Trying to "harden" million-parameter models trained on a relatively small number of relevant examples will be a nightmare to make web security look easy.

PS -- NIPS is in Long Beach now? What a shame.

It left Vancouver a few years ago and has been moving around. It's getting too big for many cities now.

Too bad... Vancouver/Whistler was an awesome place to have a conference, even if the weather was rainy and the skiing so-so. A NIPS too big to be hosted by anything but a mega-city sounds depressing.