Physical adversarial attacks threaten to fool object detection systems but reproducible research on the realworld effectiveness of physical patches and  - Information from apricot.mitre.org