@misc{indiciaef59ede660c2e,
  title = {Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators},
  author = {Keane Lucas and Matthew Jagielski and Florian Tramèr and Lujo Bauer and Nicholas Carlini},
  year = {2023},
  url = {https://arxiv.org/abs/2302.13464},
  note = {Source identifier: 2302.13464}
}