Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

usonian

(24,475 posts)
5. There are simple (hopefully) adversarial attacks against facial recognition.
Wed Jul 9, 2025, 05:30 PM
Jul 2025

CV Dazzle and others are found mostly in academic papers.

Here's a simpler reference.

https://www.theregister.com/2025/01/15/make_up_thwart_facial_recognition/

"You can systematically attack the recognition algorithm without necessarily drawing attention to yourself," he said, adding that it provides a way around the Streisand effect – "the moment you seek anonymity, you attract it."


paper: https://arxiv.org/abs/2412.13507

Novel AI Camera Camouflage: Face Cloaking Without Full Disguise
David Noever, Forrest McKee

This study demonstrates a novel approach to facial camouflage that combines targeted cosmetic perturbations and alpha transparency layer manipulation to evade modern facial recognition systems. Unlike previous methods -- such as CV dazzle, adversarial patches, and theatrical disguises -- this work achieves effective obfuscation through subtle modifications to key-point regions, particularly the brow, nose bridge, and jawline. Empirical testing with Haar cascade classifiers and commercial systems like BetaFaceAPI and Microsoft Bing Visual Search reveals that vertical perturbations near dense facial key points significantly disrupt detection without relying on overt disguises. Additionally, leveraging alpha transparency attacks in PNG images creates a dual-layer effect: faces remain visible to human observers but disappear in machine-readable RGB layers, rendering them unidentifiable during reverse image searches. The results highlight the potential for creating scalable, low-visibility facial obfuscation strategies that balance effectiveness and subtlety, opening pathways for defeating surveillance while maintaining plausible anonymity.

Recommendations

2 members have recommended this reply (displayed in chronological order):

Bump irisblue Jul 2025 #1
Not even that.... reACTIONary Jul 2025 #7
Bookmarked, K & R, also remember.. Permanut Jul 2025 #2
Not being sarcastic - just an honest question. What store doesn't have cameras these days? Marie Marie Jul 2025 #8
Point taken, that's a tough one. Permanut Jul 2025 #10
KR&B ms liberty Jul 2025 #3
IR blocking sunglasses can... S/V Loner Jul 2025 #4
There are simple (hopefully) adversarial attacks against facial recognition. usonian Jul 2025 #5
Thanks, usonian! highplainsdem Jul 2025 #6
Excellent -- thanks Hekate Jul 2025 #9
Latest Discussions»General Discussion»Surveillance Self Defense...»Reply #5