Cutting through buggy adversarial example defenses: fixing 1 line of code breaks Sabre

Nicholas Carlini

Sabre is a defense to adversarial examples that was accepted at IEEE S&P 2024. We first reveal significant flaws in the evaluation that point to clear signs of gradient masking. We…