This Researcher Is Designing Clothes That Break Facial Recognition Software
A security researcher plans to unveil clothing patterns that confuse the AI systems governments use to track people in public — without their knowledge or consent.
Key points
- Clearview AI, a facial recognition company, has collected billions of photos from social media without users' permission and sells access to US law enforcement agencies including ICE.
- The Department of Homeland Security acknowledged in writing in 2025 that ICE does not give people any chance to consent to — or refuse — the collection of their face data.
- Security researcher Bill Swearingen will demonstrate anti-surveillance clothing at the Black Hat USA 2026 security conference next month.
- Swearingen tested his designs against 11 real AI models and found that geometric, high-frequency patterns can cause facial recognition software to fail or misidentify a person.
- Any single clothing pattern works only until the software is updated, after which a new pattern would need to be released.
About ten years ago, a developer named Hoan Ton-That quietly scraped — downloaded without asking — photos from social media platforms and fed them into a database. That database became the engine behind Clearview AI, a facial recognition service that can match a face in a photograph to a person's online identity. Your face is almost certainly in it.
Since then, Clearview has grown its database to billions of images and signed contracts worth millions of dollars with US law enforcement, including Immigration and Customs Enforcement (ICE). First reported by Dark Reading, the issue goes beyond one private company. The Department of Homeland Security (DHS) — the federal agency that oversees border and immigration enforcement — has stated plainly that ICE gives people no opportunity to say no to having their face collected.
You were never asked. There is no opt-out.
How can ordinary clothes stop a camera from recognising you?
Facial recognition is not one magic box. It is a chain of steps: a camera captures your image, software converts that image into data points, and a matching engine checks those data points against a database. Break any link, and the chain fails.
Bill Swearingen, a security researcher known online as @hevnsnt, spotted that the weakest link is often the second step — the conversion of image to data. This processing frequently runs on the camera itself, not a powerful remote server, because it needs to work in real time. That means it relies on a stripped-down version of the AI — fast, but not very sophisticated.
Swearingen's clothing targets exactly that stripped-down software. He extracted 11 AI models from real surveillance hardware, then spent millions of test rounds generating patterns, measuring how much each one reduced the software's confidence that it was even looking at a human body, and discarding patterns that did not perform. The winners were bold geometric designs — the kind you might mistake for a loud streetwear print or a psychedelic poster.
The reason they work is precise. These AI systems learn to recognise people by stacking thousands of tiny detectors for edges, textures, and the arrangement of eyes, nose, and mouth. A high-frequency geometric pattern — one with lots of rapid contrasts and repeating shapes — floods those detectors with noise. The system hesitates. It loses confidence. Sometimes it stops seeing a person at all.
The failure mode here is the same one that has haunted computer vision — the gap between how humans see a picture and how a machine reads the raw pixel data — and Swearingen is using that gap as a door.
Practical limits exist. A pattern tested against a virtual camera on a GPU may behave differently on real fabric under real lighting. And once a surveillance company updates its model, a specific pattern may stop working — forcing another round of testing and a new design.
"You never opted into this, and there's no way to opt out," Swearingen says. His clothes are not a permanent fix. They are, for now, a one-step-ahead response to systems built without your consent.
If you spend time in spaces with heavy camera coverage — airports, transit hubs, protests — it is worth knowing these tools exist, even if their effectiveness shifts over time.
