Artists have a poisonous new weapon to fight artificial intelligence stealing their work. A new tool called Nightshade corrupts data ingested by AI, disrupting any new images generated by AI tools like Midjourney, Stable Diffusion and DALL-E.
Here, we explain what Nightshade is, the problems it’s trying to solve, the devious minds behind it — and when it will become available.
What is Nightshade?
Nightshade works by altering the pixels of an artist’s work to disrupt the output of any AI which scrapes the poisoned art. Changes are invisible to the naked eye, so the artist can post their pictures online to show off their work to other humans. But when scraped by AI, the altered pixels confuse machine learning algorithms.
The Nightshade team also created Glaze, a tool that allows artists to mask their art style and confuse AI.
“Power asymmetry between AI companies and content owners is ridiculous,” the Glaze team tweeted when announcing Nightshade. “The only thing you can do to avoid being sucked into a model is 1) opt-out lists, and 2) do-not-scrape directives… None of these mechanisms are enforceable, or even verifiable.”
Why create a poison pixel at all?
Artists have been some of the most vocal critics of the current crop of generative artificial intelligence systems, whether that’s text-based systems like OpenAI’s ChatGPT or AI that spits out images and video based on prompts given by the user.
However, these systems can only produce new pictures because they’ve been “trained” on artwork or photography fed into the system. All without asking the artists, photographers and creators who made that original work, and definitely without paying them.
The wind is changing. Companies using AI-generated imagery may be opening themselves up to costly copyright disputes, as artists, writers and creators take legal action against companies like OpenAI, Meta and Stability AI for scraping copyrighted material.
Poison pixels are another option for artists to avoid their work or their style being replicated by AI without consent or compensation.
How do poison pixels work?
The aim here is simple. When a poisoned AI is prompted to generate a picture, the result looks nothing like the real thing.
Take Midjourney. It can instantly generate a realistic picture of a seashell, for example, but after 100 poisoned images are fed into the algorithm, the AI’s attempts start to look a little off.
According to the Nightshade team’s testing, the more images you feed the greater the effect. With 250 or 500 poisoned images introduced into the dataset, an AI prompted to produce a picture of a seashell could only spit out pixelated mush.
The adulterated data spreads in the AI’s system so related terms are also affected. For example, an AI infected with altered dog images would also struggle when prompted to generate an image of a puppy or husky.
What kind of art does Nightshade work on?
Nightshade works on anything from real objects to art styles. That makes it harder for an AI user to create an image in the style of a specific artist, for example.
What do artists think about Nightshade?
As part of our research for this article, we asked artists what they thought about Nightshade. “As creators, Nightshade is one of the strongest tools in our arsenal,” said Digital Illustrator Paloma McClain.
“It empowers artists and all image-makers to reclaim control over their own work. Nightshade grants us protection over our artistic voices while imposing consequences for those who attempt to scrape our work without permission.”
When will Nightshade be available?
Nightshade is yet to be released publicly. However, the University of Chicago team is considering building it into Glaze.
UPDATE: 2 November. We updated this article with a comment from Paloma McClain, a Digital Illustrator.
Richard Trenholm
Richard is a former CNET writer who had a ringside seat at the very first iPhone announcement, but soon found himself steeped in the world of cinema. He's now part of a two-person content agency, Rockstar Copy, and covers technology with a cinematic angle for TechFinitive.com
To provide the best experiences, we and our partners use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us and our partners to process personal data such as browsing behavior or unique IDs on this site and show (non-) personalized ads. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Click below to consent to the above or make granular choices. Your choices will be applied to this site only. You can change your settings at any time, including withdrawing your consent, by using the toggles on the Cookie Policy, or by clicking on the manage consent button at the bottom of the screen.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.