machine Intelligence , pages=. 2025 , publisher=

    2025

  67. [75]

    Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems , pages=

    A Law of One's Own: The Inefficacy of the DMCA for Non-Consensual Intimate Media , author=. Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems , pages=

    2025

  68. [76]

    arXiv preprint arXiv:2505.04600 , year=

    Perpetuating Misogyny with Generative AI: How Model Personalization Normalizes Gendered Harm , author=. arXiv preprint arXiv:2505.04600 , year=

    arXiv

  69. [77]

    We're utterly ill-prepared to deal with something like this

    " We're utterly ill-prepared to deal with something like this": Teachers' Perspectives on Student Generation of Synthetic Nonconsensual Explicit Imagery , author=. Proceedings of the 2025 CHI Conference on Human Factors in Computing Systems , pages=

    2025

  70. [78]

    404 Media , author =

    a16z-. 404 Media , author =. 2025 , file =

    2025

  71. [79]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Gaussian shading: Provable performance-lossless image watermarking for diffusion models , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  72. [80]

    IEEE Access , volume=

    An improved dense CNN architecture for deepfake image detection , author=. IEEE Access , volume=. 2023 , publisher=

    2023

  73. [81]

    ethical ai

    Limits and possibilities for “ethical ai” in open source: A study of deepfakes , author=. Proceedings of the 2022 ACM Conference on Fairness, Accountability, and Transparency , pages=

    2022

  74. [82]

    arXiv preprint arXiv:2306.15733 , year=

    Face morphing attack detection with denoising diffusion probabilistic models , author=. arXiv preprint arXiv:2306.15733 , year=

    arXiv

  75. [83]

    2025 , note =

    SynthID: A tool to watermark and identify content generated through AI , howpublished =. 2025 , note =

    2025

  76. [84]

    International conference on machine learning , pages=

    Learning transferable visual models from natural language supervision , author=. International conference on machine learning , pages=. 2021 , organization=

    2021

  77. [85]

    arXiv preprint arXiv:2312.02625 , year=

    Diffusion noise feature: Accurate and fast generated image detection , author=. arXiv preprint arXiv:2312.02625 , year=

  78. [86]

    International Conference on Machine Learning , pages=

    A critical revisit of adversarial robustness in 3D point cloud recognition with diffusion-driven purification , author=. International Conference on Machine Learning , pages=. 2023 , organization=

    2023

  79. [87]

    arXiv preprint arXiv:2503.15264 , year=

    Legion: Learning to ground and explain for synthetic image detection , author=. arXiv preprint arXiv:2503.15264 , year=

    arXiv

  80. [88]

    Expert Systems , volume=

    Bi-LORA: A Vision-Language Approach for Synthetic Image Detection , author=. Expert Systems , volume=. 2025 , publisher=

    2025

  81. [89]

    arXiv preprint arXiv:2302.01843 , year=

    Mordiff: Recognition vulnerability and attack detectability of face morphing attacks created by diffusion autoencoders , author=. arXiv preprint arXiv:2302.01843 , year=

    arXiv

  82. [90]

    arXiv preprint arXiv:2106.01615 , year=

    Imperceptible adversarial examples for fake image detection , author=. arXiv preprint arXiv:2106.01615 , year=

    arXiv

  83. [91]

    Advances in Neural Information Processing Systems , volume=

    Attack-resilient image watermarking using stable diffusion , author=. Advances in Neural Information Processing Systems , volume=

  84. [92]

    arXiv preprint arXiv:2503.14905 , year=

    Spot the fake: Large multimodal model-based synthetic image detection with artifact explanation , author=. arXiv preprint arXiv:2503.14905 , year=

  85. [93]

    Proceedings of the AAAI conference on artificial intelligence , volume=

    Patch diffusion: a general module for face manipulation detection , author=. Proceedings of the AAAI conference on artificial intelligence , volume=

  86. [94]

