Yo dawg, we heard you like dunking donuts in your coffee, so we put a donut on a coffee mug so you can dunk your donut in a donut.
Adversarial patches don't always transfer well between models. This patch was specifically designed to be effective against YOLOv2.
• Ceramic
• 11 oz mug dimensions: 3.85″ (9.8 cm) in height, 3.35″ (8.5 cm) in diameter
• 15 oz mug dimensions: 4.7″ (12 cm) in height, 3.35″ (8.5 cm) in diameter
• Dishwasher and microwave safe
• Irresistible to robot police officers
This adversarial designs mug uses a targeted adversarial patch that maximizes the class probability for donut in the bounding box for the mug. The patch is trained with dynamic spline warping to account for the curvature of the mug's surface. You can read the original adversarial patch paper at https://arxiv.org/abs/1712.09665, and learn about the warping method pioneered on adversarial t-shirts at https://arxiv.org/abs/1910.11099.