Very interesting. Thank you for correcting me. a relatively large fraction of examples will be misclassified by networks trained from scratch with different hy

Very interesting. Thank you for correcting me. a relatively large fraction of examples will be misclassified by networks trained from scratch with different hyper-parameters (number of layers, regularization or initial weights). The above observations suggest that adversarial examples are somewhat universal...