Shawn-Shan / fawkes

Fawkes, privacy preserving tool against facial recognition systems. More info at https://sandlab.cs.uchicago.edu/fawkes
https://sandlab.cs.uchicago.edu/fawkes
BSD 3-Clause "New" or "Revised" License
5.18k stars 480 forks source link

cloaked jpg image looks very different compared to input #139

Closed chrisdane closed 3 years ago

chrisdane commented 3 years ago

Hi

I used fawkes to cloak 2 jpg images of 1200 x 1600 and 4608 x 3456 pixels (width x height), taken from different cams.

The small cloaked image looks very different compared to the input image, even with -d low. These differences are somewhat smaller in the large image case (also -d low), but I also can see the differences by eye in this case.

Hence, I cannot reproduce your examples at all with my own pictures.

I am using this binary: https://aur.archlinux.org/packages/fawkes-bin/.

Regards,
Chris

emilywenger commented 3 years ago

Hi Chris,

The visibility of the cloak depends on the input image. Typically, cloaks are must more visible on large, high-quality images (such as the ones you're trying to cloak). There is an inherent tradeoff between cloak visibility and protection quality.

chrisdane commented 3 years ago

Thanks for the answer.

Could you give a hint which pixel sizes/image formats work best for fawkes to obtain a result similar to your examples (i.e. being indistinguishable by eye)?

Thanks! Chris

Pamalosebi commented 2 years ago

Hi, just wanted to tell, that I had tried the same setup. And the results are frustratingly poor.

I am using this binary: https://aur.archlinux.org/packages/fawkes-bin/.

But I also tried it (with exact the same source picture) then on windows. The results were really usable.

I can't tell what is wrong with the "fawkes-bin" using the AUR, but it is not working properly.