Live data from Hacker News

Ghost Font: A font that humans can read but AI cannot

mixfont.com

61–70 of 188 posts

Re: Ghost Font: A font that humans can read but AI cannot

#62
post #29

No, it can https://chatgpt.com/share/6a521e9b-c754-83ed-9d8e-cf653894eb...

That's the decoy message :)

Ah, sorry, yes, tried with a very different message. But it can still read when telling that the text is formed by movement. AI doesn't see the world the way we do, so it's understandable. https://chatgpt.com/share/6a522660-929c-83eb-91ff-66b7873420...

Re: Ghost Font: A font that humans can read but AI cannot

#64

Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message. I can barely read the actual message, and it's about as "readable" to me as the Magic Eye 3D pictures. Actually I think I have a headache from looking at it on a mobile screen. As a research idea it's cool though. But I do wonder if/when AI models will figure out how to…

Funny, for me it is exactly the opposite: I can read the actual text very easily, but the “Written in Ghost Text” is barely perceptible to the point I would have completely missed it, if it were not for the comment pointing it out here.

I've just tried it on my large desktop monitor (roughly 1440p, not HiDPI), and I now see "Ghost Font" extremely clearly and can't see the decoy at all. If I scale my browser window to 30% zoom, then I can just see the "Written In Ghost Text" decoy message again.

My phone would have been zooming out the browser window, and making the dots even tinier, but the phone is HiDPI so it would have still preserved the dots. My eyes are middle-aged and probably starting to do the same kind of median-blur effect that models do when they resize an image. That's my current guess for why I can see the decoy more clearly on mobile.

If that's the case, then this trick will stop working as vision models approach pixel-perfect vision, instead of the current resizing that they do. Pretty cool as steganography though.

Re: Ghost Font: A font that humans can read but AI cannot

#65

The answers here seem to establish that some frontier models can read it sometimes, but only after tremendous compute. That still makes it (well, a future version) potentially useful as a captcha if we hate our users but hate AI more.

Every single on of those answers I've seen _says_ they did decode it, but each and every one of them only found the decoy message without even realizing it.

Re: Ghost Font: A font that humans can read but AI cannot

#66
post #10

Related work (all involve noise and flickering images, photosensitive eyes/brains beware): - "This game disappears if you pause it": https://youtu.be/Bg3RAI8uyVw - "Illusion: If You Pause, The Image Will Disappear": https://youtu.be/ZqGfb_Vlrig

it's a very old idea. I first saw this on https://www.squidi.net/three/entry.php?id=56

Re: Ghost Font: A font that humans can read but AI cannot

#67

Earlier quoted context omitted.

> a screenshot The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything Then, they add a hidden message to each frame just so that the agent report something and stop…

If you take a frame you see it's neither random nor dots: https://i.imgur.com/CgtyGjl.png From a single frame you can definitely identify boundaries because the dots are sliding and get truncated.

"Content not available in your country" - obviously working well.

Re: Ghost Font: A font that humans can read but AI cannot

#68
post #57

Earlier quoted context omitted.

That is not the message. Did you read the article.

I downloaded the message video, renamed it to test.mp4 Still could read https://chatgpt.com/share/6a5221f0-e3fc-83eb-bc15-74420002b6...

That's not the message
Post reply on HN