this post was submitted on 17 Jul 2026
197 points (98.5% liked)

privacy

10393 readers
8 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

founded 4 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] 01189998819991197253@infosec.pub 10 points 2 days ago* (last edited 2 days ago) (1 children)

Two notes. The first, I don't like the name. These are defensive measures against adversarial systems. Calling these clothes adversarial clothing implies they're the bad guys and the tracking system are the good guys. The second note is more of a question... where are they available?

Edit. Misspelling

[–] noughtnaut@lemmy.world 1 points 2 days ago* (last edited 2 days ago) (2 children)

Last time they were in the media, I found their web site. That ugly sweater cost over a hundred Euro (don't remember if it was two or seven, but at that point it no longer matters).

I'm hoping for such patterns to become open source (and less hard on human eyes).

[–] ArmchairAce1944@lemmy.ca 2 points 2 days ago (1 children)

The hard on human eyes and also very obvious to human eyes is a major problem. I am hoping for there to be regular clothes that allow for strong facial-recognition/AI shielding that is futureproofed, but at the same wouldn't be so obvious to regular human observers.

[–] MonkderVierte@lemmy.zip 1 points 2 days ago

Print a AI-generated face on a shirt?

[–] wyldrstallyns@lemmy.dbzer0.com 14 points 3 days ago

Bullshit title: "adversarial" implies that one's personal security is counter to gov't interests, and that it's the citizens' fault for behaving so. 🤬

[–] HAL_9_TRILLION@lemmy.dbzer0.com 47 points 4 days ago (2 children)

Oh look, capitalism trying to sell you something by calling it a solution to your problem. The problem that it created in the first place. This doesn't seem familiar at all.

[–] Elgenzay@lemmy.ml 21 points 4 days ago (1 children)
[–] Beehaw_Girl@beehaw.org 1 points 2 days ago

Welp, there goes my entire annual clothing budget. I'll have to wear that hoodie all day every day everywhere I go regardless of the occasion or weather 😄

[–] Cherry@piefed.social 4 points 4 days ago

Agree, its just a sales pitch.

[–] Septimaeus@infosec.pub 16 points 3 days ago (1 children)

Most of these countermeasures are easily thwarted by adjustments to the CV model, meaning even if they do work upon release (a big if) the countermeasure itself eventually becomes just another uniquely identifying feature.

If we’re doing adversarial, let’s do adversarial. Like high-wattage IR lasers to permanently destroy photo receptor arrays, cheap narrowband signal jammers to push wireless chips beyond thermal limit causing early heat death, directional EMP to fry logic boards, and so forth.

[–] GuillaumeGus@lemmy.dbzer0.com 5 points 3 days ago

Where does one get some schematics to build theses things in minecraft

[–] A_norny_mousse@piefed.zip 36 points 4 days ago (6 children)

But does it work?

He emphasised that because surveillance systems are so powerful, no design can guarantee security from detection, but said “the added value of fashion is to spread awareness and help propagate public discourse”.

Preuß said his designs used large-scale prints, asymmetrical cuts and streetwear-inspired silhouettes to confuse facial recognition algorithms. The company said its Urban Ghost coat integrates LEDs into the hood that emit infrared light to dazzle night-vision surveillance cameras.

Preuß, who co-founded his company after reading about the whistleblower Edward Snowden’s revelations about US surveillance in the Guardian, said his designs played with the fact that “facial recognition systems freak out when they see multiple faces at once”.

“Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said.

Bell, however, said “none of these products are tried and tested, and a lot of these surveillance technologies can deal with a little resistance … [but] even if the designs don’t necessarily work perfectly, fashion is also a visible sign of resistance.

Still not sure.

[–] fizzle@quokk.au 9 points 4 days ago (1 children)

Untested means, unlikely to work at all.

Maybe the IR LEDs at night.

[–] Valmond@lemmy.dbzer0.com 1 points 2 days ago

Gets run over by a tesla...

:-D

[–] mote@lemmy.ca 9 points 4 days ago (1 children)

My first thought when I saw this - "oh hey look, razzle dazzle clothes" which is my personal mental association of the famous scene in Stripes movie, with Dazzle Camouflage which I always thought was a neat idea.

