https://arxiv.org/pdf/1802.08195.pdf https://arxiv.org/pdf/1802.08195.pdf Looks like we are starting to find examples. I think your intuition is wrong because

https://arxiv.org/pdf/1802.08195.pdf https://arxiv.org/pdf/1802.08195.pdf Looks like we are starting to find examples. I think your intuition is wrong because humans are adapted to what exists naturally so of course there are no naturally occurring adversarial examples. It seems like the same is true for models trained on large natural image sets though. My point is not wow let’s stop developing neural networks they are perfect. It’s more let’s go collect real world test sets to find and then fix gaps. Adversarial examples actually help very little in making nets more robust in the ways that matter.