Adversarial perturbations reflect a mismatch between ImageNet and real vision

nostalgebraist.tumblr.com