i don't get it. the first image is correctly detected as an apple, and the second one is correctly detected as an ipod. what's the big news here
RT @moyix@twitter.com
The latest generation of adversarial image attacks is, uh, somewhat simpler to carry out https://openai.com/blog/multimodal-neurons/