[phreeza]

Do general purpose adversarial patches even exist? I thought they were pretty specific to the particular network, subject and viewing angle?

[hprotagonist]

they do need to be tuned at least somewhat.