Pith. sign in

REVIEW 3 major objections 4 minor 23 references

Swapping Faces, Saving Features: A Dual-Purpose Pipeline for Pedestrian Privacy in ITS

T0 review · 3 major / 4 minor · reviewed 2026-07-10 · grok-4.5

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read A five-stage face-swapping pipeline conceals pedestrian identities in AV street datasets while keeping facial expressions, pose, and gaze usable for intention models.

desk verdict Practical five-stage assembly that shows Roop beats Ghost-v2 on Egyptian street cases (veils, occlusion), but the AV-usability claim still rests only on proxies. read the letter →

arxiv 2607.08402 v1 pith:M4AUQSZI submitted 2026-07-09 cs.CV cs.AIcs.RO

Roba H. Farouk , Catherine M. Elias This is my paper · ORCID
classification cs.CVcs.AIcs.RO
keywords pedestrianprivacyfaceswappingdatausabilityautonomousvehiclesITSdatasetsfacialattributepreservationRoopEgy-DRiVeS
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

Autonomous-vehicle training needs large street datasets of real pedestrians, but those images expose identities and create privacy risks. Simple blurring destroys the facial cues that intention and trajectory models rely on. This paper builds a five-stage pipeline that first finds pedestrians and faces, restores low-resolution faces, swaps each face with a fixed public source using the Roop model, then blends the result back into the frame. The goal is dual: hide who the person is while leaving expressions, head pose, and eye-gaze direction intact enough that downstream looking/not-looking and intention predictors still work. On Egyptian street imagery that includes veils and occlusions, Roop is shown to beat Ghost-v2 on realism and attribute preservation, and a simple gaze feature extractor continues to label looking versus not-looking correctly after the pipeline runs.

What carries the argument

The five-stage pipeline (pedestrian detection, face detection, quality enhancement, face swapping with Roop, Poisson blending) that transfers only identity while holding expression, pose and gaze fixed.

What would settle it

Retrain a standard pedestrian-intention or trajectory-prediction model on the anonymized Egy-DRiVeS frames and measure a clear drop in accuracy relative to the same model trained on the original frames.

Watch

Extended reading notes

Core claim

A five-stage pipeline built around Roop face swapping, after YOLOv11 pedestrian detection, SCRFD face detection and CodeFormer restoration, conceals pedestrian identity on Egy-DRiVeS-style street images while preserving facial expressions, head pose and eye-gaze direction sufficiently for usability in subsequent pedestrian-intention tasks, and Roop outperforms Ghost-v2 on the reported metrics and on challenging cases such as occlusion and veiled faces.

Load-bearing premise

That four proxy metrics plus a single looking/not-looking extractor on a handful of clearly visible pedestrians are enough to guarantee that full intention and trajectory models will keep their training value after anonymization.

Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 4 minor

Summary. The manuscript proposes a five-stage pipeline (YOLOv11 pedestrian detection, SCRFD face detection, CodeFormer restoration, face swapping, OpenCV Poisson blending) that anonymizes pedestrians in ITS/AV street imagery via face swapping while aiming to retain facial attributes (expression, head pose, eye gaze) required for intention and trajectory models. Roop and Ghost-v2 are compared; Roop is selected for better structure/expression preservation and robustness on occlusions and veiled faces typical of the Egy-DRiVeS dataset. Evaluation uses landmark difference, blendshape difference, identity cosine similarity and gaze-vector cosine similarity (Table II) plus a qualitative looking/not-looking check (Fig. 5).

Significance. A practical, modular pipeline that balances identity concealment with attribute preservation would be useful for releasing diverse urban AV datasets under privacy constraints (GDPR-style rules, cultural cases such as veils). The explicit comparison of Roop versus Ghost-v2 on real street frames, the inclusion of restoration before swapping, and the focus on gaze/expression proxies are concrete engineering contributions. Credit is due for demonstrating multi-pedestrian automation and for highlighting failure modes of head-swapping on veiled subjects. Significance remains limited until downstream utility is measured beyond proxies.

