[jmward01]

Hmmmm... I wonder if there is a caesar cipher font or other substitution cipher fonts out there to actually obfuscate the data. So you use this to display to a user text but the unicode is re-mapped so that a is pointing to unicode g for instance. You remap the text to display correctly but contain massively swapped around unicode. Of course cut and paste would be a killer here but it is a price to pay for poisoning training data I guess.

[olalonde]

I thought that's what it was going to be when I read the submission title. But like the other methods of obfuscation, it only works until the model learns about it.