Identifying the locations of the pictures seems quite plausible to me, but the model has done such a “bad” job with the people that I really doubt the information is still there. Though you’re right that I don’t know for sure.
E.g. gender tends to make it into the picture, which is one bit. Are there 33 bits? We don’t know the model’s idiosyncrasies, but I wouldn’t be surprised to learn of correlations like “scars on input faces translate into stoic expressions”. Separately I can get a bunch of bits by assuming that the person has been on a photo before that includes one of the people in the picture or that was taken in a nearby location.
I’m not sure gender made it through for background people in the puddle image. In the other direction, though, are lots of confounders. Some of the “people” are actually multiple people merged together. Race is are partially randomized. Some faces are fully invented, since they’re not visible in the original pictures.
(To make sure we’re on the same page, I’m not claiming the party image anonymized me.)
Identifying the locations of the pictures seems quite plausible to me, but the model has done such a “bad” job with the people that I really doubt the information is still there. Though you’re right that I don’t know for sure.
E.g. gender tends to make it into the picture, which is one bit. Are there 33 bits? We don’t know the model’s idiosyncrasies, but I wouldn’t be surprised to learn of correlations like “scars on input faces translate into stoic expressions”. Separately I can get a bunch of bits by assuming that the person has been on a photo before that includes one of the people in the picture or that was taken in a nearby location.
I’m not sure gender made it through for background people in the puddle image. In the other direction, though, are lots of confounders. Some of the “people” are actually multiple people merged together. Race is are partially randomized. Some faces are fully invented, since they’re not visible in the original pictures.
(To make sure we’re on the same page, I’m not claiming the party image anonymized me.)