3 ms·

This may sound stupid but I am curious what would be the effect on facial recognition. Could a person place a sticker on a hat or side of the face, and would th

This may sound stupid but I am curious what would be the effect on facial recognition. Could a person place a sticker on a hat or side of the face, and would that keep confuse the software? or even on the plate of your car?

overlordalex 9y ago
This is a really interesting question, and makes me wonder how robust the patch is to scaling, different lighting, etc. This also reminds me of using makeup and hair to prevent automatic facial recognition. I believe this is the project: https://cvdazzle.com/ https://cvdazzle.com/ > The name is derived from a type of World War I naval camouflage called Dazzle, which used cubist-inspired designs to break apart the visual continuity of a battleship and conceal its orientation and size. Likewise, CV Dazzle uses avant-garde hairstyling and makeup designs to break apart the continuity of a face. Since facial-recognition algorithms rely on the identification and spatial relationship of key facial features, like symmetry and tonal contours, one can block detection by creating an “anti-face”.
- number6 9y ago
  This is why in the cyberpunk genre there are theese crazy hairstyles :D
mholt 9y ago
Yes -- these glasses trick facial recognition software: https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf > In this paper, we focus on facial biometric systems, which are widely used in surveillance and access control. We define and investigate a novel class of attacks: attacks that are physically realizable and inconspicuous, and allow an attacker to evade recognition or impersonate another individual. We develop a systematic method to automatically generate such attacks, which are realized through printing a pair of eyeglass frames. When worn by the attacker whose image is supplied to a state-of-the-art face-recognition algorithm, the eyeglasses allow her to evade being recognized or to impersonate another individual. Our investigation focuses on white-box face-recognition systems, but we also demonstrate how similar techniques can be used in black-box scenarios, as well as to avoid face detection.

overlordalex 9y ago

This is a really interesting question, and makes me wonder how robust the patch is to scaling, different lighting, etc. This also reminds me of using makeup and hair to prevent automatic facial recognition. I believe this is the project: https://cvdazzle.com/ https://cvdazzle.com/ > The name is derived from a type of World War I naval camouflage called Dazzle, which used cubist-inspired designs to break apart the visual continuity of a battleship and conceal its orientation and size. Likewise, CV Dazzle uses avant-garde hairstyling and makeup designs to break apart the continuity of a face. Since facial-recognition algorithms rely on the identification and spatial relationship of key facial features, like symmetry and tonal contours, one can block detection by creating an “anti-face”.

number6 9y ago
This is why in the cyberpunk genre there are theese crazy hairstyles :D

mholt 9y ago

Yes -- these glasses trick facial recognition software: https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf > In this paper, we focus on facial biometric systems, which are widely used in surveillance and access control. We define and investigate a novel class of attacks: attacks that are physically realizable and inconspicuous, and allow an attacker to evade recognition or impersonate another individual. We develop a systematic method to automatically generate such attacks, which are realized through printing a pair of eyeglass frames. When worn by the attacker whose image is supplied to a state-of-the-art face-recognition algorithm, the eyeglasses allow her to evade being recognized or to impersonate another individual. Our investigation focuses on white-box face-recognition systems, but we also demonstrate how similar techniques can be used in black-box scenarios, as well as to avoid face detection.