Joe Collman comments on Some thoughts on why adversarial training might be useful

[Joe Collman]

This seems generally clear and useful. Thumbs-up.

(2) could probably use a bit more ”...may...”, ”...sometimes...” for clarity. You can’t fool all of the models all of the time etc. etc.

[Beth Barnes]

thanks, edited :)