Categories
Advice and Guidance

A short experiment in defeating a ChatGPT detector

A close up on hands typing on a laptop.

In our webinar before Christmas, we suggested that “A war between AI plagiarism detection software and generative AI won’t help anyone

We want to share a quick example that shows why this might be the case.

For this experiment, we are using GPTZeroX, which has recently been updated. Our aim isn’t to call out a particular product but instead to give a flavour of the battle that’s to come if we rely on AI writing detectors.

Let’s start by generating some text. We’ll keep it short for this example:

Artificial Intelligence (AI) has the potential to revolutionize the field of education by providing personalized learning experiences, improving teaching efficiency, and enabling access to quality education for all. AI algorithms can analyze student data to provide customized learning paths, adapt to individual learning styles, and provide instant feedback to students. AI-powered virtual tutors can provide round-the-clock assistance and address student queries in real-time. Additionally, AI-powered tools can help teachers with administrative tasks, freeing up time for more meaningful interactions with students. However, it's crucial to ensure ethical use of AI in education and address potential biases in the technology to ensure equitable access to education for all.

I expect GPTZero to pick this up, and it does:

text likely to be written entirely by AI

So how can we fool it?  GPTZero uses perplexity which it describes as a measurement of the randomness of the text, so can we change this?

Let’s try a really simple approach and tell ChatGPT to use the word ‘the’ less, as this is the most common word in the English language.  This should increase the randomness.

GPTZero AI Plagiarism. Accuractly.

And let’s feed that back into GPTZero:
AI is likely to written entirely by humanAnd there we go – it’s now apparently entirely written by a human.

We aren’t saying AI detectors will always be so easily defeated, but you can see the cycle we could potentially be heading for.  The AI detection providers would fix workarounds as they become public, and then armies of people would look at the next ‘hack’ to defeat it, and so the cycle would continue.

So we think it’s far better to engage in discussions with staff and students about assessment design rather than join the AI plagiarism detection war.

(Update 1 Feb: This is a fast-moving space! OpenAI has just released its own detector, which has a very low level of reliability.  Initial tests show very similar methods works.  OpenAI’s model is different – it’s trained on text rather than measuring attributes about the text so the approach we use to fool it is different.  Initial tests show introducing spelling mistakes, adding more ‘human’ adjectives and so on fool it – things that move it further away from text that was likely in the training set).


Find out more by visiting our Artificial Intelligence page to view publications and resources, join us for events and discover what AI has to offer through our range of interactive online demos.

For regular updates from the team sign up to our mailing list.

Get in touch with the team directly at AI@jisc.ac.uk

By Michael Webb

I colead our AI team. We support the responsible and effective adoption of artificial intelligence across the tertiary education sector, through a range of pilots, advice, guidance, and community support activities. Before joining Jisc I worked in the University sector, leading IT and educational technology services. Since joining Jisc, I have worked on a wide range of projects, including leading the development of our learning analytics service.

2 replies on “A short experiment in defeating a ChatGPT detector”

Be honest, was this whole article written in AI? But seriously, great little article and experiment. I think it’s time to look at assessment and the types of questions we use to see if learning outcomes have been achieved. If you did want to use essays for assessment couldn’t you just use a Digital Assessment platform like Inspera with a lockdown browser and a time limit?

Leave a Reply

Your email address will not be published. Required fields are marked *