Yes. We’re just aiming for a distillation of the overseer’s judgments, but that’s what existing imagenet models are anyway, so we’ll be vulnerable to adversarial examples for the same reason.
Yes. We’re just aiming for a distillation of the overseer’s judgments, but that’s what existing imagenet models are anyway, so we’ll be vulnerable to adversarial examples for the same reason.