    ICASSP 2022-2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) , pages=

    A-pixelhop: A green, robust and explainable fake-image detector , author=. ICASSP 2022-2022 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP) , pages=. 2022 , organization=

    2022

  87. [95]

    Advances in Neural Information Processing Systems , volume=

    On learning multi-modal forgery representation for diffusion generated video detection , author=. Advances in Neural Information Processing Systems , volume=

  88. [96]

    Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision , pages=

    Deep image fingerprint: Towards low budget synthetic image detection and model lineage analysis , author=. Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision , pages=

  89. [97]

    arXiv preprint arXiv:2405.02696 , year=

    Diffusetrace: A transparent and flexible watermarking scheme for latent diffusion model , author=. arXiv preprint arXiv:2405.02696 , year=

    arXiv

  90. [98]

    arXiv preprint arXiv:2309.02218 , year=

    Robustness and generalizability of deepfake detection: A study with diffusion models , author=. arXiv preprint arXiv:2309.02218 , year=

    arXiv

  91. [99]

    Advances in Neural Information Processing Systems , volume=

    Diffusionfake: Enhancing generalization in deepfake detection via guided stable diffusion , author=. Advances in Neural Information Processing Systems , volume=

  92. [100]

    Proceedings of the IEEE/CVF international conference on computer vision , pages=

    Interpretable-through-prototypes deepfake detection for diffusion models , author=. Proceedings of the IEEE/CVF international conference on computer vision , pages=

  93. [101]

    IEEE Transactions on Artificial Intelligence , year=

    Generalizable synthetic image detection via language-guided contrastive learning , author=. IEEE Transactions on Artificial Intelligence , year=

  94. [102]

    Intelligent Systems Conference , pages=

    Level up the deepfake detection: a method to effectively discriminate images generated by gan architectures and diffusion models , author=. Intelligent Systems Conference , pages=. 2024 , organization=

    2024

  95. [103]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Diffforensics: Leveraging diffusion prior to image forgery detection and localization , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  96. [104]

    2023 IEEE International Conference on Image Processing (ICIP) , pages=

    Artifact: A large-scale dataset with artificial and factual images for generalizable and robust synthetic image detection , author=. 2023 IEEE International Conference on Image Processing (ICIP) , pages=. 2023 , organization=

    2023

  97. [105]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Forgery-aware adaptive transformer for generalizable synthetic image detection , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  98. [106]

    arXiv preprint arXiv:2307.06272 , year=

    Exposing the fake: Effective diffusion-generated images detection , author=. arXiv preprint arXiv:2307.06272 , year=

    arXiv

  99. [107]

    arXiv preprint arXiv:2305.12502 , year=

    Watermarking diffusion model , author=. arXiv preprint arXiv:2305.12502 , year=

    arXiv

  100. [108]

    Luo, Yunpeng and Du, Junlong and Yan, Ke and Ding, Shouhong , booktitle=. LaRE\^

  101. [109]

    International Journal of Information Technology , volume=

    An improvised CNN model for fake image detection , author=. International Journal of Information Technology , volume=. 2023 , publisher=

    2023

  102. [110]

    Forty-first International Conference on Machine Learning , year=

    Drct: Diffusion reconstruction contrastive training towards universal detection of diffusion generated images , author=. Forty-first International Conference on Machine Learning , year=

  103. [111]

    IEEE Open Journal of Signal Processing , volume=

    Synthbuster: Towards detection of diffusion model generated images , author=. IEEE Open Journal of Signal Processing , volume=. 2023 , publisher=

    2023

  104. [112]

    arXiv preprint arXiv:2210.14571 , year=

    Towards the detection of diffusion model deepfakes , author=. arXiv preprint arXiv:2210.14571 , year=

    arXiv

  105. [113]

    Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

    Aeroblade: Training-free detection of latent diffusion images using autoencoder reconstruction error , author=. Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

