Three defenses harden face recognition
Three tricks detect poisoned identities at training and filter inputs at inference.
7 stories, newest first · one card per story
Three tricks detect poisoned identities at training and filter inputs at inference.
Early-exit probes keep over 96% of full-depth accuracy at half the compute without rebuilding the gallery.
ViT-HarDis applies stronger head decorrelation to ambiguous samples, outperforming uniform regularization on IJB-B and TinyFace.
Authors quantize GhostFaceNet so extraction, storage, and matching stay encrypted and call the design the first end-to-end MPC system of its kind.
DifFIQA(R) achieves 11.42% mean D-EER on FRLL morphing attacks using fixed quality scores.
CARPM-FIQA stabilizes face-image quality scores by accumulating relative point margins across training.

Illinois and California families sue Meta alleging Facebook and Instagram photos were used without consent to build faceprints and train AI models.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views