major comments (3)
  1. [Section III-E / Extra Phase and Table II] The central usability claim for pedestrian-intention and trajectory-prediction models is supported only by four proxy metrics on high-quality close-ups (Table II) and a binary looking/not-looking extractor on a handful of clearly visible pedestrians (Section III-E, Fig. 5). No intention or trajectory model is retrained or evaluated on the anonymized frames, so the leap from residual landmark/blendshape/gaze differences (and from CodeFormer resize-restore) to retained training utility is untested. Given the Introduction’s own statement that facial cues are the main features required by these models, an end-to-end experiment is load-bearing for the dual-purpose claim.
  2. [Table II] Table II reports mean landmark difference, blendshape difference, identity cosine similarity and gaze cosine similarity without sample size N, variance/std, or any statistical test. The text only says “mean average of a sample of facial close-up images.” Without these quantities it is impossible to judge whether Roop’s reported advantages (e.g., blendshape 1.898 vs 2.048) are reliable or practically meaningful.
  3. [Section III-B–D and Tables III–IV] Quantitative metrics appear confined to high-quality close-ups; results on the actual target domain (Egyptian street frames, occlusions, veils, multi-scale pedestrians) are almost entirely qualitative (Tables III–IV, Figs. 3–4). A quantitative evaluation of the same four metrics (or of a downstream model) on a representative subset of Egy-DRiVeS is needed to substantiate the claim that the pipeline is “tailored to satisfy the privacy needs of the Egy-DRiVeS dataset.”
minor comments (4)
  1. [Section III-E] The text refers to “Table 5” for the looking/not-looking experiment while the caption and figure list show Fig. 5; numbering should be consistent.
  2. [Section II-A] Source-face selection is described as “fixed and randomly chosen” with no disclosure of the number of sources, demographic matching criteria, or whether the same source is reused across frames; a short paragraph or appendix would improve reproducibility.
  3. [Section IV] Inference-time remark (“3-minute inference time”) appears only in the conclusion; reporting per-stage or per-frame timings in the results section would help readers assess video applicability.
  4. [References] Several citations (Roop GitHub, Ghost-v2 arXiv) are preprints or repositories; a brief note on version/commit used would aid exact reproduction.

Circularity Check

0 steps flagged · score 0.0 of 10

No circularity: empirical comparison of off-the-shelf face-swappers on external metrics and street images; no derivation reduces to its inputs by construction.

full rationale

The paper presents an engineering pipeline (YOLOv11 + SCRFD + CodeFormer + Roop/Ghost-v2 + OpenCV blending) and an empirical head-to-head evaluation on high-quality close-ups and Egyptian street frames. Superiority of Roop is asserted solely from four externally defined quantitative metrics (landmark difference, blendshape difference, identity cosine similarity, gaze-vector cosine similarity) plus a qualitative looking/not-looking check; none of these quantities is fitted to the claimed result or defined in terms of it. The sole self-citation (Egy-DRiVeS dataset) merely supplies the target imagery and does not underwrite any uniqueness claim, uniqueness theorem, or fitted parameter that forces the Roop-vs-Ghost conclusion. There are no equations, no ansatz smuggled via prior author work, and no renaming of a known pattern. The work is therefore self-contained against its own benchmarks and exhibits zero circular steps.

Assumptions & free parameters 2 free parameters · 4 assumptions · 1 invented entities

The central claim rests on off-the-shelf detectors and swappers plus domain assumptions about which facial cues matter for AV intention models and that identity change via a fixed public source is privacy-sufficient. No new physical constants or free-form fitted laws appear; free choices are engineering (source faces, model selection). The pipeline itself is the main constructed object.

free parameters (2)
  • source face identities
    Fixed, randomly chosen public faces used for every swap; choice affects realism and identity distance but is not optimized or ablated.
  • detector and enhancer operating points
    YOLO/SCRFD confidence and CodeFormer restoration strength are used as pretrained defaults; no sensitivity analysis is reported.
assumptions (4)
  • domain assumption Facial expressions, head pose, and eye-gaze direction are the primary facial attributes required by pedestrian intention and trajectory models.
    Stated in Introduction and Methodology as the features the pipeline must preserve; underpins the usability claim.
  • domain assumption Swapping identity with an unrevealed public source face yields irreversible de-identification adequate for privacy protection.
    Asserted in Pipeline Overview; no re-identification attack or formal privacy metric (e.g., membership inference) is run.
  • domain assumption CodeFormer restoration recovers usable facial detail without inventing attributes that would mislead downstream intention models.
    Stage 3 justification; later Future Work notes resize distortion, showing the assumption is imperfect.
  • ad hoc to paper Proxy metrics (landmarks, blendshapes, embedding cosine, gaze cosine) plus looking/not-looking labels are sufficient proxies for full intention-prediction utility.
    Evaluation section defines success via these proxies without end-to-end model retraining.
invented entities (1)
  • five-stage pedestrian privacy pipeline (detect–face–enhance–swap–blend)
    purpose: Operational system that applies face swapping to ITS street imagery while targeting both identity concealment and attribute preservation.
    The staged composition and Egy-DRiVeS-specific handling (veils, low-res street crops) are the paper’s constructed object; components are prior models.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Swapping Faces, Saving Features: A Dual-Purpose Pipeline for Pedestrian Privacy in ITS." pith.science (2026). https://pith.science/paper/M4AUQSZI

