Skip to main content
Move the World.
anti-facial recognition

Lead image © Lightfield Studios / Adobe Stock

Facial recognition software continues to proliferate. London's Metropolitan Police recently announced a real-time facial recognition system for its CCTV camera network. China also uses the technology to enhance what may well be the world's most sweeping surveillance state (including to track, locate, and intern Uighar Muslims).

But elsewhere, privacy concerns have led to a growing anti-facial recognition movement. The city of San Francisco took the opposite tack, banning facial recognition use by the police department and other city agencies.

A paper bag would stop this kind of mass surveillance tech. But that's not practical, and masks are often illegal to wear in some places, like banks. So artists and fashion designers have taken to coming up with creative ways to attempt to fool facial recognition. Here's a sampling of the anti-facial recognition privacy collection. But (spoiler alert) most of this stuff wouldn't even fool your iPhone.

CV Dazzle: Anti-facial recognition makeup

This is probably the most well-known method of how to beat facial recognition, featured in The Atlantic and Vogue, among other places. Developed by artist Adam Harvey, CV Dazzle uses dramatic makeup and dynamic hairstyles to fracture the facial features used by some algorithms. In London, a city covered in cameras, the Dazzle Club art collective puts on the makeup and walks routes planned by the artists.

The idea is to provoke conversation about what we expect from our public spaces and life under surveillance, says Anna Hart, co-director of public art collective AiR and a member of Dazzle Club.

"Just kind of gently provoking conversation about what this stuff is, what matters to us in a city," Hart says. "And it all comes from being this strange condition we find ourselves in, exploring hiding by making ourselves more visible."

And visible is right — this stuff is obvious, making it not a great choice for eluding Big Brother.

Dazzle Club members apply facial recognition fooling makeup, based on artist Adam Harvey’s CD Dazzle designs, then take artist-curated walking routes through London. The idea is to promote conversations about public spaces and city life under surveillance. “Just kind of gently provoking conversation about what this stuff is, what matters to us in a city,” says member Anna Hart. “And it all comes from being this strange condition we find ourselves in, exploring hiding by making ourselves more visible.” Photos courtesy of Dazzle Club.

Dazzle Club members apply facial recognition fooling makeup, based on artist Adam Harvey’s CD Dazzle designs, then take artist-curated walking routes through London. The idea is to promote conversations about public spaces and city life under surveillance. “Just kind of gently provoking conversation about what this stuff is, what matters to us in a city,” says member Anna Hart. “And it all comes from being this strange condition we find ourselves in, exploring hiding by making ourselves more visible.” Photos courtesy of Dazzle Club.

HyperFace: How to beat facial recognition by giving them what they want

Created by Hyphen Labs, in collaboration with Adam Harvey, HyperFace uses the opposite approach to CV Dazzle. HyperFace does not trick the algorithm into not seeing a face. Instead, it gives it too many faces.

The patterns on HyperFace anti-facial recognition clothing — which resemble the odd, pixelated shading used in Minecraft — take advantage of the algorithm by showing it many false faces. It reduces the algorithm's confidence in identifying your face by giving it many other potential visages to be confused by.

The LED Ball cap: Anti-facial recognition that goes beyond visible light

Dazzle and printed fabrics won't beat your iPhone. That's because some facial recognition tech uses infrared (not visible) light to recognize you. By projecting an infrared dot mapping grid, these algorithms create a 3D model of your face, like a topographical map made by radar. It doesn't care what color makeup you have, or if there's 2D faces printed on your shirt.

But you can fight infrared with infrared. A team of researchers at Chinese retail giant Alibaba, the Chinese University of Hong Kong, Fudan University, and Indiana University created a ball cap to do just that. The hat projects infrared light in an "adversarial pattern" — an anti-facial recognition design that completely crashes the algorithm.

Similar countermeasures, including Reflectacles, which both bounce back and absorb infrared, are also attempting to fight this much more accurate and complicated facial recognition system.

The Cold Water

The key to determining how to beat facial recognition is what kind of facial recognition you are dealing with. Masks are obviously the best; they hide the face completely. But they are conspicuous — not great if you don't want attention — and illegal to wear in some places. Dazzle makeup and face-camouflaging fashions are useless against infrared. And even the infrared stopping techniques will eventually be challenged by new, different, and better algorithms.

"A lot of them are one off, custom designed, and they fool one specific algorithm," says Kevin Bowyer, a professor of computer science and engineering at Notre Dame. "Used against any other algorithm, they don't fool it at all ... they're not a general solution."

Up Next

Biblical Plagues
Scientists Have Found the Locust Swarm Pheromone
locust swarm
Biblical Plagues
Scientists Have Found the Locust Swarm Pheromone
A locust swarm is flying famine, devouring millions of pounds of crops. Researchers have found the swarming trigger — and perhaps an answer to stopping it.

A locust swarm is flying famine, devouring millions of pounds of crops. Researchers have found the swarming trigger — and perhaps an answer to stopping it.

Catalysts
A School Made for Homeless Children
A School Made for Homeless Children
Watch Now
Catalysts
A School Made for Homeless Children
When a child faces chaos at home, it's impossible to learn. This school is doing whatever it takes to help homeless students and their families create better lives.
Watch Now

When you think of homelessness, you typically don't picture homeless children. However, every year, approximately 2.5 million children experience homelessness. Homeless children can't learn when they don't know where their next meal is coming from, or what is waiting for them at home. They often struggle in public schools where they feel out of place, or unable to keep up because they've missed schooling in the past....

#fixingjustice - Prosecution
Exclusive Interview: How Miriam Krinsky is Leading Us to a Smarter & More...
Miriam Krinsky
#fixingjustice - Prosecution
Exclusive Interview: How Miriam Krinsky is Leading Us to a Smarter & More...
Her organization is bringing together a new generation of prosecutors with a shared vision of fair, compassionate,...

Her organization is bringing together a new generation of prosecutors with a shared vision of fair, compassionate, and responsible criminal justice reform.

#fixingjustice - Policing
Do We Need More Police Or Better Police?
Do We Need More Police Or Better Police?
#fixingjustice - Policing
Do We Need More Police Or Better Police?
American cities are safer than they used to be, but they’re still quite violent, and many economists think they’re...

American cities are safer than they used to be, but they’re still quite violent, and many economists think they’re under-policed. More police could help reduce crime, but only if people trust them to do a good job.

Digital Detectives
The Badass Army Fighting Revenge Porn
The Badass Army Fighting Revenge Porn
Watch Now
Digital Detectives
The Badass Army Fighting Revenge Porn
They’re tracking down people who post revenge porn - and getting justice.
Watch Now

Sharing nude selfies with partners is increasingly common. Too often, though, these images end up posted online without consent. BADASS Army is an army of volunteers getting these images taken down and punishing people who upload them without consent—whether they’re exes posting revenge porn, a hacker releasing them, or someone stealing them through other means. What is Revenge Porn? Revenge porn, also known as...

Dispatches
Mental Training Can Heal Traumatic Brain Injuries (and Reduce Depression)
how to heal the brain
Dispatches
Mental Training Can Heal Traumatic Brain Injuries (and Reduce Depression)
Millions of people are dealing with traumatic head injuries; brain scans show that cognitive training could...

Millions of people are dealing with traumatic head injuries; brain scans show that cognitive training could actually repair damaged neural connections.