InstaHide
A Privacy Threat Revealed: How researchers cracked InstaHide for computer vision.
With access to a trained model, an attacker can use a reconstruction attack to approximate its training data. A method called InstaHide recently won acclaim for promising to make such examples unrecognizable to human eyes while retaining their utility for training.