Big brother will not keep track: how in the world they learned to deceive face recognition systems


</ img>

Hong Kong protests against extradition to China law have been widely reported far beyond

region. Media attention was also drawn to the topic of protecting protesters against face recognition systems, which crammed one of the most technologically advanced cities in Asia. If there is demand, there will be offers. Startups and well-wishers around the world have presented various solutions that confuse algorithms. Editors gg studied the issue and talks about several interesting ways to cheat algorithms.

Not only Hong Kong, not only protests

This summer, San Francisco authorities accepteda law that prohibited the use of face recognition systems in the city. Other US cities are also considering such a solution. In October, he was accepted at the state level. But the ban applies only to small police underbody cameras. And it works as long as the technology is of dubious quality. Thus, the law protects people from false accusations. Private companies can continue to use such systems for their own purposes.

In developed countries, not only the state andbusiness, but also private security companies are introducing cameras with artificial intelligence. But facial recognition systems are no longer uncommon even in the most economically developed countries. For example, they have been installed on the streets of Moscow, in St. Petersburg for a couple of years, and in Kiev they announced a test mode in February this year.

As for business, then technologytook root for a long time. You probably heard about Amazon Go stores, as well as about Ring smart calls. But, for example, even in the Russian CRM Bitrix24, which is much closer to our market than Amazon, automatic tracking and face recognition in the store appeared three years ago. Buyers thus can not only count, but also find in Vkontakte, and without their knowledge and consent add to CRM! I went into the store to take a look - it's my fault.

Face Recognition Algorithms for CommercialMicrosoft, Google, Amazon and others have use. And they are gradually becoming part of business and Ukrainian retail. And what about retail in developed countries.

So if protesters in the Hong Kong systemface recognition today threatens with prison and responsibility for participating in protests, then for ordinary people in ordinary life - at least advertising attacks offline and online.

Grandfather Methods

Gizmodo Resource Starts To Sound Anxiety Aboutface recognition systems that the FBI used back in 2014. The resource made a selection of remedies that were available at that time. Despite the years, they can still be found in current recommendations.

For example, Japan National Institutecomputer scientists developed glasses with LED lamps, which seem to curtain the face from recognition systems, highlighting the eyes and nose. They are almost invisible to the human eye, developers say. A person becomes invisible to the camera.

The next option is a silicone mask printed on a 3D printer. The camera, seeing the face, recognizes the person. But only it will be someone else. Pushkin, you?


</ img>

Ready-made URME Surveillance masks with the face of Leonardo Selvaggio from Chicago will cost $ 200. You can print your own on a regular printer made of paper for free.


</ img>

Finally, the CV art method is still relevant.Dazzle, which was developed several years ago. The bottom line is to hide the true features of the face behind art that is not characteristic of the appearance of a person in those areas that are important for recognition. Beauty bloggers sometimes go further and shoot entire videos with hairstyles and makeup that save face recognition algorithms. But all this is improvisation on the same topic.


</ img>


</ img>


</ img>


</ img>





Today, the method lives and develops. It lies at the heart of the HyperFace project, introduced in 2017. HyperFace does not change the face, but changes the objects around so that they look like a face, thereby taking the algorithms away from the real person. The image of the prototypes is below. As far as I understand, this is an element of clothing that misleads algorithms by showing too many faces.


</ img>

In the same direction, a student from the Netherlands, Zan Vickers, who created this headdress, was moving.


</ img>

Almost high technology

Hong Kong protesters at one time were surethat video surveillance systems can be blinded with laser pointers. Demand for goods has grown, but efficiency has been imaginary. Umbrellas, balaclava, medical masks and baseball caps did not help - they leave too much of the face visible. Therefore, the protesters turned to technology.

This is a projector that is mounted on the forehead and transmits another person to the person’s face. The technology was developed a couple of years ago by the Chinese engineer Jin-Tsai Liu.


</ img>

The solution with glasses and diodes also got itscontinued - in the form of a gadget with infrared sensors, which can be attached to the visor of the cap. Ironically, Alibaba Group invested in the development. It prevents infrared cameras from correctly counting points on the face. A baseball cap as in the photo below (called the Justice Cap, by the way), for example, costs only $ 15.


</ img>

Dr. Isao Echizen of Japan NationalInstitute of Informatics for a couple of years working on the project Privacy Visitor. These are glasses consisting of correctly placed reflective lenses that prevent autofocus cameras from focusing on the face, as they scatter glare in different directions. True, the creator himself admits that in 90% of cases, cameras of a smartphone with a recognition system bypass the protection of glasses. But in them you can walk around the city and even ride a bicycle without attracting the attention of others, unlike other means of protection!


</ img>

About a month ago, Business Insider dida selection of protection against face recognition cameras. And you know what? It is impossible to hide from cameras and not look suspicious. For example, this mask, created by Dutch student Jeep van Levenshtein, protects its wearer from all sides, but looks the most freakish.


</ img>


</ img>



Horrible power

In July of this year, the Polish design studio NOMAshowed jewelry for the face, which does not allow to recognize a person. This is a brass mask with reflective elements on the cheeks and forehead. The accessory is worn like glasses. And although for a person the face remains completely open and recognizable, recognition algorithms such a decoration are confusing.


</ img>

Ironically, face jewelry has become one of the fashion trends this year.

But that’s not all that the beauty industry can do.offer privacy fighters. Changes in skin color or, say, age, also make a person unrecognizable for cameras. There are instructions on the Internet on how to age your face with makeup so that the camera does not cope with recognition. For example, abc.net.au offers this option.


</ img>

In the dry residue

Special project

Artificial Intelligence on TVs: How It Works

So far, all solutions against systemsfacial recognition, look ... strange at least and attract extra attention. In the future, perhaps simpler and more attractive inventions will appear. But biometrics does not stand still - the future lies with the definition of a person according to several parameters, where the appearance is what is easiest to change. For example, the technology for recognizing a person by gait in 2017 was shown by the Chinese company Watrix. Behavioral biometrics have already found application in financial services, even in our country. And tricking her is a lot harder.