Adversarial Fashion Won't Hide You From AI Cameras—But It Can Confuse Them
Adversarial Fashion Makes a Statement on AI Panopticon
AI-powered cameras now identify faces and license plates on streets worldwide, and a growing backlash has spawned "adversarial fashion": garments printed with geometric patterns designed to disrupt object detection models like YOLO. Cap_able and Urban Privacy already sell such clothing, while noRecognition's Bill Swearingen presented reinforcement-learning-generated patterns at DEF CON. Researchers caution the approach is a speed bump, not an invisibility cloak—one good frame, or aggregated side information, can still identify you.
Even if the camera thinks you're a bear for a few frames, there's a bear walking like you.
- bsenftner
There is a weak component to facial recognition systems that can be exploited to make one invisible to facial recognition, but you stick out like a sore thumb to people. The exploit is to not have a human face, meaning the regular pattern of two eyes centered above a nose and mouth. The exploit is as simple as placing a sticker of a 3rd eye, a 2nd nose, or any other facial feature that is "not human" and you will be invisible to facial recognition. The reason this works is because the initial test for finding faces in images is a weak test, it has to be fast because it has to evaluate every possible rectangle in a video frame. That test is looking for the regular human pattern of a human face, and it that test passes that rectangle get more investigation. Failing that initial test, that rectangle is invisible...
- yndoendo
Anyone else think of "A Scanner Darkly" movie with the interpolate mask that transitions between different faces as the means for better Adversarial Fashion?
Wouldn't one be able to use a hyper real mask to create false evident to frame someone? People are so blind in trusting AI that innocent people are being left in jail were primitive detective work would prove they were not he culprit. [0]
[0] https://www.forbes.com/sites/larsdaniel/2026/04/01/innocent-...
- 0x69420
just like cvdazzle before it, this is bound to do bugger all one model into the future, and in the meantime you'd still really want to stick a pebble in one shoe and wear platforms or something to mess with gait analysis
you should read this less as convincingly adversarial fashion and more fashion inspired by the vague concept of computer-vision-aided surveillance, which, mind you, is still pretty rad, just more vogue material, less ieee spectrum material
- arjie
Face detection on the example images immediately focused on the right part and after that recognition becomes much easier when you crop out the rest. Not convinced. It’s a cool gimmick though. I like the MARPATish look of the black and white one.
The most effective socially acceptable mechanism is a burqa or COVID mask or motorcycle helmet sock.
- krunck
These garments need to function in both visible and infrared environments as cameras use both. Otherwise these are not serious.