yosinski

4 ms·

1. 1.▲
   by yosinski 12y ago

   That's a good idea, though note that there's a difference between asking "Which of these two images looks more like a panda?" and "Which of these two images looks more like a panda than a dog or cat?". The latt
2. 2.▲
   by yosinski 12y ago

   > Agreed. That is surprising, and also increases the security risks, because I can produce images on my in-house network and then take them out into the world to fool other networks without even having access to the outputs of those netw
3. 3.▲
   by yosinski 12y ago

   > ...in case 2 I can compute the gradient numerically, it just takes a bit longer. Yep, true, might just take a while. On the other hand, even a very noisy estimate of the gradient might suffice, which could be faster to obtain. Perhaps
4. 4.▲
   by yosinski 12y ago

   No, but we did make use of (1) a large number of input -> network -> output iterations, along with (2) precisely measured output values to decide which input to try next. It may not be so easy to experiment in the same way on natural
5. 5.▲
   by yosinski 12y ago

   > This work has led to some unfortunate misconceptions. Agreed; the weaknesses reported should definitely not be taken to affect only convnets or only deep learning. Ian's "Explaining and Harnessing Adversarial Examples" p