[sszz]

If you use a new cloaking image for each picture you upload to social then they will all be embedded in a different location for a given feature extractor and an adversary wouldn’t be able to reverse search for linked pictures—that’s at least my understanding of how the method would need to be used. But if you keep using the same cloaking image, your adversary could definitely learn that process and effectively undo it.

[nxpnsv]

Cool. So it would prevent someone from learning my face from a collection of photos on my profile. That makes more sense...