logoalt Hacker News

Decoy Font

243 pointsby ray__today at 4:18 PM73 commentsview on HN

Comments

OsrsNeedsf2Ptoday at 4:52 PM

Is it useful? No. Does it stop AI from reading it? Also no. But is it cool? Yes, it is very cool.

show 10 replies
gilesvangruisentoday at 5:59 PM

Sol (high)

"[screenshot] there's a hidden message in this text what is it"

"The hidden message is “HAPPY HUMAN.”

The visible outlines say “SORRY ROBOT,” but if you blur or squint at it, the shading underneath reads “HAPPY HUMAN.”"

show 1 reply
Dwedittoday at 4:53 PM

This is just level of detail. Gemma E4B reads the sharper text until you resize down to 150x150, then it reads the other text.

show 2 replies
redleweltoday at 8:21 PM

Poor grannies trying to read the price of some book she wants to buy she can't tell if it says $150 or $15.0

mrweaseltoday at 5:02 PM

Admittedly I'm a bit salty about LLMs due to they constant attacks on our infrastructure, the damage their doing to peoples minds and the general lack of morals shown by the AI companies, but things like this is rather childish and not really a solution to anything.

show 1 reply
shlewistoday at 4:56 PM

Not even AI. I think I can write PIL script that will fix the font to be read by any ocr software.

xg15today at 6:29 PM

I like how, if you hold the phone at a distance, but not as far as intended by the font, your brain sort of mixes letters from both messages.

I was at some point reading SAPPY ROMAN, HARPY ROBAN etc.

Also, viewing the "hidden message" works even better if you hold the screen at an angle, tilted away from you.

show 1 reply
fusslotoday at 6:10 PM

Maybe the more interesting thing is how far people are going to 'fight' against AI?

Just the fact that people are putting real thought and effort (even if it doesn't last too long...) is worth considering.

On the human side, I'm kinda losing patience proving I'm human. But, I also really like claude being able to access information.

show 1 reply
jjcmtoday at 6:39 PM

It's been really interesting seeing how LLMs perceive things differently than humans. I'm working on image->html conversion pipelines right now, and there are glaring issues LLMs run into that are obvious for humans. Any subtle gradients get lost, 75 degree angles get converted to 90 degree angles, etc.

This tracks towards what you're seeing with this font - the high frequency details get picked up, but the low frequency ones dont.

BugsJustFindMetoday at 7:10 PM

Everyone trying so hard to do something "useful" that they don't recognize when all they've done is make art.

Had this been described as a font that contains two overlapping messages for fun effect, everyone would understand and love it.

Instead, we get this zero-introspection take: "Decoy font is...more difficult for AI to read. If you’re having a hard time seeing the hidden message..."

It's difficult to read period and has zero effect on current SOTA or future AI. But it does show two overlapping messages that can be read in different ways.

show 1 reply
voidnullvaluetoday at 4:54 PM

I generated a skill.md that reads this trivially. What kind of testing are you doing prior to release?

https://gist.github.com/voidnullvalue/620607d3c1773f8e7d83fb...

show 1 reply
jryan49today at 7:51 PM

Squinting is surprisingly effective for me for seeing the hidden text. That's really cool!

noman-landtoday at 4:45 PM

This seems like it would absolutely wreck the experience for people using screen readers.

show 2 replies
MPSimmonstoday at 7:55 PM

Also goes the other way, where you use the decoy to give instructions to the AI...

jotatotoday at 6:34 PM

Hermes using gpt-5.5

Prompt: What does the message in this image say? Look closely

Response: DAY DREAM. The outline says “PAY BILLS,” but the hidden darker text says “DAY DREAM.”

MinimalActiontoday at 5:07 PM

Extremely cool. I'm sure they'll eventually be trained to read it, but it's nice until then to trick AI.

I'm mad at AI companies for stealing texts from the entire internet knowledge base and now privatizing those profits in some sense.

samschoolertoday at 4:42 PM

I think this would be more interesting if the underlying letters were the fake letters as well. For usability it wouldn't be as good as you'd need an encoder, but it'd be cool because an AI with browser access couldn't read the contents either.

show 1 reply
paularmstrongtoday at 4:39 PM

Can someone explain the actual use-case here? I'm struggling with this because it also hides the message from myself, making it incredibly hard to type because I have no confirmation that I hit the right keys on the keyboard.

show 2 replies
btbuildemtoday at 5:29 PM

Very neat! I like how the decoy text is less visible to the human eye than the "hidden" message, but it's the other way for the image models. Well done!

asahtoday at 7:09 PM

waddaya know, it worked (on google Gemini/veo)

https://share.gemini.google/1yNVV19wUn46

meeritatoday at 5:07 PM

I am still figuring out what use case this might have. Why would you want to deceive an AI? Not to mention that, eventually, all AI systems will end up reading it.

digitaltreestoday at 7:45 PM

Omg. I needed this in my life.

yrds96today at 6:09 PM

Which sufficient tooling calls even OCR can read this, but I think this can be improved

ChrisArchitecttoday at 4:23 PM

Related from same:

Ghost Font

https://news.ycombinator.com/item?id=48870381

show 1 reply
parpfishtoday at 7:20 PM

"They Live" vibes

hyperhellotoday at 5:03 PM

How does it know HAPPY HUMAN translates to SORRY ROBOT? Is there a cycle in there or something?

show 1 reply
deadbabetoday at 5:10 PM

What would be cool would be neon signs using this font, where the front tubes show the decoy message, but then there’s hidden rear tubes that shine light on the wall in a different color showing the actual message.

Something like the DAY DREAM/PAY BILLS would be pretty artistic!

calebmtoday at 7:03 PM

Super cool!

josefritzisheretoday at 6:59 PM

I am struggling to imagine a scenario where this would actually work as intended.

9999pxtoday at 4:45 PM

I screenshot the example and neither Claude nor ChatGPT had any problems reading both phrases. I don't get it.

show 2 replies
Svokatoday at 6:01 PM

So... CAPTCHA?

frappuccino_otoday at 7:14 PM

[dead]

jaakkoctoday at 5:09 PM

Cool. Now do an accessible version.

(/s)