>Our discussion and experiments establish adversarial examples as a purely human-centric phenomenon.
Can someone explain to me the difference between this statement and the notion that AI performance in general is completely subjective?
We're trying to train models to do certain things. It doesn't matter if you call them human-centric or not. The important thing is that we have a goal for training. Adversarial examples force models to do other things, i.e. behave in a way that defies the original goal. How is saying "no, misclassifying those bad examples is okay" different from moving the goalposts?
Their process of retraining doesn't make any sense to me either. So what if the model trained on mislabeled data has some degree of accuracy on real data? This just shows that there is some internal symmetry involved.
I find academic papers fairly indigestible both because of their language and verbosity and because PDF is a fairly horrible format for reading on screen.
