logoalt Hacker News

ssl-3today at 10:33 AM3 repliesview on HN

I pasted a screenshot of the default text ("GHOST FONT") into ChatGPT 5.6 Sol, told it to read it, and without further instruction it chewed on it for awhile before coming back with:

  WHAT HAPPENS IN VEGAS
  STAYS IN VEGAS

Replies

nextaccountictoday at 10:39 AM

> a screenshot

The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message

This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything

Then, they add a hidden message to each frame just so that the agent report something and stop trying (because if the agent tried to correlate between the frames, they could discover the trick)

But if you pass just a frame, there is no message. Just the noise plus the decoy

show 1 reply
stavrostoday at 10:39 AM

What did you expect from a screenshot of obvious noise? The only thing that makes the text readable is the motion.

EDIT: On second look, the static screenshot does say "WRITTEN IN GHOST FONT".

show 1 reply
plastic-enjoyertoday at 11:02 AM

> I posted a screenshot of static white noise to AI

HackerNews never disappoints