One pixel attack for fooling deep neural networks · HackerPapers discussions

One pixel attack for fooling deep neural networks — HN submission

Sat, 10 Jan 2026 02:00:46 GMT

One pixel attack for fooling deep neural networks

3 points; 0 discussion replies on HN. Paper and source history. A submission is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by supriyo-biswas

Sat, 13 May 2023 18:24:59 GMT

https://arxiv.org/abs/1710.08864 (In general, see https://en.wikipedia.org/wiki/Adversarial_machine_learning for a broad overview of such attacks.)

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by penagwin

Wed, 26 Jun 2019 21:52:47 GMT

It will always be a game of cat and mouse. Even with Neural networks involved :D. [0] https://arxiv.org/abs/1412.1897 [1] https://arxiv.org/abs/1710.08864

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by anton_

Thu, 25 Oct 2018 17:25:01 GMT

On non-linearity of software systems. Correct me if I’m wrong but I’m assuming you mean it in a sense of being probabilistic and not easily predictable. Which is an interesting point because a lot of modern algorithms are like that. Let’s take neural networks. Being able to explain what the model is doing and how to make sure it’s correct is a whole area of research. For example, the results of a convolutional net can change drastically by altering a single pixel in an image[1]. We also faced with a problem of explaining a machine learning model that was much simpler than a neural net. It is…

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by amag

Tue, 28 Nov 2017 00:56:03 GMT

Superseding us in what way? The machine is already better at chess and Go, clearly not at classifying images[1], but the issue here is that the author argues that there is no such thing as a general intelligence. It's all situational. On a separate note, does it even matter? Some people argue it's important so that we can put AI safe-guards in place, to protect mankind. But either: A) Intelligence explosion won't happen and those safe-guards are not needed. B) Intelligence explosion happens and the supersmart AI will easily find its way around feeble safe-guards put in place by the inferior…

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by pdkl95

Mon, 27 Nov 2017 09:24:33 GMT

> He knew exactly what to say to the responding officer to cover his ass Replacing human judgment with algorithms is a terrible idea for many reasons, but this might be the worst. Algorithms are deterministic, and thus they can be manipulated. "SEO" services exist in spite of Google's efforts to protect their ranking algorithm. Does anybody seriously believe their local government will be more successful than Google at preventing people (i.e. police, prosecutors, etc) from "optimizing" their input to the algorithm? edit - justification for the claim that a bail algorithm would be easy to…

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by trott

Thu, 02 Nov 2017 18:59:01 GMT

Very recently, it was found that changing a single, carefully placed, pixel is enough to confuse NN classifiers. https://arxiv.org/abs/1710.08864

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by ColinWright

Tue, 31 Oct 2017 15:12:47 GMT

Extensive discussion: https://news.ycombinator.com/item?id=15577885 Also: Paper identifier '1710.08864.pdfhttps:/arxiv.org' not recognized There appears to be a valid arXiv paper identifier within '1710.08864.pdfhttps:/arxiv.org'. Perhaps the link you followed was intended as a link to arXiv:1710.08864. Links: * https://arxiv.org/abs/1710.08864 * https://arxiv.org/abs/1710.08864.pdf

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — HN submission

Tue, 31 Oct 2017 15:11:14 GMT

One pixel attack for fooling deep neural networks

1 point; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.

One pixel attack for fooling deep neural networks — mentioned by bfirsh

Sun, 29 Oct 2017 06:54:50 GMT

If you're on a phone, here's a responsive HTML version of the paper: https://www.arxiv-vanity.com/papers/1710.08864/

Paper and discussion history. A mention is not an endorsement.

One pixel attack for fooling deep neural networks — HN submission

Sun, 29 Oct 2017 03:50:11 GMT

One pixel attack for deceiving deep neural networks

260 points; 129 discussion replies on HN. Paper and source history. A submission is not an endorsement.

One pixel attack for fooling deep neural networks — HN submission

Fri, 27 Oct 2017 18:52:10 GMT

One pixel attack for fooling deep neural networks

3 points; 1 discussion reply on HN. Paper and source history. A submission is not an endorsement.