# Researcher says Paint embeds remote-issued IDs in local AI images

_Published Monday, August 24, 2026 at 8:07 PM EDT · Security · Latest · Tier 2 — Notable_

![Researcher says Paint embeds remote-issued IDs in local AI images — Primary](https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/social-preview.jpg)

A reverse-engineering report says Microsoft Paint's local image-generation path sends prompts and styles to a remote moderation service, which returns a GUID used as an invisible watermark in generated images. The report says Paint also requests a C2PA manifest and that the manifest's soft-binding value matches the watermark identifier. It says the visible-watermark setting does not govern the invisible watermark, while Microsoft discloses C2PA metadata for AI-generated images.

## Sources

- [xusheng.dev](https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/main/)

---
Canonical: https://techandbusiness.org/newswire/KR7lW3HfF3b0a9qPjSgwIt
Published: 2026-08-25T00:07:59.273Z
Story chronology: 2026-08-24T15:28:04.000Z
Retrieved: 2026-10-26T22:38:40.779Z
Publisher: Tech & Business (techandbusiness.org)