Big brother will not keep track: how in the world they learned to deceive face recognition systems


</ img>

Protests in Hong Kong against the extradition law to China received widespread media coverage far beyond

region.The media's attention was also drawn to the topic of protecting protesters against facial recognition systems, which are crammed into one of the most technologically advanced cities in Asia. There is demand &#8211; there will be suggestions. Startups and well-wishers around the world have presented various solutions that confuse algorithms. Editorialggstudied the issue and talks about several interesting ways to deceive algorithms.

Not only Hong Kong, not only protests

This summer, San Francisco authorities adopteda law that banned the use of facial recognition systems in the city. Other US cities are also considering such a solution. It was adopted at the state level in October. But the ban only applies to small police body cameras. And it works as long as the technology &#8211; of dubious quality. This way the law protects people from false accusations. Private companies can continue to use such systems for their own purposes.

In developed countries of the world, not only the state andbusiness, but also private security companies are introducing cameras with artificial intelligence. But facial recognition systems &#8211; is no longer uncommon even in not the most economically developed countries. For example, they have been installed on the streets of Moscow and St. Petersburg for a couple of years now, and in Kyiv the test mode was announced in February of this year.

As for business, technology is also herehas taken root a long time ago. You've probably heard about Amazon Go stores, as well as Ring smart calls. But, for example, even in the Russian CRM Bitrix24, which is much closer to our market than Amazon, automatic tracking and facial recognition in the store appeared three years ago. In this way, buyers can not only be counted, but also found on VKontakte, and added to CRM without their knowledge or consent! I went into the store to have a look &#8211; It's my own fault.

Face Recognition Algorithms for CommercialMicrosoft, Google, Amazon and others have use. And they are gradually becoming part of business and Ukrainian retail. And what about retail in developed countries.

So if the protesters in Hong Kong systemfacial recognition is already threatened with prison and liability for participation in protests, then ordinary people in everyday life &#8211; at least by advertising attacks offline and online.

Grandfather Methods

Gizmodo Resource Starts To Sound Anxiety Aboutface recognition systems that the FBI used back in 2014. The resource made a selection of remedies that were available at that time. Despite the years, they can still be found in current recommendations.

For example, Japan National Institutecomputer scientists developed glasses with LED lamps, which seem to curtain the face from recognition systems, highlighting the eyes and nose. They are almost invisible to the human eye, developers say. A person becomes invisible to the camera.

The next option &#8211; 3D printed silicone mask. The camera, seeing the face, recognizes the person. But it will only be someone else. Pushkin, is that you?


</ img>

Ready-made URME Surveillance masks with the face of Leonardo Selvaggio from Chicago will cost $ 200. You can print your own on a regular printer made of paper for free.


</ img>

Finally, the CV art method is still relevant.Dazzle, which was developed several years ago. The bottom line is to hide the true features of the face behind art that is not characteristic of the appearance of a person in those areas that are important for recognition. Beauty bloggers sometimes go further and shoot entire videos with hairstyles and makeup that save face recognition algorithms. But all this is improvisation on the same topic.


</ img>


</ img>


</ img>


</ img>

 


 


 


 


 

 

Today the method lives and develops.It is the basis of the HyperFace project, introduced in 2017. HyperFace does not change the face, but changes the objects around it so that they look like the face, thereby moving the algorithms away from the real person. Image of prototypes &#8211; below. My understanding is that this is an item of clothing that confuses the algorithms by showing too many faces.


</ img>

In the same direction, a student from the Netherlands, Zan Vickers, who created this headdress, was moving.


</ img>

Almost high technology

Protesters in Hong Kong were at one time convincedthat CCTV systems can be blinded by laser pointers. Demand for the product increased, but the effectiveness turned out to be imaginary. Umbrellas, balaclavas, medical masks and baseball caps did not help &#8211; they leave too much of the face visible. So protesters turned to technology.

This is a projector that is mounted on the forehead and transmits another person to the person’s face. The technology was developed a couple of years ago by the Chinese engineer Jin-Tsai Liu.


</ img>

The solution with glasses and diodes also received itscontinuation &#8211; in the form of a gadget with infrared sensors that can be attached to the visor of a cap. Ironically, Alibaba invested in the development. It prevents infrared cameras from correctly counting points on the face. A baseball cap like the one in the photo below (called Justice Cap, by the way), for example, costs only $15.


</ img>

Dr. Isao Echizen of Japan NationalInstitute of Informatics for a couple of years working on the project Privacy Visitor. These are glasses consisting of correctly placed reflective lenses that prevent autofocus cameras from focusing on the face, as they scatter glare in different directions. True, the creator himself admits that in 90% of cases, cameras of a smartphone with a recognition system bypass the protection of glasses. But in them you can walk around the city and even ride a bicycle without attracting the attention of others, unlike other means of protection!


</ img>

About a month ago, Business Insider dida selection of protection against face recognition cameras. And you know what? It is impossible to hide from cameras and not look suspicious. For example, this mask, created by Dutch student Jeep van Levenshtein, protects its wearer from all sides, but looks the most freakish.


</ img>


</ img>

 


 


 

 

Horrible power

In July of this year, the Polish design studio NOMAshowed jewelry for the face, which does not allow to recognize a person. This is a brass mask with reflective elements on the cheeks and forehead. The accessory is worn like glasses. And although for a person the face remains completely open and recognizable, recognition algorithms such a decoration are confusing.


</ img>

Ironically, face jewelry has become one of the fashion trends this year.

But that’s not all that the beauty industry can do.offer privacy fighters. Changes in skin color or, say, age, also make a person unrecognizable for cameras. There are instructions on the Internet on how to age your face with makeup so that the camera does not cope with recognition. For example, abc.net.au offers this option.


</ img>

In the dry residue

Special project

Artificial Intelligence on TVs: How It Works

So far, all decisions directed against systemsfacial recognition, look... strange to say the least and attract unnecessary attention. In the future, perhaps simpler and more attractive inventions will appear. But biometrics does not stand still &#8211; the future lies in defining a person according to several parameters, where appearance &#8211; this is what is easiest to change. For example, the Chinese company Watrix demonstrated technology for recognizing a person by gait in 2017. Behavioral biometrics have already found application in financial services, even in our country. And it is much more difficult to deceive her.