I pasted a screenshot of the default text ("GHOST FONT") into ChatGPT 5.6 Sol, told it to read it, and without further instruction it chewed on it for awhile before coming back with:
WHAT HAPPENS IN VEGAS
STAYS IN VEGASWhat did you expect from a screenshot of obvious noise? The only thing that makes the text readable is the motion.
EDIT: On second look, the static screenshot does say "WRITTEN IN GHOST FONT".
> I posted a screenshot of static white noise to AI
HackerNews never disappoints
> a screenshot
The text is a video. Every frame contain random dots, so an individual frame by itself doesn't contain the intended message
This "font" exploits the fact that current-gen frontier models will process video one frame at time, but each frame is noise, so by looking at frames in isolation doesn't reveal anything
Then, they add a hidden message to each frame just so that the agent report something and stop trying (because if the agent tried to correlate between the frames, they could discover the trick)
But if you pass just a frame, there is no message. Just the noise plus the decoy