MegaFace facial-recognition dataset raises privacy and liability concerns
Date: 2019
Affected: Flickr users in MegaFace
Attack vector: data-exfiltration
Category: real-world
Severity: Medium

University of Washington's MegaFace training dataset, sourced from Flickr photos uploaded under permissive Creative Commons licenses, was used to train face-recognition systems by Chinese surveillance contractors and US defense agencies, raising consent and re-identification concerns.


Mitigations:

Architectural layers (MAESTRO):