How our fight against AI scrapers is forcing us to break the clean, accessible web we spent decades building.
For decades, we built a digital world on a simple promise: clean, structured, and machine-readable data. Every website, layout, and font was optimized for flawless automated parsing.
Today, AI scrapers vacuum up every word, image, and creative spark without consent. Creators find their work swallowed into massive training sets, transformed into automated summaries that bypass their original sites entirely.
This fight isn't new. In 2013, designer Sang Mun created the 'ZXX' typeface—a static, distorted font designed to block corporate OCR scanners. But as AI evolved, those static defenses crumbled.
Out of this defensive panic, computer scientist Eric Lu designed 'Ghost Font' in July 2026. Annoyed by intrusive AI summarization in private messaging, Lu sought a way to communicate that kept machines completely in the dark.
Ghost Font isn't actually a font file like a .ttf or .otf. It is a web-based animation generator. It uses thousands of tiny dots where the letters move in one direction and the background drifts in another.
To the human eye, the text is instantly readable because our brains naturally group moving points into unified shapes. But pause the video, and the letters vanish into static visual noise.
Leading AI models process video by sampling static, individual frames. Since each static frame is just random noise, the AI sees absolutely nothing—unless it reads the faint, decoy text designed to trick its OCR.
The illusion went viral, racking up over 17 million views as a triumph over AI. But the victory was short-lived. Within 72 hours, developers and prompt engineers exposed the limits of this adversarial typography.
Prompt engineer Riley Goodside bypassed the block in under two minutes simply by telling the AI which way the dots were moving. Other testers used 25 lines of Python code to calculate pixel movement, instantly extracting the text.
While Ghost Font failed as an absolute security shield, it exposed a deeper crisis. To protect our content, we are forced to implement computationally heavy 'perceptual patches' that actively degrade our digital spaces.
This defense comes with a tragic human cost. By transforming simple text into heavy, flickering videos, we lock out visually impaired and colorblind users, repeating the frustrating legacy of traditional CAPTCHAs.
If adversarial fonts aren't the answer, how do we protect our work? Creators must rely on robust server-side access controls, updated protocols, and cryptographic signatures rather than visual tricks.
We spent thirty years perfecting clean, lightweight, semantic HTML. Now, to preserve human-only spaces, we are actively breaking our layouts, turning beautiful, searchable code into heavy, inaccessible video streams.
As its creator Eric Lu notes, Ghost Font was never a permanent lock—it is a measuring stick. It shows us how quickly computer vision is evolving, and warns us of the heavy price we might pay to keep the web human.
Discover more curated stories