3 ms·Fooling automated surveillance: adversarial patches to attack person detector2 points by pwg 8y ago