  106. [114]

    Applied Sciences , volume=

    A novel deep learning approach for deepfake image detection , author=. Applied Sciences , volume=. 2022 , publisher=

    2022

  107. [115]

    arXiv preprint arXiv:2303.10137 , year=

    A recipe for watermarking diffusion models , author=. arXiv preprint arXiv:2303.10137 , year=

    arXiv

  108. [116]

    Expert Systems with Applications , volume=

    ReDMark: Framework for residual diffusion watermarking based on deep networks , author=. Expert Systems with Applications , volume=. 2020 , publisher=

    2020

  109. [117]

    arXiv preprint arXiv:2503.10081 , year=

    AdvPaint: Protecting Images from Inpainting Manipulation via Adversarial Attention Disruption , author=. arXiv preprint arXiv:2503.10081 , year=

    arXiv

  110. [118]

    Social & Legal Studies , volume=

    Kaleidoscopic justice: Sexual violence and victim-survivors’ perceptions of justice , author=. Social & Legal Studies , volume=. 2019 , publisher=

    2019

  111. [119]

    Porn Studies , volume=

    Verifying images: Deepfakes, control, and consent , author=. Porn Studies , volume=. 2020 , publisher=

    2020

  112. [120]

    new media & society , volume=

    Drawing from justice theories to support targets of online harassment , author=. new media & society , volume=. 2021 , publisher=

    2021

  113. [121]

    Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

    Anti-dreambooth: Protecting users from personalized text-to-image synthesis , author=. Proceedings of the IEEE/CVF International Conference on Computer Vision , pages=

  114. [122]

    2020 , publisher=

    Design justice: Community-led practices to build the worlds we need , author=. 2020 , publisher=

    2020

  115. [123]

    arXiv preprint arXiv:2112.04359 , year=

    Ethical and social risks of harm from language models , author=. arXiv preprint arXiv:2112.04359 , year=

    arXiv

  116. [124]

    Management science , volume=

    The implied truth effect: Attaching warnings to a subset of fake news headlines increases perceived accuracy of headlines without warnings , author=. Management science , volume=. 2020 , publisher=

    2020

  117. [125]

    Proceedings of the 2024 CHI Conference on Human Factors in Computing Systems , pages=

    Expanding Concepts of Non-Consensual Image-Disclosure Abuse: A Study of NCIDA in Pakistan , author=. Proceedings of the 2024 CHI Conference on Human Factors in Computing Systems , pages=

    2024

  118. [126]

    32nd USENIX Security Symposium (USENIX Security 23) , pages=

    Glaze: Protecting artists from style mimicry by \ Text-to-Image \ models , author=. 32nd USENIX Security Symposium (USENIX Security 23) , pages=

  119. [127]

    arXiv preprint arXiv:2505.13023 , year=

    Anti-Inpainting: A Proactive Defense against Malicious Diffusion-based Inpainters under Unknown Conditions , author=. arXiv preprint arXiv:2505.13023 , year=

    arXiv

  120. [128]

    Proceedings of the ACM on Human-Computer Interaction , volume=

    Do datasets have politics? Disciplinary values in computer vision dataset development , author=. Proceedings of the ACM on Human-Computer Interaction , volume=. 2021 , publisher=

    2021

  121. [129]

    First Monday , year=

    Facial recognition, emotion and race in animated social media , author=. First Monday , year=

  122. [130]

    Privacy as contextual integrity , author=. Wash. L. Rev. , volume=. 2004 , publisher=

    2004

  123. [131]

    arXiv preprint arXiv:2512.05707 , year=

    Evaluating Concept Filtering Defenses against Child Sexual Abuse Material Generation by Text-to-Image Models , author=. arXiv preprint arXiv:2512.05707 , year=

    arXiv

  124. [132]

    28th USENIX Security Symposium (USENIX Security 19) , pages=

    Clinical computer security for victims of intimate partner violence , author=. 28th USENIX Security Symposium (USENIX Security 19) , pages=

