PPBA
PPBA copied to clipboard
Why does the attack occur when is_success=1 and the l2 norm is 0?