Decoy Font

205 points - today at 4:18 PM

Source

Comments

redlewel today at 8:21 PM
Poor grannies trying to read the price of some book she wants to buy she can't tell if it says $150 or $15.0
OsrsNeedsf2P today at 4:52 PM
Is it useful? No. Does it stop AI from reading it? Also no. But is it cool? Yes, it is very cool.
gilesvangruisen today at 5:59 PM
Sol (high)

"[screenshot] there's a hidden message in this text what is it"

"The hidden message is “HAPPY HUMAN.”

The visible outlines say “SORRY ROBOT,” but if you blur or squint at it, the shading underneath reads “HAPPY HUMAN.”"

Dwedit today at 4:53 PM
This is just level of detail. Gemma E4B reads the sharper text until you resize down to 150x150, then it reads the other text.
deleted today at 8:02 PM
mrweasel today at 5:02 PM
Admittedly I'm a bit salty about LLMs due to they constant attacks on our infrastructure, the damage their doing to peoples minds and the general lack of morals shown by the AI companies, but things like this is rather childish and not really a solution to anything.
shlewis today at 4:56 PM
Not even AI. I think I can write PIL script that will fix the font to be read by any ocr software.
xg15 today at 6:29 PM
I like how, if you hold the phone at a distance, but not as far as intended by the font, your brain sort of mixes letters from both messages.

I was at some point reading SAPPY ROMAN, HARPY ROBAN etc.

Also, viewing the "hidden message" works even better if you hold the screen at an angle, tilted away from you.

fusslo today at 6:10 PM
Maybe the more interesting thing is how far people are going to 'fight' against AI?

Just the fact that people are putting real thought and effort (even if it doesn't last too long...) is worth considering.

On the human side, I'm kinda losing patience proving I'm human. But, I also really like claude being able to access information.

MPSimmons today at 7:55 PM
Also goes the other way, where you use the decoy to give instructions to the AI...
jryan49 today at 7:51 PM
Squinting is surprisingly effective for me for seeing the hidden text. That's really cool!
jjcm today at 6:39 PM
It's been really interesting seeing how LLMs perceive things differently than humans. I'm working on image->html conversion pipelines right now, and there are glaring issues LLMs run into that are obvious for humans. Any subtle gradients get lost, 75 degree angles get converted to 90 degree angles, etc.

This tracks towards what you're seeing with this font - the high frequency details get picked up, but the low frequency ones dont.

voidnullvalue today at 4:54 PM
I generated a skill.md that reads this trivially. What kind of testing are you doing prior to release?

https://gist.github.com/voidnullvalue/620607d3c1773f8e7d83fb...

calebm today at 7:04 PM
noman-land today at 4:45 PM
This seems like it would absolutely wreck the experience for people using screen readers.
BugsJustFindMe today at 7:10 PM
Everyone trying so hard to do something "useful" that they don't recognize when all they've done is make art.

Had this been described as a font that contains two overlapping messages for fun effect, everyone would understand and love it.

Instead, we get this zero-introspection take: "Decoy font is...more difficult for AI to read. If you’re having a hard time seeing the hidden message..."

It's difficult to read period and has zero effect on current SOTA or future AI. But it does show two overlapping messages that can be read in different ways.

jotato today at 6:34 PM
Hermes using gpt-5.5

Prompt: What does the message in this image say? Look closely

Response: DAY DREAM. The outline says “PAY BILLS,” but the hidden darker text says “DAY DREAM.”

digitaltrees today at 7:45 PM
Omg. I needed this in my life.
asah today at 7:09 PM
waddaya know, it worked (on google Gemini/veo)

https://share.gemini.google/1yNVV19wUn46

MinimalAction today at 5:07 PM
Extremely cool. I'm sure they'll eventually be trained to read it, but it's nice until then to trick AI.

I'm mad at AI companies for stealing texts from the entire internet knowledge base and now privatizing those profits in some sense.

samschooler today at 4:42 PM
I think this would be more interesting if the underlying letters were the fake letters as well. For usability it wouldn't be as good as you'd need an encoder, but it'd be cool because an AI with browser access couldn't read the contents either.
deleted today at 5:22 PM
btbuildem today at 5:29 PM
Very neat! I like how the decoy text is less visible to the human eye than the "hidden" message, but it's the other way for the image models. Well done!
paularmstrong today at 4:39 PM
Can someone explain the actual use-case here? I'm struggling with this because it also hides the message from myself, making it incredibly hard to type because I have no confirmation that I hit the right keys on the keyboard.
meerita today at 5:07 PM
I am still figuring out what use case this might have. Why would you want to deceive an AI? Not to mention that, eventually, all AI systems will end up reading it.
yrds96 today at 6:09 PM
Which sufficient tooling calls even OCR can read this, but I think this can be improved
parpfish today at 7:20 PM
"They Live" vibes
ChrisArchitect today at 4:23 PM
hyperhello today at 5:03 PM
How does it know HAPPY HUMAN translates to SORRY ROBOT? Is there a cycle in there or something?
deadbabe today at 5:10 PM
What would be cool would be neon signs using this font, where the front tubes show the decoy message, but then there’s hidden rear tubes that shine light on the wall in a different color showing the actual message.

Something like the DAY DREAM/PAY BILLS would be pretty artistic!

deleted today at 6:21 PM
calebm today at 7:03 PM
Super cool!
josefritzishere today at 6:59 PM
I am struggling to imagine a scenario where this would actually work as intended.
9999px today at 4:45 PM
I screenshot the example and neither Claude nor ChatGPT had any problems reading both phrases. I don't get it.
Svoka today at 6:01 PM
So... CAPTCHA?
deleted today at 5:08 PM
frappuccino_o today at 7:14 PM
[dead]
jaakkoc today at 5:09 PM
Cool. Now do an accessible version.

(/s)