Live data from Hacker News

Adversarial design printed on a shirt to fool object recognition algorithms

vice.com

61–70 of 76 posts

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#61
post #30

This t-shirt defeated 2 CV model, R-CNN and YOLOv2. We need better deployed testing suites that can test an adversarial model against many popular classifiers, not just 2. Even so, the paper itsef shows tht their tshirt doesn't make the wearer undetectable, only partially-undetectable. A security system won't ignore you just because it only saw you 10% of the time you were present (unless it's an Uber self-driving ca…

In a world of click-bait "invisible to AI" is the same as defeating two models most of the time.

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#62
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I can't really see a way for AI cameras to get around properly applied facepaint,

In video people move, and 3D information can be recovered unless their faces are painted with something like Black 2.0. At which point why not just wear a mask?

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#63
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I can't really see a way for AI cameras to get around properly applied facepaint

Make it illegal to use facepaint.

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#64
> No one's going to start carrying cardboard patches around

Uhhhh... why not? You can put them on hats, backpacks, arm patches, or a lot of things. I get that they are suggesting it would be uncomfortable to have a stiff shirt, but there are easy solutions here.

I'm not trying to undermine the research here (because it is good research) but I think the reporting could be a little better.

As for the research, I wished they had compared it to more accurate models. I think this would greatly help a reader to understand the limitations of the work. YOLO and faster-RCNN are great for "real-time" but don't have the greatest accuracy. They trade accuracy for speed (more accurate models are pretty slow). While I do think YOLO is more similar to what would be used in a real life setting, it would be great to know how the design works for more accurate models (this wouldn't require significantly more work either, since you're just testing against pretrained models). If the researchers stumble across this comment I would love to know if you actually did this and what the results were (or if you see this comment and try it against a more accurate model). (I do also want to say to the researchers that I like this work and would love to see more)

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#65
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I don't think it's too far fetched to imagine a future where camo facepaint becomes fashionable enough to be widespread

A lot of those masks people in China wear they refer to as privacy masks (though this seems more an auxiliary usage -- especially in HK -- where the primary use is for filtering air). So I'd say there is evidence of such styles already becoming fashionable.

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#66
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I can't really see a way for AI cameras to get around properly applied facepaint Make it illegal to use facepaint.

> Make it illegal to use facepaint.

How do you distinguish this from makeup?

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#67

Earlier quoted context omitted.

> I can't really see a way for AI cameras to get around properly applied facepaint Make it illegal to use facepaint.

> Make it illegal to use facepaint. How do you distinguish this from makeup?

You're not thinking totalitarian enough: send cops to intercept unrecognizables, wipe their face till the face recognition and mandatory ID match.

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#68
post #62
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I can't really see a way for AI cameras to get around properly applied facepaint, In video people move, and 3D information can be recovered unless their faces are painted with something like Black 2.0. At which point why not just wear a mask?

Can a person's gait be used as identifying information?

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#69
post #62

Earlier quoted context omitted.

> I can't really see a way for AI cameras to get around properly applied facepaint, In video people move, and 3D information can be recovered unless their faces are painted with something like Black 2.0. At which point why not just wear a mask?

Can a person's gait be used as identifying information?

Yes, and the 'rock in the shoe' model has been trained against as well. Good luck.
Post reply on HN