@misc{pith2026260708402,
  author       = {Pith},
  title        = {Pith review of: Swapping Faces, Saving Features: A Dual-Purpose Pipeline for Pedestrian Privacy in ITS},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/M4AUQSZI}},
  note         = {Machine review of arXiv:2607.08402}
}
read the original abstract

Large-scale and diverse datasets are needed to train AI models to take real-time decisions for autonomous vehicles (AVs), an intelligent transportation system (ITS) application. Pedestrian intention and trajectory prediction are critical models used in AVs, requiring datasets involving diverse pedestrian images. Unrestricted access to these datasets imposes serious security risks, like identity theft and pedestrian tracking. The challenge is to apply privacy preservation procedures while maintaining the image attributes needed to train the models. Existing privacy methods may preserve the pedestrian's privacy, but degrade the image usability, which hinders the models' effectiveness. This work's focus is to implement a five-stage pipeline to protect pedestrians' privacy through face swapping while keeping the essential facial attributes intact. It should be tailored to satisfy the privacy needs of the Egy-DRiVeS dataset. Moreover, Roop and Ghost-v2 face-swapping models are evaluated. Provenly, Roop outperforms Ghost-v2 in various aspects, as will be discussed. Consequently, Roop is the face-swapping model to be used in the pipeline to strike the balance between pedestrian privacy via identity concealment and data usability via facial attribute preservation.

Figures

Figures reproduced from arXiv: 2607.08402 by the authors.

Figure 1
Figure 1. The 5 stages of the proposed pipeline. for the target’s pose, facial expressions, and the source identity at multiple scales. These embeddings are fed into a CGAN to output the source identity with the pose and facial expressions of the target. • Blender: It outputs the final result by using color referencing, inpainting techniques, and binary masking. Color referencing is used for aligning the colors and lighting a… view at source ↗
Figure 3
Figure 3. shows an input image having multiple pedestrians where all were successfully detected by YOLO model then input to the SCRFD model to have a cropped facial image for every pedestrian at the end of the stage. Real images taken from the Egyptian street were used in all of the following results. It can be seen from figure 3 distant faces are of low quality and the facial attributes are not visible. Evidently, this obstr… view at source ↗
Figure 2
Figure 2. Output from Ghost-v2 model on raw street image. [PITH_FULL_IMAGE:figures/full_fig_p004_2.png] view at source ↗
Figures from the paper (2 more)
Figure 4
Figure 4. Figure 4: Sample output after applying the five-stage pipeline. [PITH_FULL_IMAGE:figures/full_fig_p005_4.png]
Figure 5
Figure 5. Figure 5: Comparison between looking/not looking feature [PITH_FULL_IMAGE:figures/full_fig_p005_5.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

23 extracted references · 23 canonical work pages

  1. [1]

    Development of a modular ros-enabled pedestrian intention prediction architecture for avs maneuvering control,

    M. A. Manzour, C. M. Elias, E. I. Morgan, and O. M. Shehata, “Development of a modular ros-enabled pedestrian intention prediction architecture for avs maneuvering control,”IEEE Transactions on Intelligent Transportation Systems, vol. 26, no. 1, pp. 798–809, 2025

    work page 2025

  2. [2]

    Pedestrian crossing intention prediction via spatio-temporal visual data in urban traffic scenes,

    M. A. Manzour, O. M. Shehata, and E. I. Morgan, “Pedestrian crossing intention prediction via spatio-temporal visual data in urban traffic scenes,” in2021 IEEE 94th V ehicular Technology Conference (VTC2021-Fall), 2021, pp. 1–5

    work page 2021

  3. [3]

    Vit-ped: Visionary intention transformer for pedestrian behavior analysis,

    A. R. Elkammar, K. M. Gamaleldin, and C. M. Elias, “Vit-ped: Visionary intention transformer for pedestrian behavior analysis,” arXiv preprint arXiv:2601.01989, 2026

    work page arXiv 2026

  4. [4]

    The egy-drives dataset: Illuminating the dynamics of egyptian road traffic behaviors,

    Z. H. Saadawy, M. A. Elfar, M. M. Aly, M. Adel, M. A. Bahy, and C. M. Elias, “The egy-drives dataset: Illuminating the dynamics of egyptian road traffic behaviors,” in2024 International Conference on Computer and Applications (ICCA). IEEE, 2024, pp. 1–6

    work page 2024

  5. [5]

    The effects of filtered video on awareness and privacy,

    M. Boyle, C. Edwards, and S. Greenberg, “The effects of filtered video on awareness and privacy,” inProceedings of the 2000 ACM Conference on Computer Supported Cooperative Work, ser. CSCW ’00. New York, NY , USA: Association for Computing Machinery, 2000, p. 1–10. [Online]. Available: https://doi.org/10.1145/358916.358935

    work page doi:10.1145/358916.358935

  6. [6]

