[CyborgCabbage]

Photos won't work with this, it works here because text is discrete and provides a limited search space.

[teeray]

“Attacks always get better, they never get worse“ —Bruce Schneier

[bawolff]

Yes, but that doesn't mean this particular attack is relavant to the problem space.

[zmgsabst]

What makes it possible to search over font characters but not, eg, convolution tiles?

Photo identification is done with a limited search space of “tiles” that the image is decomposed into, for convolutional NNs.