I was initially excited to see our attack already showing up in the wild but the numbers reported didn’t line up with our experiments - so I dug into it. A THREAD: https://t.co/3N5xqzEgj7

— Ariel Herbert-Voss (@adversariel) February 10, 2021