    Tools for protecting the privacy of specific individuals in video,

    D. Chen and Y . Chang, “Tools for protecting the privacy of specific individuals in video,”EURASIP Journal on Applied Signal Processing, vol. 2007, pp. 107–107, 12 2007

    work page 2007

  7. [7]

    Defeating image obfus- cation with deep learning,

    R. McPherson, R. Shokri, and V . Shmatikov, “Defeating image obfus- cation with deep learning,” 09 2016

    work page 2016

  8. [8]

    Pro-face: A generic framework for privacy-preserving recognizable obfuscation of face images,

    L. Yuan, L. Liu, X. Pu, Z. Li, H. Li, and X. Gao, “Pro-face: A generic framework for privacy-preserving recognizable obfuscation of face images,” 10 2022, pp. 1661–1669

    work page 2022

Show all 23 references
  1. [9]

    Hukkel ˚as, R

    H. Hukkel ˚as, R. Mester, and F. Lindseth,DeepPrivacy: A Generative Adversarial Network for Face Anonymization, 10 2019, pp. 565–578

    2019

  2. [10]

    Ciagan: Conditional identity anonymization generative adversarial networks,

    M. Maximov, I. Elezi, and L. Leal-Taixe, “Ciagan: Conditional identity anonymization generative adversarial networks,” in2020 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR). IEEE, Jun. 2020, p. 5446–5455. [Online]. Available: http://dx.doi.org/10.1109/CV...

    2020 doi

  3. [11]

    Deepprivacy2: Towards realistic full-body anonymization,

    H. Hukkel ˚as and F. Lindseth, “Deepprivacy2: Towards realistic full-body anonymization,” 2022. [Online]. Available: https://arxiv.org/ abs/2211.09454

    2022 arXiv

  4. [12]

    Generative adversarial net- works,

    I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y . Bengio, “Generative adversarial net- works,”Advances in Neural Information Processing Systems, vol. 3, 06 2014

    2014

  5. [13]

    Conditional generative adversarial nets,

    M. Mirza and S. Osindero, “Conditional generative adversarial nets,”

  6. [14]

    Available: https://arxiv.org/abs/1411.1784

    [Online]. Available: https://arxiv.org/abs/1411.1784

    arXiv

  7. [15]

    3pfs: Protecting pedestrian privacy through face swapping,

    Z. Zhao, X. Zhang, and Y . Demiris, “3pfs: Protecting pedestrian privacy through face swapping,”IEEE Transactions on Intelligent Transportation Systems, 2024

    2024

  8. [16]

    Ghost 2.0: generative high-fidelity one shot transfer of heads,

    A. Groshev, A. Iashchenko, P. Paramonov, D. Dimitrov, and A. Kuznetsov, “Ghost 2.0: generative high-fidelity one shot transfer of heads,” 2025. [Online]. Available: https://arxiv.org/abs/2502.18417

    2025 arXiv

  9. [17]

    Roop: One-click face swap,

    s0md3v, “Roop: One-click face swap,” https://github.com/s0md3v/ roop, 2023

    2023

  10. [18]

    Ultralytics YOLO,

    G. Jocher, J. Qiu, and A. Chaurasia, “Ultralytics YOLO,” Jan. 2023. [Online]. Available: https://github.com/ultralytics/ultralytics

    2023

  11. [19]

    Sample and computation redistribution for efficient face detection,

    J. Guo, J. Deng, A. Lattas, and S. Zafeiriou, “Sample and computation redistribution for efficient face detection,” 2021

    2021

  12. [20]

    Towards robust blind face restoration with codebook lookup transformer,

    S. Zhou, K. C. K. Chan, C. Li, and C. C. Loy, “Towards robust blind face restoration with codebook lookup transformer,” 2022. [Online]. Available: https://arxiv.org/abs/2206.11253

    2022 arXiv

  13. [21]

    Towards real-world blind face restoration with generative facial prior,

    X. Wang, L. Xie, C. Dong, and Y . Shan, “Towards real-world blind face restoration with generative facial prior,” 2021. [Online]. Available: https://github.com/TencentARC/GFPGAN

    2021

  14. [22]

    Gaze-lle: Gaze target estimation via large-scale learned encoders,

    F. Ryan, A. Bati, S. Lee, D. Bolya, J. Hoffman, and J. M. Rehg, “Gaze-lle: Gaze target estimation via large-scale learned encoders,” in Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, 2025

    2025

  15. [23]

    Jaad dataset,

    A. Rasouli, I. Kotseruba, and J. K. Tsotsos, “Jaad dataset,” in Proceedings of the IEEE International Conference on Computer Vision Workshops, pp. 206–213. [Online]. Available: https://data. nvision2.eecs.yorku.ca/JAAD dataset/

Pith tools

Reviewed July 10, 2026 · model on record in the stance chip above.