A arxiv.org Fooling surveillance cameras: adversarial patches to attack person detection 148 points hardmaru 7 years ago 23 comments