upvote

points

by ssl-38 hours ago |
comments
upvoteby nextaccountic8 hours ago|
next
[-]
> a screenshot

The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message

This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything

Then, they add a hidden message to each frame just so that the agent report something and stop trying (because if the agent tried to correlate between the frames, they could discover the trick)

But if you pass just a frame, there is no message. Just the noise plus the decoy

reply
upvoteby stabbles8 hours ago|
parent|
[-]
If you take a frame you see it's neither random nor dots:

https://i.imgur.com/CgtyGjl.png

From a single frame you can definitely identify boundaries because the dots are sliding and get truncated.

reply
upvoteby applicative4 hours ago|
parent|
next
[-]
They are the boundaries of the decoy, I think. I can sort of make the decoy out in a screenshot.
reply
upvoteby singularity20018 hours ago|
parent|
prev|
next
[-]
Exactly. It's a good idea, badly executed.
reply
upvoteby freehorse3 hours ago|
parent|
next
[-]
Maybe not so well explained, by picking the default intended text presented to be the same as the decoy text. It took me also some time to realise what was going on, but the execution is fine otherwise.

So there are two texts, one decoy (which you can barely see in a single frame but becomes more clear if you average between frames) and an actual text, which disappears in single frames or averaged ones.

reply
upvoteby starcast20262 hours ago|
parent|
prev|
[-]
Just to add some drama - this feels like a perfect competition between humans & bots!
reply
upvoteby doublerabbit6 hours ago|
parent|
prev|
[-]
"Content not available in your country" - obviously working well.
reply
upvoteby stavros8 hours ago|
prev|
next
[-]
What did you expect from a screenshot of obvious noise? The only thing that makes the text readable is the motion.

EDIT: On second look, the static screenshot does say "WRITTEN IN GHOST FONT".

reply
upvoteby 8 hours ago|
parent|
[-]
deleted
reply
upvoteby plastic-enjoyer8 hours ago|
prev|
[-]
> I posted a screenshot of static white noise to AI

HackerNews never disappoints

reply