Concern 113 · Working draft · editorial review in progress

Physical-world adversarial patches

An adversarial patch is a visible pattern designed to interfere with a vision model when it appears in the scene.

Understanding the concern

Unlike a tiny change spread across a digital image, a patch can be printed or attached to an object. Research has tested patterns that influence classifiers across selected viewing conditions.

Real-world effectiveness depends on the model, camera, angle, lighting, and task. A striking demonstration should not be generalized to every detector. The concern calls for testing physical conditions and safe behavior when visual evidence is unreliable.

An example

A patterned sticker may confuse a camera-based classifier even though a person can still recognize the surrounding object.

Illustrative unless identified as a documented case.

Words in plain English

Model
The learned part of an AI system. It uses patterns found during training to produce an answer or prediction.
Adversarial
In this context, designed to challenge, trick, or attack a system.

Evidence and its limits

The paper demonstrates physical patches against tested classifiers; scope and task matter.

Explore these sources in the library →
Broader frameworks and background

These resources provide context. They do not establish every claim in this concern.

A question to discuss

Has the system been tested with unexpected visible patterns under realistic viewing conditions?

Keep track of different views, what needs checking, and any next step in your own discussion notes.

Open discussion notes →
Principles for the conversation

Before you finish · reflect together

Virtues and principles to consider

Virtues are qualities we practice in how we treat people and make choices. They are not scores for judging someone. Use these ideas to explore what a thoughtful response could look like.

Humility

Humility means recognizing the limits of our knowledge and being willing to learn from others. Expertise can be valuable without answering every question.

State where evidence is weak, invite criticism, and listen to people with different experience. Leave room to revise a decision when new information appears.

Ask together: What might we be missing, and who could help us see it?

Prudence

Prudence means using careful judgment before and during action. It balances worthwhile opportunities with the need to avoid harm that could have been anticipated.

Start with a limited trial, set stopping points, and prefer choices that can be undone when uncertainty is high. Review what happens rather than assuming the original plan remains sound.

Ask together: What is a careful next step, and when should we stop or change course?

Truthfulness

Truthfulness means making claims that match the evidence and being clear about what we do not know. It includes correcting mistakes rather than protecting a polished story.

Check sources, label guesses, and distinguish a trial result from a proven benefit. If AI helped produce a claim, someone still needs to take responsibility for checking it.

Ask together: What can we honestly say, and what still needs checking?

Editorial ratings

These are editorial judgments from the register, not measured probabilities or predictions about your situation.

Severity
Serious · 3/5
Likelihood
Documented at scale · 5/5
Time horizon
Now
Register risk score
15
About the register and scoring →
More ways to explore

Search for more writing

For more specific or recent material, open a search below or ask for a web summary. AI-generated summaries can contain mistakes; open the original articles to check them.

Explore a proposed use of AI →