I feel like the first version of Nightshade will not be very robust, but the limitations you mention in the article can be bypassed through processes like GAN training, focusing on the most used datasets like ImageNet
I feel like the first version of Nightshade will not be very robust, but the limitations you mention in the article can be bypassed through processes like GAN training, focusing on the most used datasets like ImageNet
Also, taking into account that most classification CNN have their roots on ImageNet, they may share underlying patterns that can be exploited.
Also, taking into account that most classification CNN have their roots on ImageNet, they may share underlying patterns that can be exploited.
Though, I disagree that tools like Nightshade are destined to fail. It is based on multiple assumptions and limitations that very likely the authors of those tools are very aware of themselves 1/2
Though, I disagree that tools like Nightshade are destined to fail. It is based on multiple assumptions and limitations that very likely the authors of those tools are very aware of themselves 1/2