You don't really need access to the other model. By just using your own NN as a discriminator, it will train to be very good at fooling it. And so it should be

You don't really need access to the other model. By just using your own NN as a discriminator, it will train to be very good at fooling it. And so it should be just as good at fooling other NNs.