13 ms·
The article mentions the use of "Juggalo" style face paint to avoid face detection. This type of countermeasure is effective against conventional HOG-SVM type f
by lwneal 7y ago
The article mentions the use of "Juggalo" style face paint to avoid face detection. This type of countermeasure is effective against conventional HOG-SVM type face detectors such as [1], but would be inadvisable for daily use.
To deal with more advanced convolutional detectors, consider wearing a hat or clothing with adversarial patches [2], simple patterns that can be printed onto stickers. These patches work by feeding the detector inputs that cause an overwhelming bias toward a particular class (eg. toaster), which drowns out the real signal (eg. human face). Even the first generation of adversarial patches are effective against most detectors deployed as of 2020.
[1] http://dlib.net/face_landmark_detection.py.html http://dlib.net/face_landmark_detection.py.html
[2] Brown et al. https://arxiv.org/abs/1712.09665 https://arxiv.org/abs/1712.09665
- qrbLPHiKpiux 7y agoChange your gait, too. Walk with a cane.
- cgriswald 7y agoYou’d need to change your cane and you might just develop a new gait based on the cane. Maybe learn to walk like a Fremen.
- Mirioron 7y agoPut a little stone in your shoe every once in a while. It'll change your gait for you at the cost of discomfort whenever you walk.
- ethagnawl 7y agoThis tactic is used in _Little Brother_ by Cory Doctorow.
- Andhurati 7y agoI can no longer tell if this is serious advice.
- deleted 7y ago[deleted]
- dredmorbius 7y agoCIA chief of disguise, at 4m35s: https://www.invidio.us/watch?v=JASUsVY5YJ8 https://www.invidio.us/watch?v=JASUsVY5YJ8
- solstice 7y agoMake a cane which changes in length every 3-5 minutes via a small internal piston.
- etaioinshrdlu 7y agoIs there any evidence that mass scale gait analysis is done anywhere? Or is this just paranoia about something that could happen, perhaps in the future? There's no telling what type of data analysis might be possible in the future when applied to historical data.
- chrisco255 7y agoYeah I would imagine that gait analysis is not anywhere near 99.9% accurate.
- DoreenMichele 7y agoFaceblind people routinely use things like gait to recognize people. Some people have very distinctive gaits. When I was married to a soldier, I could pick him out of a sea of men in identical uniforms from the back based on his gait.
- etaioinshrdlu 7y agoI'm slightly face-blind (have trouble remembering faces) and it is not substituted with any other cues. Also bad at names. Really sometimes I will just get super confused and surprised. It is occasionally embarrassing.
- DoreenMichele 7y agoI guess I should have explicitly said "some" faceblind people. It wasn't intended to implicitly suggest "all" by not saying that. Edit: Can people not downvote that comment? I'm pretty confident it wasn't intended to be fighty. It was just a faceblind person wanting to talk about a topic they know personally. Goodness. I'm having a shit day. Blame Me instead. Thank you.
- rbritton 7y agoI think it extends to more than just walking. I snowboard as much as I can during the winter, and I can reliably pick out people I know from extreme distances just by how they ride. The posture, size of the person, and other traits all add together to be a fairly unique signature.
- i_feel_great 7y agoYou can apply for a grant to develop a new gait at https://en.wikipedia.org/wiki/The_Ministry_of_Silly_Walks https://en.wikipedia.org/wiki/The_Ministry_of_Silly_Walks
- distantaidenn 7y agoReminds me of the story "Understand" by Ted Chiang. The protagonist gains super intelligence, and subsequently becomes a person of interest for the feds. One of his tactics to hide his identity was to change his gait and overall demeanor.
- ColanR 7y agoThe article only describes extremely ideal conditions. Use 'in the wild' is still untested, from what I understand. Also, I don't think they provided any code to generate the disguised version of the adversarial patches.
- awb 7y agoWhat happens once the training data includes these adversarial patches? Wouldn't the AI learn to detect them accurately?
- WilTimSon 7y agoI presume new ones could be created based on the newer generation of surveillance tech, which would then become obsolete and the cycle would restart until the tech is sophisticated enough to not be bothered by them. At that point, more complex means would have to be developed.
- AlexCoventry 7y agoYes. In fact, including adversarial examples can be a great regularization technique, which leads to a system learning much more natural representations.
- OrgNet 7y agoSome "cameras" can get an accurate image of your body under your clothes... the TSA uses some of those and it's probably only a matter of time before everyone has access to them. What we need is legislation to limit the use of theses technologies.
- mc3 7y agoRelevant xkcd: https://xkcd.com/1105/ https://xkcd.com/1105/
- leeoniya 7y ago> These patches work by feeding the detector inputs that cause an overwhelming bias toward a particular class (eg. toaster) self driving cars probably wouldn't try too hard to dodge a toaster.
- dredmorbius 7y agoThey will if it's large enough. Cars avoid obstacles. They don't need to identify individuals.
- sizzle 7y agoWhat about straight up covering your whole head e.g. burka, niqab
- BurningFrog 7y agoJuggalo face paint might throw off an algorithm, but it definitely won't make you go about your day unnoticed...
- Romanulus 7y agoIt's like being "burned to recognition"... you totally would be with that face paint.
- Razengan 7y agoOnce always-on AR glasses are ubiquitous, people could attach accessories and frills to them to make sort of neo-tribal-masks.
- lazyjones 7y agoGood luck wearing those and not being tracked though. It's very likely more important to not carry connected technology with you than to cover your face...
- renox 7y agoEasy: don't recharge them ;-)
- raxxorrax 7y agoheh, I mean in the 21st century a corporate logo is already enough for that. But I like the idea.
- Polylactic_acid 7y agoA lot of these CV hacks work only on existing tech. If I a human can still recognize a face then it is almost certain that a better CV tool can. The bulletproof method is to wear clothing that entirely covers your face religious style clothing comes to mind. Total face covering may not be totally socially acceptable in your area but it almost certainly is more acceptable than dazzle makeup. A fairly casual setup that looks pretty acceptable is to be riding/walking with a bike, helmet on, sunglasses on and a bandana covering the face (This is normal to stop bugs).
- 0xBA5ED 7y ago>A lot of these CV hacks work only on existing tech This is true for every countermeasure for every tech. Total covering of the face may be temporarily effective as well. Who knows, maybe it will become impossible to find a bike helmet that isn't connected to the internet with sensors inside it.
- KozmoNau7 7y agoAnd now you know why "burka bans" and other similar bans on face covering garments have been put into law in a lot of countries, including France and Denmark. It was already illegal during protests (smile for the police bodycams!), now it's illegal at all times, unless you can claim a reason the police finds acceptable. When you can track dissidents everywhere they go in the physical world, preemptively shutting down protests becomes so much easier. At least online we have encryption. We don't really have an equivalent in the real world.