I was immediately was curious how it would protect against image compression and/or otherwise de-noising these protection pixel changes. Their paper does address this question, and for those that are interested: Even image compression cannot defeat our cloak. We use progressive JPEG [57], reportedly used by Facebook and Twitter, to compress the images in our dataset. The image quality, as standard by Independent JPEG…
How about a 1px Gaussian blur? Haven't read the paper but I had the same thought. Seems way too tenuous.
You don't even have to read the paper, it's in the FAQs:
"Can't you just apply some filter, or compression, or blurring algorithm, or add some noise to the image to destroy image cloaks?"
Short answer: No not really. Long answer: Look at the FAQs :)