And I suspect as with all deep-learning based solutions to date, there will be subtle modifications to one's face that will serve as robust adversaries to all n

And I suspect as with all deep-learning based solutions to date, there will be subtle modifications to one's face that will serve as robust adversaries to all networks simultaneously. The phase space for inputs is amazingly huge, so huge that it is nearly impossible to cover all of it with a finite training set, doubly so if one has a gradient for locating such adversaries... https://blog.openai.com/robust-adversarial-inputs/ https://blog.openai.com/robust-adversarial-inputs/