The latest generation of adversarial image attacks is, uh, somewhat simpler to carry out
https://openai.com/blog/multimodal-neurons/
https://twitter.com/moyix/status/1367575109305794563/photo/1
https://openai.com/blog/multimodal-neurons/
https://twitter.com/moyix/status/1367575109305794563/photo/1