Yes, many models are vulnerable. But there are no proofs that allow you to say that. You should also be aware that they're only talking about image classificati

Yes, many models are vulnerable. But there are no proofs that allow you to say that. You should also be aware that they're only talking about image classification in all of these. I will only accept blanket statements about "all machine learning systems" when there's a mathematical proof. I don't mean to lessen the importance of the work, just to point out that saying "X fails at Y on subtask Z using the techniques we have today" is very different from saying "All possible X's, current and future, fail at Y."