Mixfont creator develops anti-AI Decoy Font to mask text using optical illusion

https://www.mixfont.com/experiments/decoy-font

cross-posted from: https://piefed.world/c/tech/p/1269053/mixfont-creator-develops-anti-ai-decoy-font-to-mask-text-using-optical-illusion

261 points · 37 comments · view on lemmy.world

37 Comments

chazwhiz@lemmy.world · 86 pts · 37d (7 replies)

Well look at that, it works!!

Evildave@lemmy.world · 18 pts · 36d (2 replies)

I've found circle to search on android can read both variations depending on how you select the image

arararagi@ani.social · 3 pts · 35d

Already defeated...

recursivethinking@lemmy.world · 1 pts · 35d

In selection 2, you don't seem to be selecting an image. You're selecting text.

In method 1, it's doing OCR. In method 2, its just reading the raw text data you selected. This is how you can copy text from thing A and Font A, and paste it into thing B with font B (depending on Thing B's paste settings)

Sims@lemmy.ml · 11 pts · 36d

Nice ! I didn't think the font had a serious purpose before I saw your excellent example..

adespoton@lemmy.ca · 9 pts · 37d

Here’s the text my phone extracted from that image:

FUCK THE POUXCE

What does this say?

It says "THIN BLUE LINE."

The word BLUE is split between the second and third lines:

THIN

BLU

ELINE

•••

naticus@lemmy.world · 7 pts · 37d

THIN

BLU

ELINEB*

LodeMike@lemmy.today · 3 pts · 37d

Edge detection moment

FaceDeer@fedia.io · 31 pts · 37d (11 replies)

Good luck to the visually impaired and their screen readers.

chazwhiz@lemmy.world · 35 pts · 37d (9 replies)

Screen readers read text directly, the point of this is to be used in images, which screen readers don’t read anyway.

XLE@piefed.social · 11 pts · 36d (2 replies)

Facedeer is a bad faith troll and AI evangelist, in case anybody is wondering why he's pretending to care about accessibility.

chazwhiz@lemmy.world · 3 pts · 36d (1 reply)

Ahh, that explains the willful ignorance.

FaceDeer@fedia.io · 1 pts · 35d

By "bad faith troll and AI evangelist" XLE means "someone I disagree with about this topic, and therefore that I follow around obsessively accusing of being a troll."

He's really rather sad that way, I notice that every thread I've been in over the past few days with any relation to AI he's been adding this comment to. Guess he noticed me again. At least he's stopped calling me a literal bot or accusing me of being "from Reddit" as if that meant something nefarious.

adespoton@lemmy.ca · 3 pts · 37d (2 replies)

My iPhone reads text from images. I wonder how it’d do with this?

YourAvgMortal@lemmy.world · 5 pts · 36d (1 reply)

You can take a screenshot or save the image directly. My iPhone reads the blurry text without issue, so this may be more related to LLMs in particular, or of the image is compressed before the analysis, the illusion is broken

YourAvgMortal@lemmy.world · 2 pts · 36d

Amazon Rekgnition struggles a little more but it’s still reading the blurry text instead of the lines

FaceDeer@fedia.io · 2 pts · 37d (2 replies)

And if this sort of font became common (and actually kept working) then screen readers never would be able to read these. The point remains that accessibility is being sacrificed for the sake of some kind of general "anti-AI" movement.

CovertOperative@piefed.zip · 3 pts · 35d (1 reply)

There's no way this will become common. Non-visually impaired people don't want to read like that either.

FaceDeer@fedia.io · 1 pts · 35d

Back when generative image AIs first came into general awareness with Dalle-3 and Stable Diffusion and so forth, there was a fad of changing image alt text into deliberately misleading nonsense. Which, of course, was not great for the visually impaired back then either. It was ineffective and short lived, but it's still pretty annoying seeing people proudly declaring their intent to make things deliberately difficult for people who rely on technology for this kind of stuff. So IMO worth pointing out.

OpenHammer6677@lemmy.world · 3 pts · 36d

I'm pretty sure they're not the intended users

Sandbar_Trekker@piefed.zip · 25 pts · 36d (1 reply)

It works at full resolution, but it's a cat and mouse game. If something like this becomes popular, then all that needs to be done is to start passing images through a filter first (blur, lower resolution, etc.), or just train a new vision model that can pick out both the blurred message as well as the decoy message.

Kactus@piefed.world · 16 pts · 36d

The downloadable font is especially vulnerable since each letter is a straight map, so easily trainable

marlowe221@lemmy.world · 24 pts · 36d

Well, I’m glad that we now have a font that makes it look like I’m not wearing my glasses… when I’m wearing my glasses.

just_another_person@lemmy.world · 19 pts · 37d

Clever as fuck

OpenHammer6677@lemmy.world · 19 pts · 36d

Person: does something impressive against AI Comments: it's bad because it's not perfect

EmilieEasie@fedinsfw.app · 18 pts · 37d

This is art

stellargmite@lemmy.world · 9 pts · 36d (1 reply)

Most AI systems work by reading the pixels of an image up close

In the case of text aren't LLM’s reading actual text ?Whats the usecase here ? For any text I dont want to be readable by ai scrapers and such, I need to use this font and render as image(s)?

BakedCatboy@lemmy.ml · 5 pts · 35d

This is not for the case of using text, it's for protecting text in images. The problem with adding invisible text is that LLMs can defeat it by screenshotting and using OCR. This tries to plug that loophole.

Willdrick@lemmy.world · 5 pts · 36d (2 replies)

Top points for effort, but if it's making it hard to read even 2 words.. I'd rather poison/prompt inject via invisible text and not make any humans cross-eyed trying to read that font

BakedCatboy@lemmy.ml · 2 pts · 35d (1 reply)

Invisible text doesn't work for images though, which is what this is specific for. Invisible text is also defeated by taking a screenshot, so if you use this too then you have a chance of defeating both LLMs that read the text as well as those that screenshot and OCR.

Willdrick@lemmy.world · 1 pts · 35d

Well, then glaze or Nightshade for ocr stuff. Point still stands, why make the experience worse for everyone just because it might get used in AI trainimg

GreyEyedGhost@piefed.ca · 4 pts · 37d

I think this is the first step in an arms race between fonts that can't be read by computers and systems to differentiate between obfuscated text.

ComradePenguin@lemmy.ml · 2 pts · 35d

This hurts my eyes, I see both at the same time 🤔

LovableSidekick@lemmy.world · 2 pts · 35d

Works better if you have crappy vision.

Toes@ani.social · 1 pts · 35d

I think i might be a cylon. 🤖

Comrade_Squid@lemmy.ml · 1 pts · 35d

We can't be writing like this, fuck AI. We tailor our language to avoid sounding like it, analysis images to tell if it had been generated and now using fonts to avoid scraping. What a toxic, horrible invention. An invention that freely takes from workers, repackages it, and monetizes it all for a small class of capitalists while depriving the majority of its value created.

Sims@lemmy.ml · 1 pts · 36d

Doesn't work on a dark background ? The decoy text is invisible..