Large eyes, soft lines and vibrant coloring: You, too, can look like a character straight out of a Disney movie. The Voilà AI Artist app has taken social media by storm by providing users with AI-powered photo filters. But what happens to those images once uploaded to the web? Users can upload or take a photo, pick a mode and then save the image or upload it to social media. Voilà also has a feature that modifies images specifically of celebrities and offers a subscription service at $3 on iOS and $2 on Android a week, which eliminates ads.

"If we go in front of a live camera that is using facial recognition to identify and interpret who they're looking at and compare that to a passport photo, we can realistically and repeatedly cause that kind of targeted misclassification," said the study's lead author, Steve Povolny. To misdirect the algorithm, the researchers used an image translation algorithm known as CycleGAN, which excels at morphing photographs from one style into another. For example, it can make a photo of a harbor look as if it were painted by Monet, or make a photo of mountains taken in the summer look like it was taken in the winter. The McAfee team used 1,500 photos of each of the project's two leads and fed the images into a CycleGAN to morph them into one another. At the same time, they used the facial recognition algorithm to check the CycleGAN's generated images to see who it recognized. After generating hundreds of images, the CycleGAN eventually created a faked image that looked like person A to the naked eye but fooled the face recognition into thinking it was person B. While the study raises clear concerns about the security of face recognition systems, there are some caveats.