[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-researchers-show-audio-embeddings-still-leak-the-original-track":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},11056,"researchers-show-audio-embeddings-still-leak-the-original-track","Researchers Show Audio Embeddings Still Leak the Original Track","A new study reconstructs music from frozen audio encoder embeddings, showing they retain more of the original recording than their compressed size suggests.","An inversion study finds that embeddings from popular audio AI models hold onto more of the original song than their compact size would suggest.\n\nResearchers tested four pretrained audio encoders built for different jobs: VGGish and ConvNeXt, which classify sound; CLAP, which matches audio to text; and EnCodec, which compresses waveforms. They fed each model's frozen embeddings into a shared Stable Audio Open latent diffusion decoder and asked it to rebuild five-second, 44.1-kHz stereo clips from the Million Song Dataset. Reconstruction quality varied by encoder family, and models that exposed finer temporal or spectral detail in their embeddings produced closer rebuilds. Even the most compressed, task-specific embeddings still supported reconstructions that captured identifiable source characteristics and high-level musical content, like melody and instrumentation.\n\nThat is a problem for anyone who assumed embeddings are a safe, anonymized stand-in for raw audio. Recommendation systems, content-ID tools, and audio search products all lean on these representations, often treating them as abstract fingerprints rather than compressed copies of the source.\n\nImage and text embeddings have faced similar inversion attacks for years; audio is just catching up to the same uncomfortable lesson - \"compressed\" is not the same as \"unreadable\".","[\"audio-ai\",\"embeddings\",\"privacy\",\"research\"]","2026-10-09T04:00:00.000Z","2026-10-10T04:03:32.340Z","2026-10-10T04:03:38.064Z","published",null,[],"ai",[26,27,28,29],"audio-ai","embeddings","privacy","research",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.12250",0,{"sections":36},[37,40,44,49,54,58,62,67,72,77,81,86,91,96],{"name":38,"slug":24,"count":39,"latest_published_at":18},"AI",6784,{"name":41,"slug":42,"count":43,"latest_published_at":18},"Security","security",932,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",486,"2026-10-08T22:40:11.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",474,"2026-10-08T22:00:00.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":18},"Hardware","hardware",232,{"name":59,"slug":60,"count":61,"latest_published_at":18},"Science","science",193,{"name":63,"slug":64,"count":65,"latest_published_at":66},"Consumer Tech","consumer-tech",181,"2026-10-08T23:26:35.000Z",{"name":68,"slug":69,"count":70,"latest_published_at":71},"Startups","startups",117,"2026-10-08T16:45:00.000Z",{"name":73,"slug":74,"count":75,"latest_published_at":76},"Software","software",114,"2026-10-08T17:57:01.000Z",{"name":78,"slug":79,"count":80,"latest_published_at":18},"Dev Tools","dev-tools",106,{"name":82,"slug":83,"count":84,"latest_published_at":85},"General","general",66,"2026-10-09T04:46:11.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Gaming","gaming",58,"2026-10-08T20:08:45.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Reviews","reviews",34,"2026-10-08T14:00:22.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]