Before revision:  We first show that black-box MT systems can be stolen by querying them with monolingual sentences and training models to imitate their outputs.
After revision:  We first show that MT systems can be stolen by querying them with monolingual sentences and training models to imitate their outputs.