2 ms·Can't they simply include adversarial examples in the unreleased test set?by typon 9y agoCan't they simply include adversarial examples in the unreleased test set?