Hi,

I was reading this post about Chinese face recognition papers at ICCV (https://www.reddit.com/r/MachineLearning/comments/dp389c/d_iccv_19_the_state_of_some_ethically/?utm_medium=android_app&utm_source=share) and started wondering whether an adversarial attack on obstructed personal re-identification models would be feasible, how would it be carried out, and whether it would actually make a relevant and useful personal project in the context of today’s power dynamics.

For example, with a GAN approach, one might use the re-identification model as a discriminator and try to train a generator to generate custom overlapping mask patches over one’s face in order to fool the discriminator into misidentifying the person.

What do you guys think?