4 ms·
>> We’ve seen this arms race before and know who wins. It’s all snake oil imo I haven't and I don't know who wins. Who wins? Adversarial examples aren't snake
by YeGoblynQueenne 10mo ago
>> We’ve seen this arms race before and know who wins. It’s all snake oil imo
I haven't and I don't know who wins. Who wins?
Adversarial examples aren't snake oil, if that's what you meant. There's a rich literature on both producing and bypassing them that has accumulated over the years, but while I haven't kept abreast with it, my recollection is that the bottom line is like that for online security: there's never a good reason not to make sure your system is up to date and protected from attacks, even if there exist attacks that can bypass any defense.
Where in this case attack and defense can both describe what artists want to do with their work.
- jappgar 10mo agoIn an arms race, the party with the most money always wins.
- gspr 10mo agoCitation needed.
- deleted 10mo ago[deleted]
- torginus 10mo agoAren't adversarial examples have to be trained to be effective against a specific recognizer? I could imagine you could make one that was effective against multiple recognizers, but not in general. I'd also guess it'd be easy to get rid of this vulnerability on the model side.
- pixl97 10mo agoThis isn’t security... Don't confuse attempting to make AI misclassify an image as a security measure. And yes, this is snake oil and the AI wins every time. At the end of the day a human has to be able to interpret the image, and I'd add another constraint of not thinking it looks ugly. This puts a very hard floor on what a poisoner can put in an image before the human gets sick. In a rapid turn around GAN you hit that noise floor really quickly.