In late May 2026 images appeared on social media showing Russian Ural and KAMAZ trucks painted in the classic dazzle camouflage. Supposedly the unusual paint scheme is to confuse Ukrainian drones controlled by artificial intelligence and disrupt their pattern recognition, and not to trick the human eye. Ukraine has experimented with AI for targeting as seen in Operation Spiderweb, and is conducting a deep strike campaign to disrupt Russian logistics.[72][73]

[–] thehermet@lemmy.ca 2 points 4 days ago (1 children)

I’d imagine it’s a bit of cat and mouse though, because if they train the drones to target that pattern they’d be sitting ducks

[–] mote@lemmy.ca 1 points 3 days ago

From my understanding (which could be incorrect, I mean I wasn't there), the pattern applied to the hull was done differently per ship. I imagine they applied the base pattern in a random tile-like build where things can be rotated and moved around in the design before painting.

[–] Batman@lemmy.world 1 points 3 days ago (1 children)

just from my reading of papers, optimized patterns make use of the fact that detectors (even modern transformer based architectures) are capital S Sensitive to the sillouette of an object.

in my other comment i linked a paper where they fool modern detectors with 80+% success rate. the clothing looks like a tiedye shirt to me. not fashionable, but not drawing attention either. if there is a way that you can make this fashionable is not a question i can answer :p

from my reading combining detectors (ensembling) does not help. this leaves spies with a problem, how to detect these noisy people without losing performance on normal nonnoisy people. there are tricks to this, but they are limited at best, for the same reason the noise worked in the first place. here is the reason.

assume noise makers create noise with methods A,B,C. you train on a dataset with images from the different noise makers (you don't know which method they used). each of these noisy groups will have a distict sillouette you can detect, but together, you are building a function like:

pineapple: fruit bannana: fruit apple: fruit

this is a solvable problem for ml, so how do the noise makers win ultimately? randomization in the process. if each noise is distinct there is no training, you only have one image per type of fruit, you might as well use traditional CV to detect these noisy people (good luck).

My opinion is i want a product where the customer provides a random seed which generates the process of noise generation for their shirt. the product is the transparency into how the seed effected the noise making, and an evaluation of the noise on modern off the shelf detectors.

obviously we don't see that here, but it seems doable, maybe a business idea for me? haha

[–] A_norny_mousse@piefed.zip 1 points 3 days ago* (last edited 1 day ago)

Thanks for the thoughtful reply. I like this idea esp.:

i want a product where the customer provides a random seed which generates the process of noise generation for their shirt.

Seems pretty doable in the age of printed t-shirt websites etc.

Or just, you know, more diversity in clothing. I bet surveillance ml gets a massive advantage from people's tendencies to stick to some sort of norm - aka fashion.

In any case none of this actively opposes the huge datacenters sucking up land, water and electricity first in the US, soon all over the planet ... and that's what saddens me. I don't know what to do about it either though.

[–] thehermet@lemmy.ca 2 points 4 days ago (1 children)

Thing is, I feel like having bright dazzling lights on your hoodie just fingerprints you even more, no?

Maybe if you use it strategically it could help, but I wouldn’t be sold on that feature

[–] definitemaybe@lemmy.ca 3 points 4 days ago

I don't think that's a problem, but I suppose it depends on your goals. Facial recognition in low-light conditions is already hard enough of a problem that they, presumably, are not building IR-light-clothing detection into their algorithms. And if IR-blasting clothing becomes commonplace enough that they start working on it, then it's also no longer distinctive. So, if the goal is to defeat passive surveillance of your movements, this should be highly effective.

If a human reviews the footage, then none of this likely matters anyway, since they'll be able to identify other identifying features about you—but that's a scalability problem. You'd need to have done something very "interesting" to be worth investing the time into tracking across hundreds of video feeds through a surveillance network.

If your goal is to get away with a crime or actively resist detection while protesting, then this is (obviously) a bad idea to wear this. You should instead choose something as non-descript as possible, like all black, long sleeves, gloves, face mask, and tinted goggles. But you can't just walk around in public like that, in general.

[–] quick_snail@feddit.nl 2 points 4 days ago

Translation is they don't work.

load more comments (1 replies)
[–] mcv@lemmy.zip 5 points 3 days ago

Reminds of the dazzle makeup article from a decade ago. Shame that never caught on. I hope this does.

[–] anomnom@sh.itjust.works 12 points 4 days ago

Because finding the weirdo wearing $500 the eyeball pants will be hard.

