It’s a possibility, but this seems to remove a ton of information to me. The Ghibli faces all look quite similar to me. I’d be very surprised if they could be de-anonymized in cases like these (people who aren’t famous) in the next 3 years, if ever.
If you’re particularly paranoid, I presume we could have a system do a few passes.
Somebody who doesn’t understand cryptography might devise twenty clever-seeming amateur codes and apply them all in sequence, thinking that, even if one of the codes turns out to be breakable, surely they won’t all be breakable. The NSA will assign that mighty edifice of amateur encryption to an intern, and the intern will crack it in an afternoon.
Yeah, but then you really lose the capacity to deanonymize effectively. On priors, I can guess you’re likely to be American or Western European, probably like staying up late if you’re the former/live in Western timezones. I can read a lot more of your comments and probably deduce a lot, but just going off your two comments alone doesn’t make it any more likely to find where you live, for instance.
Identifying the locations of the pictures seems quite plausible to me, but the model has done such a “bad” job with the people that I really doubt the information is still there. Though you’re right that I don’t know for sure.
E.g. gender tends to make it into the picture, which is one bit. Are there 33 bits? We don’t know the model’s idiosyncrasies, but I wouldn’t be surprised to learn of correlations like “scars on input faces translate into stoic expressions”. Separately I can get a bunch of bits by assuming that the person has been on a photo before that includes one of the people in the picture or that was taken in a nearby location.
I’m not sure gender made it through for background people in the puddle image. In the other direction, though, are lots of confounders. Some of the “people” are actually multiple people merged together. Race is are partially randomized. Some faces are fully invented, since they’re not visible in the original pictures.
(To make sure we’re on the same page, I’m not claiming the party image anonymized me.)
You don’t know whether I can find photos of the people that wanted to remain anonymous given those pictures and the techniques available in a year.
It’s a possibility, but this seems to remove a ton of information to me. The Ghibli faces all look quite similar to me. I’d be very surprised if they could be de-anonymized in cases like these (people who aren’t famous) in the next 3 years, if ever.
If you’re particularly paranoid, I presume we could have a system do a few passes.
That would be ordinarily paranoid.
Even quantum cryptography couldn’t restore cleartext that had half of it redacted and replaced with “----” or something.
You can use whichever information you got to update your priors about what message was sent.
Yeah, but then you really lose the capacity to deanonymize effectively. On priors, I can guess you’re likely to be American or Western European, probably like staying up late if you’re the former/live in Western timezones. I can read a lot more of your comments and probably deduce a lot, but just going off your two comments alone doesn’t make it any more likely to find where you live, for instance.
Identifying the locations of the pictures seems quite plausible to me, but the model has done such a “bad” job with the people that I really doubt the information is still there. Though you’re right that I don’t know for sure.
E.g. gender tends to make it into the picture, which is one bit. Are there 33 bits? We don’t know the model’s idiosyncrasies, but I wouldn’t be surprised to learn of correlations like “scars on input faces translate into stoic expressions”. Separately I can get a bunch of bits by assuming that the person has been on a photo before that includes one of the people in the picture or that was taken in a nearby location.
I’m not sure gender made it through for background people in the puddle image. In the other direction, though, are lots of confounders. Some of the “people” are actually multiple people merged together. Race is are partially randomized. Some faces are fully invented, since they’re not visible in the original pictures.
(To make sure we’re on the same page, I’m not claiming the party image anonymized me.)