News for hackers. Stuff that matters.
Re:Robust Adversarial Examples by nullc on Tuesday July 18, 2017 @01:26AM (#14794393)
Though I generally agree with your point, the tree vs stopsign example may not be the best because it would arguably work equally well on humans.
Re:Robust Adversarial Examples by netinstructions on Tuesday July 18, 2017 @01:34AM (#14794415)
Did the perturbed image of the cat in the article look like a desktop computer to you?

The point is that humans would see one thing whereas computers would be highly confident it is something else.

Re:Robust Adversarial Examples by SmallDeadGuy on Tuesday July 18, 2017 @05:03AM (#14795200)
Only if the adversarial image printed doesn't look like the stop sign, though the example in this article shows that it's entirely possible to make an image that just looks like a distorted/badly-printed kitten to a human but completely different to a computer. A similar image for a stop sign might just look like wear in the paint or weird reflections or something but still look like a stop sign to a human.
Re:Robust Adversarial Examples by randyrand on Tuesday July 18, 2017 @06:27AM (#14795488)
yes but wont we still notice that self driving cars aren't stopping at the stop sign? and we'd investigate