Comment

Comment by lwneal

The article mentions the use of "Juggalo" style face paint to avoid face detection. This type of countermeasure is effective against conventional HOG-SVM type face detectors such as [1], but would be inadvisable for daily use.

To deal with more advanced convolutional detectors, consider wearing a hat or clothing with adversarial patches [2], simple patterns that can be printed onto stickers. These patches work by feeding the detector inputs that cause an overwhelming bias toward a particular class (eg. toaster), which drowns out the real signal (eg. human face). Even the first generation of adversarial patches are effective against most detectors deployed as of 2020.

[1] http://dlib.net/face_landmark_detection.py.html

[2] Brown et al. https://arxiv.org/abs/1712.09665

parent lwneal 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton