Nicolas M. Müller

Specific audio transformations can fool deepfake detectors while preserving intelligibility, revealing vulnerabilities that can be exploited for targeted retraining.

Watermarking synthetic speech can backfire, causing detectors to misidentify real voices as fakes, with error rates skyrocketing.