4 ms·

I pasted a screenshot of the default text ("GHOST FONT") into ChatGPT 5.6 Sol, told it to read it, and without further instruction it chewed on it for awhile be

by ssl-3 3mo ago

I pasted a screenshot of the default text ("GHOST FONT") into ChatGPT 5.6 Sol, told it to read it, and without further instruction it chewed on it for awhile before coming back with: WHAT HAPPENS IN VEGAS STAYS IN VEGAS

stavros 3mo ago
What did you expect from a screenshot of obvious noise? The only thing that makes the text readable is the motion. EDIT: On second look, the static screenshot does say "WRITTEN IN GHOST FONT".
- deleted 3mo ago
  [deleted]
- ssl-3 3mo ago
  It was an experiment. I didn't go into it with an expectation, or a hypothesis. The experiment was very low effort, and had very low cost, and it was the loose equivalent of throwing some shit at the wall to see if any of it sticks. The result was my own amusement. This result wasn't any more unexpected than any other result would have been. What did you expect from a screenshot of obvious noise, yourself?
nextaccountic 3mo ago
> a screenshot The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything Then, they add a hidden message to each frame just so that the agent report something and stop trying (because if the agent tried to correlate between the frames, they could discover the trick) But if you pass just a frame, there is no message. Just the noise plus the decoy
- stabbles 3mo ago
  If you take a frame you see it's neither random nor dots: https://i.imgur.com/CgtyGjl.png https://i.imgur.com/CgtyGjl.png From a single frame you can definitely identify boundaries because the dots are sliding and get truncated.
  - singularity2001 3mo ago
    Exactly. It's a good idea, badly executed.
    - freehorse 3mo ago
      Maybe not so well explained, by picking the default intended text presented to be the same as the decoy text. It took me also some time to realise what was going on, but the execution is fine otherwise. So there are two texts, one decoy (which you can barely see in a single frame but becomes more clear if you average between frames) and an actual text, which disappears in single frames or averaged ones.
    - starcast2026 3mo ago
      Just to add some drama - this feels like a perfect competition between humans & bots!
  - doublerabbit 3mo ago
    "Content not available in your country" - obviously working well.
  - applicative 3mo ago
    They are the boundaries of the decoy, I think. I can sort of make the decoy out in a screenshot.
  - Lockal 3mo ago
    Exactly! This it how isolated hairline strokes look for a bigger image: https://imgur.com/a/UqBdRKU https://imgur.com/a/UqBdRKU Just a single frame (any frame). After that any modern LLM can read it (if not - single dilate step helps). Funny enough, Ghost Font is a font that machine can read much better than human.
plastic-enjoyer 3mo ago
> I posted a screenshot of static white noise to AI HackerNews never disappoints

by ssl-3 3mo ago

stavros 3mo ago

What did you expect from a screenshot of obvious noise? The only thing that makes the text readable is the motion. EDIT: On second look, the static screenshot does say "WRITTEN IN GHOST FONT".

deleted 3mo ago
[deleted]
ssl-3 3mo ago
It was an experiment. I didn't go into it with an expectation, or a hypothesis. The experiment was very low effort, and had very low cost, and it was the loose equivalent of throwing some shit at the wall to see if any of it sticks. The result was my own amusement. This result wasn't any more unexpected than any other result would have been. What did you expect from a screenshot of obvious noise, yourself?

nextaccountic 3mo ago

> a screenshot The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything Then, they add a hidden message to each frame just so that the agent report something and stop trying (because if the agent tried to correlate between the frames, they could discover the trick) But if you pass just a frame, there is no message. Just the noise plus the decoy

stabbles 3mo ago
If you take a frame you see it's neither random nor dots: https://i.imgur.com/CgtyGjl.png https://i.imgur.com/CgtyGjl.png From a single frame you can definitely identify boundaries because the dots are sliding and get truncated.
- singularity2001 3mo ago
  Exactly. It's a good idea, badly executed.
  - freehorse 3mo ago
    Maybe not so well explained, by picking the default intended text presented to be the same as the decoy text. It took me also some time to realise what was going on, but the execution is fine otherwise. So there are two texts, one decoy (which you can barely see in a single frame but becomes more clear if you average between frames) and an actual text, which disappears in single frames or averaged ones.
  - starcast2026 3mo ago
    Just to add some drama - this feels like a perfect competition between humans & bots!
- doublerabbit 3mo ago
  "Content not available in your country" - obviously working well.
- applicative 3mo ago
  They are the boundaries of the decoy, I think. I can sort of make the decoy out in a screenshot.
- Lockal 3mo ago
  Exactly! This it how isolated hairline strokes look for a bigger image: https://imgur.com/a/UqBdRKU https://imgur.com/a/UqBdRKU Just a single frame (any frame). After that any modern LLM can read it (if not - single dilate step helps). Funny enough, Ghost Font is a font that machine can read much better than human.

plastic-enjoyer 3mo ago

> I posted a screenshot of static white noise to AI HackerNews never disappoints