Our goal is to be reliable on any text that seems like kind of normal human text. That's a really neat problem. Yeah in a sense you're trying to find at least one case where adversarial examples don't work. It seems like you can kind of construct an adversarial example from the bottom up. You keep mutating it a little more so the classifier gets a little more wrong and a little morewrong. And then see which way pushes it towards the wrong label the most.

Get the Snipd
podcast app

Unlock the knowledge in podcasts with the podcast player of the future.
App store bannerPlay store banner

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode

Save any
moment

Hear something you like? Tap your headphones to save it with AI-generated key takeaways

Share
& Export

Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more

AI-powered
podcast player

Listen to all your favourite podcasts with AI-powered features

Discover
highlights

Listen to the best highlights from the podcasts you love and dive into the full episode