Live data from Hacker News

Ghost Font: A font that humans can read but AI cannot

mixfont.com

141–150 of 188 posts

Re: Ghost Font: A font that humans can read but AI cannot

#141
What's maybe more useful is a practice already common in PDFs like mortgage docs and credit reports.

You just use a font that maps characters to random other ones.

So the actual source content of the doc is gibberish, but visually it looks like the correct words.

Of course a vision model could decipher it by rendering the doc, but maybe that's where this technology comes in, if you built a custom PDF renderer.

Then you'd have both obfuscated source content and rendered output.

Re: Ghost Font: A font that humans can read but AI cannot

#142
We came up with a hacked font a few months back called "Noroboto"[1]. It just lies about its underlying Unicode representation which fools most of the naive ones and is crystal clear to humans. The better harness/model combos will render the text to a picture and OCR that, but many of them fall for the swapped characters. Was kind of hoping to see an extension of that idea here.

https://tritium.legal/blog/noroboto

Re: Ghost Font: A font that humans can read but AI cannot

#143

Earlier quoted context omitted.

> a screenshot The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything Then, they add a hidden message to each frame just so that the agent report something and stop…

If you take a frame you see it's neither random nor dots: https://i.imgur.com/CgtyGjl.png From a single frame you can definitely identify boundaries because the dots are sliding and get truncated.

Exactly! This it how isolated hairline strokes look for a bigger image: https://imgur.com/a/UqBdRKU

Just a single frame (any frame). After that any modern LLM can read it (if not - single dilate step helps). Funny enough, Ghost Font is a font that machine can read much better than human.

Re: Ghost Font: A font that humans can read but AI cannot

#144

Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message. I can barely read the actual message, and it's about as "readable" to me as the Magic Eye 3D pictures. Actually I think I have a headache from looking at it on a mobile screen. As a research idea it's cool though. But I do wonder if/when AI models will figure out how to…

...are you an LLM? I can't read the decoy message at all.

Re: Ghost Font: A font that humans can read but AI cannot

#145

Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message. I can barely read the actual message, and it's about as "readable" to me as the Magic Eye 3D pictures. Actually I think I have a headache from looking at it on a mobile screen. As a research idea it's cool though. But I do wonder if/when AI models will figure out how to…

> ”Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message.” Wait, what? Seriously? That’s the only text I can see. Am I an AI?

Uh... Yes. Probably.

Re: Ghost Font: A font that humans can read but AI cannot

#147
post #144

Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message. I can barely read the actual message, and it's about as "readable" to me as the Magic Eye 3D pictures. Actually I think I have a headache from looking at it on a mobile screen. As a research idea it's cool though. But I do wonder if/when AI models will figure out how to…

...are you an LLM? I can't read the decoy message at all.

I don't think I am — but I am rather Claude-pilled, and graphics algorithms are right in my wheelhouse.

I look forward to being able to see C-beams glitter in the dark near Tannhäuser Gate.

Re: Ghost Font: A font that humans can read but AI cannot

#148
post #99

GPT-5.6 had no problem seeing the text when giving it a video recording of it. "No problem" as in using temporal analysis with optical flow and vertical-displacement maps to estimate how the image moved, and combine those into a motion map with increased contrast to see the text. I didn't give it any instructions though, just asked it what it said.

I threw it at Fable with the prompt "What does the message say?" and it also figured out without issue. Thought process is interesting https://imgur.com/a/GToXs6W

Good lord, this is funny

Re: Ghost Font: A font that humans can read but AI cannot

#149

Took me a long time to realise that "Written In Ghost Text" wasn't actually the text I was meant to be reading, and that was only the decoy message. I can barely read the actual message, and it's about as "readable" to me as the Magic Eye 3D pictures. Actually I think I have a headache from looking at it on a mobile screen. As a research idea it's cool though. But I do wonder if/when AI models will figure out how to…

Funny, for me it is exactly the opposite: I can read the actual text very easily, but the “Written in Ghost Text” is barely perceptible to the point I would have completely missed it, if it were not for the comment pointing it out here.

Same. If I move the window around, I can perceive the "Written in Ghost Text"... Otherwise, not at all.
Post reply on HN