[weaklearner]

eh some adversarial inputs are very robust to perturbations/orientation. see the famous turtle video.

[rtkwe]

That was pretty impressive though it's still on a rigid surface which gives you a fixed relationship between the shape and the pattern.

[weaklearner]

that's a good point about the rigid surface.