Data poisoning can't beat facial recognition – research

If there was ever a reason to think data poisoning could fool facial recognition software, a recently published paper showed that reasoning is bunk. Those changes are invisible to the naked eye, but if effective they make them useless to facial recognition software. Researchers from Stanford University, Oregon State University and Google teamed up for the paper in which they single out two particular reasons why data poisoning won't keep people safe. First, the code written to "poison" photographs is freely available online. Second, there's no reason to assume a poisoned photo will be effective against future recognition models.