Journal article
Hard to Read Is Not Hard to Audit: Why Degrading a Text Image Raises Jailbreak Success in One 2026 Study and Lowers It in Another, Four Accounts That Fit the Same Curve, and the Ablations That Would Separate Them
Rendering text as an image is now proposed as a way to compress long contexts for multimodal language models, and a 2026 study reports that the same move opens a safety hole: when a harmful request is rendered at a resolution low enough to be hard but not impossible to read, attack success rises…