  125. [133]

    2018 IEEE Symposium on Security and Privacy (SP) , pages=

    The spyware used in intimate partner violence , author=. 2018 IEEE Symposium on Security and Privacy (SP) , pages=. 2018 , organization=

    2018

  126. [134]

    The New York Times , author =

    Teen. The New York Times , author =. 2024 , keywords =

    2024

  127. [135]

    2026 , note =

    C2PA Technical Specification, Version 2.3 , author =. 2026 , note =

    2026

  128. [136]

    2024 , month =

    New Decision Addresses Meta’s Rules on Non-Consensual Deepfake Intimate Images , author =. 2024 , month =

    2024

  129. [137]

    Healthcare , volume=

    Honor killings in the Eastern Mediterranean region: A narrative review , author=. Healthcare , volume=. 2022 , organization=

    2022

  130. [138]

    Social Sciences & Humanities Open , volume =

    Social, Legal, and Ethical Implications of. Social Sciences & Humanities Open , volume =. doi:10.1016/j.ssaho.2025.101882 , keywords =

    2025

  131. [139]

    Video on Demand: What Deepfakes Do and How They Harm , shorttitle =

    Harris, Keith Raymond , year = 2021, month = dec, journal =. Video on Demand: What Deepfakes Do and How They Harm , shorttitle =. doi:10.1007/s11229-021-03379-y , urldate =

    2021 doi

  132. [140]

    Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

    Image-to-image translation with conditional adversarial networks , author=. Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

  133. [141]

    2026 , month =

    Kat Tenbarge , title =. 2026 , month =

    2026

  134. [142]

    arXiv preprint arXiv:2311.09227 , year=

    Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectives , author=. arXiv preprint arXiv:2311.09227 , year=

    arXiv

  135. [143]

    Proceedings of the 2023 ACM conference on fairness, accountability, and transparency , pages=

    The gradient of generative AI release: Methods and considerations , author=. Proceedings of the 2023 ACM conference on fairness, accountability, and transparency , pages=

    2023

  136. [144]

    Advances in neural information processing systems , volume=

    Laion-5b: An open large-scale dataset for training next generation image-text models , author=. Advances in neural information processing systems , volume=

  137. [145]

    International conference on machine learning , pages=

    Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples , author=. International conference on machine learning , pages=. 2018 , organization=

    2018

  138. [146]

    arXiv preprint arXiv:1412.6572 , year=

    Explaining and harnessing adversarial examples , author=. arXiv preprint arXiv:1412.6572 , year=

    arXiv

  139. [147]

    2024 , month = nov, howpublished =

    Introducing. 2024 , month = nov, howpublished =

    2024

  140. [148]

    Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

    High-resolution image synthesis and semantic manipulation with conditional gans , author=. Proceedings of the IEEE conference on computer vision and pattern recognition , pages=

  141. [149]

    2023 State of Deepfakes , author =

    2023

  142. [150]

    Bouchaud, Paul , year = 2026, month = jan, institution =. Grok

    2026

  143. [151]

    Universal Declaration of Human Rights , author =

  144. [152]

    Sexual Justice: Supporting Victims, Ensuring Due Process, and Resisting the Conservative Backlash , shorttitle =

    Brodsky, Alexandra , year = 2022, edition =. Sexual Justice: Supporting Victims, Ensuring Due Process, and Resisting the Conservative Backlash , shorttitle =

    2022

  145. [153]

    , year = 2022, month = jul, journal =

    Lucas, Kweilin T. , year = 2022, month = jul, journal =. Deepfakes and. doi:10.1080/15564886.2022.2036656 , urldate =

    2022

  146. [154]

    Beyond Survival: Strategies and Stories from the Transformative Justice Movement , shorttitle =

Pith tools

Reviewed August 2, 2026 · model on record in the stance chip above.