This mug is bananas, bee ay en ay en ay ess, if you are a robot. The rest of us meat computers can still tell it is a coffee mug owned by someone who is really into bananas and/or Gwen Stefani.
Adversarial patches don't always transfer well between models. This patch was specifically designed to be effective against YOLOv2.
• Ceramic
• 11 oz mug dimensions: 3.85″ (9.8 cm) in height, 3.35″ (8.5 cm) in diameter
• 15 oz mug dimensions: 4.7″ (12 cm) in height, 3.35″ (8.5 cm) in diameter
• Dishwasher and microwave safe
• That thing they do in cartoons where people slip on banana peels has not held up under replication. Just FYI.
This adversarial designs mug uses a targeted adversarial patch that maximizes the class probability for banana in the bounding box for the mug. The patch is trained with dynamic spline warping to account for the curvature of the mug's surface. You can read the original adversarial patch paper at https://arxiv.org/abs/1712.09665, and learn about the warping method pioneered on adversarial t-shirts at https://arxiv.org/abs/1910.11099.