4 ms·

I remember there was an advertisement on TV where an actor would say "okay google, what is X?", and the phones nearby would search for that phrase. With this, a

• yorwba 9y ago
  Not yet. The audio adversarial examples we construct in this paper do not remain adversarial after being played over-the-air, and therefore present a limited real-world threat; however, just as the initial work on image-based adversarial examples did not consider the physical channel and only later was it shown to be possible, we believe further work will be able to produce audio adversarial examples that are effective over-the-air.
  • nukeop 9y ago
    Weird, I'd expect that since they've achieved a 100% success rate, they could get at least 50% in real life scenarios. Also this could be played in stores to get the phones of customers to search for certain phrases.
    • daveFNbuck 9y ago
      Their 100% success rate requires perfect fidelity. If they're saying it doesn't work over the air, they probably have close to 0% success on store speakers.
      • Crespyl 9y ago
        Right, it looks very similar to the early adversarial visual examples. At first they only worked on direct simulated inputs with perfect clarity, then images, and now live camera feed of arbitrary 3D printed objects from any angle.