How to be anonymous in the age of surveillance
The article mentions the use of "Juggalo" style face paint to avoid face detection. This type of countermeasure is effective against conventional HOG-SVM type face detectors such as [1], but would be inadvisable for daily use.<p>To deal with more advanced convolutional detectors, consider wearing a hat or clothing with adversarial patches [2], simple patterns that can be printed onto stickers. These patches work by feeding the detector inputs that cause an overwhelming bias toward a particular class (eg. toaster), which drowns out the real signal (eg. human face). Even the first generation of adversarial patches are effective against most detectors deployed as of 2020.<p>[1] <a href="http://dlib.net/face_landmark_detection.py.html" rel="nofollow">http://dlib.net/face_landmark_detection.py.html</a><p>[2] Brown et al. <a href="https://arxiv.org/abs/1712.09665" rel="nofollow">https://arxiv.org/abs/1712.09665</a>