Safety, Security & Governance
24 min
A Decade of Adversarial Examples: Why Robustness Never Came Free
In 2014 a perturbation the size of one 8-bit colour step turned a 57.7 percent panda into a 99.3 percent gibbon. Twelve years, 300 million synthetic training images and more than 10^21 training FLOPs later, the best CIFAR-10 mode…