{
  "id": 19874,
  "title": "Open source project fools AI scrapers with poisoned font",
  "url": "https://urgent.news/2026/07/30/open-source-project-fools-ai-scrapers-with-poisoned-font",
  "topic": "world",
  "section": "World",
  "published": "2026-07-30T17:19:23.000Z",
  "source": {
    "name": "The Register Software",
    "slug": "the-register-software",
    "url": "https://www.theregister.com/ai-and-ml/2026/07/30/open-source-project-fools-ai-scrapers-with-poisoned-font/5281303"
  },
  "original_language": "en",
  "account": "A team of creatives and a typography company have teamed up to develop an open-source font, named ShieldFont, designed to thwart AI scrapers from training on website content. ShieldFont works by tricking scrapers into ingesting gibberish text instead of the original content. When viewed on a web page, the content appears normal to human eyes, but the raw HTML contains altered text that confuses scrapers. The goal is to make the text appear sensible but unusual, encouraging scrapers to consider the content as odd but coherent. The creators built ShieldFont using OpenFont family fonts and extend the OpenType font's glyph substitution (GSUB) function to entire words instead of individual letters or characters. The font files are relatively small, around 5 MB for desktop versions and 800 KB for compressed web fonts, making them lightweight. ShieldFont includes three GSUB dictionaries, and users can create their own to prevent reverse-engineering. The primary purpose of ShieldFont is to add cost, friction, and uncertainty to unauthorized mass scraping, rather than completely disabling scrapers. While it is not foolproof and can be defeated through methods like OCR, ShieldFont aims to deter scrapers and protect content from training AI models.",
  "summary": "ShieldFont is available today if you've got copy that needs protecting",
  "key_points": [
    "ShieldFont fools AI scrapers with altered text in HTML.",
    "Font uses OpenType glyph substitution for entire words.",
    "Goal is to deter scrapers, not completely disable them."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}