[–] Smaile@lemmy.ca 10 points 4 days ago* (last edited 4 days ago) (2 children)

wear a politician styled mask, commit a crime, system flags politician as criminal, repeat.

[–] funkless_eck@sh.itjust.works 2 points 3 days ago

that's just being a politician with extra steps

[–] BeMoreCareful@lemmy.world 3 points 3 days ago

Did you just figure out an infinite money glitch?

[–] eleitl@lemmy.zip 12 points 4 days ago (4 children)
[–] chuckleslord@lemmy.world 17 points 4 days ago

Fremen ramblings about walking the dunes, here. On gait hiding

[–] SPRUNTnsfw@fedinsfw.app 9 points 4 days ago

Throw a pebble in your shoe to change your walk. Wear a smaller or bigger shoe on one foot. Wear knee and ankle braces on one leg....

There are easy ways to change your gait for an outing.

[–] quick_snail@feddit.nl 3 points 4 days ago (2 children)

Fortunately gait biometrics are junk science anyway lol

[–] Wolf314159@startrek.website 4 points 4 days ago (1 children)

As if that stops police from using it to target randos or prosecutors from using it in court. The executive branch REALLY loves its junk science.

[–] Tiresia@slrpnk.net 4 points 3 days ago

If anything, that re-enforces quick_snail's point that all these individualistic anti-surveillance tips and tricks are pointless.

Even if you did succesfully change your gait and wear black and use a special phone and didn't attend the action they're accusing you of attending, they'll jiggle the random number generator until it says you're guilty (p<0.05).

There is a point in a surveillance state where it makes more sense to [REDACTED] fascists in plain view rather than waste energy trying to do anything subversively. Either follow the CIA manual on malicious compliance or blow up a pipeline, no real middle ground.

[–] eleitl@lemmy.zip 2 points 4 days ago (1 children)
[–] Auli@lemmy.ca 3 points 3 days ago (1 children)

Doesn't sound that good that changing clothes is one of the problems they are facing. What about different camera angles and heights in imaging that is an issue also.

load more comments (1 replies)
[–] CannonFodder@lemmy.world 3 points 4 days ago

Get someone to kick you in the leg hard every few days to change your limp.

[–] quick_snail@feddit.nl 7 points 4 days ago (2 children)

Sunglasses, hat, and facemask.

[–] ptu@sopuli.xyz 9 points 4 days ago

Those glasses with an attached nose and moustache work also well

[–] OwOarchist@pawb.social 6 points 3 days ago (2 children)
[–] quick_snail@feddit.nl 3 points 3 days ago* (last edited 3 days ago)

This only works if everyone wears the same fursuit

Otherwise, insert that xkcd with the guy who has ambiguous 1s and Ls in this license plate

[–] quick_snail@feddit.nl 3 points 3 days ago (1 children)

Does it come with air-conditioning?

load more comments (1 replies)
[–] quick_snail@feddit.nl 7 points 4 days ago

Yes, but they won't work

[–] londos@lemmy.world 5 points 4 days ago (1 children)

Everyone should just agree to wear the same clothing all the time. Maybe black pants and shirt. Remove it as a differentiator.

[–] DandomRude@lemmy.world 6 points 4 days ago

That says a lot about the times we live in....

[–] Danarchy@lemmy.nz 6 points 4 days ago (1 children)

I could easily do this with one of those custom mall tshirts circa the 1990s that you could get printed to commemorate a graduation or remember a dead baby or w/e

[–] Dookieman12@piefed.social 6 points 4 days ago

Oh, what about the ones with gangsta Bugs Bunny / SpongeBob / Tweety Bird. Memba?

[–] Batman@lemmy.world 2 points 3 days ago

this is the most recent arxiv paper on adversarial clothing (since a lot of people are speculating about if it's possible): [2511.16020] Physically Realistic Sequence-Level Adversarial Clothing for Robust Human-Detection Evasion https://share.google/VMhtGB8P2kTMorGx6

they boast an 80%+ success rate at evading the instance level (each time you walk past an ai enabled camera) detection with sequential models (more difficult to fool as they see more of your sillouette).

not saying they are fashionable and obviously aren't commercially available yet, but it definitely seems possible.

my main complaint is i wish these companies could make a good baseline so we could compare their efficacy. evaluating the trade off with the level of drip.

load more comments
view more: next ›