Comment by aerioux

Stupid q: how is this different than all of the other neural network adversarial attack papers that have come out recently?

Why would 3d not be a subcase of that work?