Black-box attacks using specially crafted glasses that can mess up the facial recognition software already exist, leading to invisibility and/or misclassificati

Black-box attacks using specially crafted glasses that can mess up the facial recognition software already exist, leading to invisibility and/or misclassification. https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf https://www.cs.cmu.edu/~sbhagava/papers/face-rec-ccs16.pdf "In this work, we show how to perform invisibility attacks while attempting to maintain plausible deniability through the use of facial accessories. We defer the examination of the physical realizability of these attacks to future work." "In this paper, we demonstrated techniques for generating accessories in the form of eyeglass frames that, when printed and worn, can effectively fool state-of-the-art face-recognition systems."