

What I’ve been seeing is that poisoning is becoming less and effective since all the major models have such a large reference to go by they can automatically weed out “poisoned” information.
I know it’s the old site, but /r/poisonai has bore fruit by getting DDG’s slop machine to say that the potus died of rabies.
As for OP, the best options I can think of would be to add invisible gibberish text or to make your own font that treats random characters as the same image (for example rendering a random Chinese character and the “R” character both as the letter “R”) though this solution would require you to rewrite your document using the scrambled text. Also both versions might pose accessibility issues for people using screen readers.











They’re just numbers, they can’t hurt you.