Comment by sushirain

Is it possible to create an adversarial example without access to the weights of a model, and without being able to forward many images through it?