[gunapologist99]

The answers here seem to establish that some frontier models can read it sometimes, but only after tremendous compute.

That still makes it (well, a future version) potentially useful as a captcha if we hate our users but hate AI more.

[bmicraft]

Every single on of those answers I've seen _says_ they did decode it, but each and every one of them only found the decoy message without even realizing it.

[Measter]

Which is probably a case of the human prompting the AI only being able to see the decoy message, so they think the AI was able to read it because it matches what they can see.