Ghost Font: Text Machines Cannot Read

What it is

An experimental typeface that a person can read and a machine currently cannot. In its own words, "an anti-AI font that can be read by humans but not leading AI models."

The trick is that the letters do not exist in any single frame. Ghost Font encodes text as animated dots whose movement across frames of video assembles the letterforms. Play it and you read it. Pause it, or screenshot it, and the dots "blend together, and it becomes impossible to tell" what it said.

It is made by Eric Lu and hosted by Mixfont, a San Francisco outfit that builds font tools. Free to use as a prototype playground, processed locally with nothing sent to a server, and the code is promised as open source later.

The lineage

Ghost Font is a deliberate sequel to ZXX, the 2013 typeface designed to defeat optical character recognition. ZXX worked in its day. Modern models read it without difficulty.

That is the honest premise here, and the page says so rather than hiding it: the previous generation of this idea has already been beaten. Ghost Font is asking whether a shareable visual message can resist current machine perception without resorting to encryption.

How it resists

- No readable static frame. Frame-by-frame analysis, which is how video usually gets processed, has nothing to grab.

- Decoy messages are embedded to mislead automated analysis that does try.

- Local processing. Nothing goes to a server.

Human vision integrates motion over time and reads the letters without effort. Machine pipelines mostly sample frames and treat each as an image. Ghost Font lives precisely in that gap.

Why it matters

Nightshade poisons the training data. Ghost Font attacks the reading itself, which is a different move and a more radical one. It proposes text that is legible to people and opaque to automated collection, which is close to the definition of a private message in public.

It also inverts a familiar accessibility assumption in a way worth thinking about. Machine-readable is normally the goal, because machine-readable is what makes text searchable, translatable and available to screen readers. Ghost Font makes the opposite choice deliberately. That means it is inaccessible in the ordinary sense too, unreadable to anyone using a screen reader and hostile to anyone who needs static text or has difficulty with motion. Not a criticism of the experiment so much as the cost it is trading away, and worth naming for a neurodivergent readership.

Be realistic about the shelf life. This is an arms race with an asymmetry: the technique is public, the models are retrained continuously, and video understanding is exactly the capability being improved fastest right now. ZXX lasted about a decade. There is no reason to think this lasts longer, and its author is not claiming it will.

The value is in the demonstration rather than the protection. It makes the point that reading is not a neutral act, and that "publicly visible" and "available for ingestion" were only ever the same thing because nobody had built the alternative.

What to try

Open it, type something, and watch it play. Then pause it and try to read your own message. That gap is the entire argument, and it takes about ten seconds to feel.

Key takeaways

- A typeface encoded in motion. Readable playing, meaningless paused or screenshotted.

- Built by Eric Lu at Mixfont, free, processed locally, open source promised.

- The explicit successor to ZXX (2013), which defeated OCR and no longer defeats models.

- Trades away machine readability on purpose, which also means screen readers cannot read it.

- Treat it as a proof of concept about the politics of reading, not as durable protection.