There are a bunch of papers about adversarial patterns on shirts, glasses frames, make-up, etc. The problem is that the more discreet it is, the more overtuned

There are a bunch of papers about adversarial patterns on shirts, glasses frames, make-up, etc. The problem is that the more discreet it is, the more overtuned to specific models it'll tend to be. If you really want to reliably foil face recognition, you can walk around in a ghillie suit and camo face mask, I suppose.