Basically they only reiterate two well-known attacks (data poisoning and adversarial training). I also remain skeptical about their conclusion that certificatio

Basically they only reiterate two well-known attacks (data poisoning and adversarial training). I also remain skeptical about their conclusion that certification will foster trust (unless certification comes with e.g. liability).