Comment by piker
5 days ago
We came up with a hacked font a few months back called "Noroboto"[1]. It just lies about its underlying Unicode representation which fools most of the naive ones and is crystal clear to humans. The better harness/model combos will render the text to a picture and OCR that, but many of them fall for the swapped characters. Was kind of hoping to see an extension of that idea here.
this exact trick is used in some drm schemes (to protect either text or font file, or both), where codepoints are either mixed up or font is converted to vector curves and assigned random indexes