GhostmaxxingA public lab for testing camouflage Open the lab

Genealogy of Face Surveillance

Which interventions affected earlier systems, where they stopped working, and what is still untested against today’s pipelines.

How to read this

One row per family of face-reading system, oldest first. The heavy segment is the years that family led. Circles on the line are graded entries in the reference archive; the shapes under it are catalogued projects. Each sits at the year it was first shown in public and links to its entry.

Networked readers and wearable readers: no graded reference, no catalogued project.

Documented counter-moves and catalogued projects, by year and by the family of reading system they address 6 rows, oldest system first. The heavy segment of each row is the years that family led. Circles on a line are the 20 graded entries of the reference archive; squares, diamonds, triangles and hexagons under it are the 33 catalogued projects. Each sits at the year it was first shown in public. The present-day rows, networked readers and wearable readers, carry no marks. 2001 2005 2010 2015 2020 2025 Face detection Haar cascades · Viola-Jones 2001–2009 CV Dazzle (Adam Harvey, 2010) HyperFace (Adam Harvey, 2016) DAZZLE (Michelle Tylicki & Lauri Love, 2023) CV Dazzle (open method, DIY build or prototype, 2010) Facial Weaponization Suite (art or collective practice, 2012) Data-masks (art or collective practice, 2013) HyperFace (open method, DIY build or prototype, 2016) DAZZLE (art or collective practice, 2023) Urban Privacy (commercial, 2023) Landmark geometry Eigenfaces · Fisherfaces · 68-point meshes 2010–2013 Surveillance Exclusion (open method, DIY build or prototype, 2017) Incognito (open method, DIY build or prototype, 2019) Learned embeddings DeepFace · FaceNet · ArcFace · deep detectors 2014–2016 Adversarial Manipulation of Deep Representations (Sara Sabour et al., 2015) Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition (Mahmood Sharif et al., 2016) A General Framework for Adversarial Examples with Objectives (Mahmood Sharif et al., 2017) Adversarial Patch (Tom B. Brown et al., 2017) Adversarial Robustness Toolbox v1.0.0 (Maria-Irina Nicolae et al., 2018) DPatch: An Adversarial Patch Attack on Object Detectors (Xin Liu et al., 2018) ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector (Shang-Tse Chen et al., 2018) The Dazzle Club (Evie Price et al., 2019) VLA: A Practical Visible Light-based Attack on Face Recognition Systems in Physical World (Meng Shen et al., 2019) Adversarial Attacks against Face Recognition: A Comprehensive Study (Fatemeh Vakhshiteh et al., 2020) Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates (Amin Ghiasi et al., 2020) Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition (Bangjie Yin et al., 2021) Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon (Yiqi Zhong et al., 2022) REALFACE Glamouflage (art or collective practice, 2013) URME Surveillance (open method, DIY build or prototype, 2014) Wearable Face Projector (open method, DIY build or prototype, 2017) Adversarial Fashion (commercial, 2019) The Dazzle Club (art or collective practice, 2019) adversarial-yolo (open method, DIY build or prototype, 2019) Yelo Pomelo (commercial, 2020) Cap_able (commercial, 2022) AntiAi Clothing (commercial, 2023) Adversarial Apparel (commercial, 2024) Digital Camouflage (commercial, 2025) Adversarial Drag (QFIN) (art or collective practice, 2026) noRecognition (commercial, 2026) Depth & near-infrared Dot projectors · NIR sensors · liveness 2017–2020 Physical-World Optical Adversarial Attacks on 3D Face Recognition (Yanjie Li et al., 2023) The Camera-Shy Hoodie (Mac Pierce, 2023) Accessorize in the Dark: A Security Analysis of Near-Infrared Face Recognition (Amit Cohen & Mahmood Sharif, 2024) Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models (Songyan Xie et al., 2025) Privacy Visor (research prototype, 2012) Stealth Wear (art or collective practice, 2013) Justice Caps (commercial, 2014) Flashback Collection (commercial, 2015) The ISHU (commercial, 2015) Reflectacles (commercial, 2016) Unidentified Halo (open method, DIY build or prototype, 2016) Freedom Shield (open method, DIY build or prototype, 2020) The Camera-Shy Hoodie (open method, DIY build or prototype, 2023) Solir Optics (commercial, 2025) VAYDR Recon (commercial, 2025) Zenni ID Guard (commercial, 2025) Networked readers Pole cameras · shared watchlists 2020–now No documented counter-move. Wearable readers Pervert glasses · body-worn 2020–now No documented counter-move. Documented counter-moves and catalogued projects, by year and by the family of reading system they address 6 rows, oldest system first. The heavy segment of each row is the years that family led. Circles on a line are the 20 graded entries of the reference archive; squares, diamonds, triangles and hexagons under it are the 33 catalogued projects. Each sits at the year it was first shown in public. The present-day rows, networked readers and wearable readers, carry no marks. 