3 ms·
Machine learning-style image recognition tends to work extremely poorly with adversarial inputs.
by ctz 7y ago
Machine learning-style image recognition tends to work extremely poorly with adversarial inputs.
- mizzao 7y agoWhile this is true, it's usually referring to algorithmically chosen adversarial inputs. On the other hand, it's a lot harder to trick both the browser's image recognition and the human operator's visual senses with the same UI.
- ericpauley 7y agoThis is actually one of the core goals of adversarial machine learning: crafting inputs that trick a machine but look indestinguishable to a human [1]. [1] https://arxiv.org/pdf/1511.07528.pdf https://arxiv.org/pdf/1511.07528.pdf