Before revision:  Over the years, researchers have successfully attacked image classifiers in , both, white and black-box setting. Although , these methods are not directly applicable to texts as text data is discrete in nature .
After revision:  Over the years, researchers have successfully attacked image classifiers in , both, white and black-box settings. However , these methods are not directly applicable to texts as text data is discrete in nature .