2001 2005 2010 2015 2020 2025 Face detection 2001–2009 CV Dazzle (Adam Harvey, 2010) HyperFace (Adam Harvey, 2016) DAZZLE (Michelle Tylicki & Lauri Love, 2023) CV Dazzle (open method, DIY build or prototype, 2010) Facial Weaponization Suite (art or collective practice, 2012) Data-masks (art or collective practice, 2013) HyperFace (open method, DIY build or prototype, 2016) DAZZLE (art or collective practice, 2023) Urban Privacy (commercial, 2023) Landmark geometry 2010–2013 Surveillance Exclusion (open method, DIY build or prototype, 2017) Incognito (open method, DIY build or prototype, 2019) Learned embeddings 2014–2016 Adversarial Manipulation of Deep Representations (Sara Sabour et al., 2015) Accessorize to a Crime: Real and Stealthy Attacks on State-of-the-Art Face Recognition (Mahmood Sharif et al., 2016) A General Framework for Adversarial Examples with Objectives (Mahmood Sharif et al., 2017) Adversarial Patch (Tom B. Brown et al., 2017) Adversarial Robustness Toolbox v1.0.0 (Maria-Irina Nicolae et al., 2018) DPatch: An Adversarial Patch Attack on Object Detectors (Xin Liu et al., 2018) ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector (Shang-Tse Chen et al., 2018) The Dazzle Club (Evie Price et al., 2019) VLA: A Practical Visible Light-based Attack on Face Recognition Systems in Physical World (Meng Shen et al., 2019) Adversarial Attacks against Face Recognition: A Comprehensive Study (Fatemeh Vakhshiteh et al., 2020) Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates (Amin Ghiasi et al., 2020) Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition (Bangjie Yin et al., 2021) Shadows can be Dangerous: Stealthy and Effective Physical-world Adversarial Attack by Natural Phenomenon (Yiqi Zhong et al., 2022) REALFACE Glamouflage (art or collective practice, 2013) URME Surveillance (open method, DIY build or prototype, 2014) Wearable Face Projector (open method, DIY build or prototype, 2017) Adversarial Fashion (commercial, 2019) The Dazzle Club (art or collective practice, 2019) adversarial-yolo (open method, DIY build or prototype, 2019) Yelo Pomelo (commercial, 2020) Cap_able (commercial, 2022) AntiAi Clothing (commercial, 2023) Adversarial Apparel (commercial, 2024) Digital Camouflage (commercial, 2025) Adversarial Drag (QFIN) (art or collective practice, 2026) noRecognition (commercial, 2026) Depth & near-infrared 2017–2020 Physical-World Optical Adversarial Attacks on 3D Face Recognition (Yanjie Li et al., 2023) The Camera-Shy Hoodie (Mac Pierce, 2023) Accessorize in the Dark: A Security Analysis of Near-Infrared Face Recognition (Amit Cohen & Mahmood Sharif, 2024) Human-Imperceptible Physical Adversarial Attack for NIR Face Recognition Models (Songyan Xie et al., 2025) Privacy Visor (research prototype, 2012) Stealth Wear (art or collective practice, 2013) Justice Caps (commercial, 2014) Flashback Collection (commercial, 2015) The ISHU (commercial, 2015) Reflectacles (commercial, 2016) Unidentified Halo (open method, DIY build or prototype, 2016) Freedom Shield (open method, DIY build or prototype, 2020) The Camera-Shy Hoodie (open method, DIY build or prototype, 2023) Solir Optics (commercial, 2025) VAYDR Recon (commercial, 2025) Zenni ID Guard (commercial, 2025) Networked readers 2020–now None documented. Wearable readers 2020–now None documented.
References, on the line
code, artefact or build files published
paper or documented project
survey or artwork documentation
Projects, under the line
commercial
art or collective practice
research prototype
open method, DIY build or prototype
Ring
aimed at a face system
aimed at another target: a person or object detector, a plate reader, a sensor, a camera flash
Row
years this family led
lit lens: no graded reference against this family

2001–2009

Face detection

Haar cascades · Viola-Jones

Rectangles of light and dark slid across the frame. Cheap, fast, everywhere, and it only ever looked for contrast.

3 references, 6 projects.

2010–2013

Landmark geometry

Eigenfaces · Fisherfaces · 68-point meshes

Facial geometry described through distances between landmarks.

No reference, 2 projects.

2014–2016

Learned embeddings

DeepFace · FaceNet · ArcFace · deep detectors

Neural networks learn numerical representations for comparison. Related architectures also detect people, objects and number plates.

13 references, 13 projects.

2017–2020

Depth & near-infrared

Dot projectors · NIR sensors · liveness

The face as 3D geometry, read in the dark, with a liveness check a photograph cannot pass. Interventions at this layer address the sensor, not the matcher.

4 references, 12 projects.

2020–now

Networked readers

Pole cameras · shared watchlists

Networked cameras feed shared, searchable indexes.

No reference, no project.

2020–now

Wearable readers

Pervert glasses · body-worn

Wearable cameras record at eye level and can be difficult to notice.

No reference, no project.