Live data from Hacker News

Adversarial design printed on a shirt to fool object recognition algorithms

vice.com

71–76 of 76 posts

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#73
post #54

Earlier quoted context omitted.

As I understand it, adversarial designs generally work on one specific recognition system. So working around this attack would be very achievable with three or more recognition systems and a consensus check. This particular paper is based around attacking YOLOv2.

I think these types of adversarial attacks are even easier to foil than that because they're specific to one particular set of weights . Even really really small changes in the training data or model could invalidate the attack if I understand correctly.

I know there has been work in generating adversarial images that work against multiple models. That kind of thing is probably only going to get better, to say nothing of particular sets of weights in a single model.

Re: Adversarial design printed on a shirt to fool object recognition algorithms

#76
post #60

The joke about Juggalo facepaint is both true and funny but I think there is some actual merit to that idea. Camo clothing (and I don't mean the kind you see everyone wearing at rural WalMartss) goes in and out of fashion every couple years. Military-style jackets, boots, and caps (think of a stereotypical anarchist style) are also perennially in style with certain crowds. I don't think it's too far fetched to imagin…

> I don't think it's too far fetched to imagine a future where camo facepaint becomes fashionable enough to be widespread A lot of those masks people in China wear they refer to as privacy masks (though this seems more an auxiliary usage -- especially in HK -- where the primary use is for filtering air). So I'd say there is evidence of such styles already becoming fashionable.

In Japan the stereotypical get-up a bank robber would wear isn't a ski mask but a medical mask with sunglasses and baseball cap.
Post reply on HN