[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-forensic-tool-catches-ai-image-generator-bait-and-switch":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},8039,"new-forensic-tool-catches-ai-image-generator-bait-and-switch","New Forensic Tool Catches AI Image-Generator Bait-and-Switch","Researchers built FARE, a forensic method that flags when an AI image generator has been quietly swapped for a cheaper one after certification.","A new forensic method can tell if an AI image generator has been secretly replaced with a cheaper model after passing certification.\n\nResearchers describe FARE (Forensic Acceptance Region Estimation), built for the increasingly common case where image generators run as closed APIs that customers can query but never inspect. The risk: a provider could get a generator certified, then quietly swap in a cheaper, lower-quality model for actual deployment. FARE is trained on a batch of images from the certified generator, using known forensic artifacts tied to how that specific model produces images, to build a tight \"acceptance region\" around its outputs. From then on, it can judge whether a single generated image still matches the certified model, using nothing but that image.\n\nThat matters because image-generation APIs are effectively black boxes once deployed - certification means little if nobody can verify the model behind it hasn't changed, especially in high-stakes domains where the researchers say the stakes of a silent downgrade are highest. FARE held up even against close substitutions, like swapping in a similar model version or variant, and outperformed existing detection baselines at strict operating points. It also resisted two attack types the researchers tested: ones with exact knowledge of the model and ones limited to the system's accept-or-reject decisions.\n\nIt's a narrow fix for a real trust gap - it won't stop a provider from swapping models, but it does make getting caught a lot easier.","[\"ai\",\"security\",\"image-generation\",\"forensics\"]","2026-09-28T04:00:00.000Z","2026-09-28T06:57:10.692Z","2026-09-28T06:57:17.559Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Drop or hedge the invented examples of 'medical imaging or identity verification' as high-stakes use cases — the source only says 'high-stakes domains' generically, so naming specific sectors reads as fabricated context not supported by the paper.","resolved","ai",[30,32,33,34],"security","image-generation","forensics",[36],{"name":37,"url":38},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.30982",0,{"sections":41},[42,45,48,53,58,63,67,72,77,82,87,92,96,101],{"name":43,"slug":30,"count":44,"latest_published_at":18},"AI",4689,{"name":46,"slug":32,"count":47,"latest_published_at":18},"Security",758,{"name":49,"slug":50,"count":51,"latest_published_at":52},"Policy","policy",399,"2026-09-27T18:39:02.000Z",{"name":54,"slug":55,"count":56,"latest_published_at":57},"Deals","deals",261,"2026-09-27T15:30:35.000Z",{"name":59,"slug":60,"count":61,"latest_published_at":62},"Hardware","hardware",188,"2026-09-27T20:46:36.000Z",{"name":64,"slug":65,"count":66,"latest_published_at":18},"Science","science",148,{"name":68,"slug":69,"count":70,"latest_published_at":71},"Consumer Tech","consumer-tech",135,"2026-09-26T14:30:00.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Software","software",91,"2026-09-25T20:55:00.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":81},"Dev Tools","dev-tools",84,"2026-09-26T04:20:58.000Z",{"name":83,"slug":84,"count":85,"latest_published_at":86},"Startups","startups",76,"2026-09-25T18:33:59.000Z",{"name":88,"slug":89,"count":90,"latest_published_at":91},"Gaming","gaming",48,"2026-09-25T18:35:21.000Z",{"name":93,"slug":94,"count":90,"latest_published_at":95},"General","general","2026-09-26T17:02:42.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Reviews","reviews",30,"2026-09-24T20:07:31.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]