text:   broken",3,"[""Is the backdoor secret? Checkout our new work on ''breaking'' poisoned classifiers,  where we use neat ideas in adversarial robustness to analyze backdoored classifiers. Joint work with @agsidd10 &amp; @zicokolter.\n\nPaper: <LINK>\nCode: <LINK> <LINK>"", 'For a poisoned classifier, we construct a robustified smoothed classifier. We extract colors or cropped patches from adversarial examples of the smoothed classifier to create new triggers. These new triggers have similar or higher attack success rate than the original backdoor.', 'Open questions:\n1. Are there backdoor attacks that can avoid our attack?\n2. From our results, it seems that backdoor poisoning creates a spectrum of potential backdoors. It is natural to ask what is actually learnt through the backdoor poisoning process?']",20,10,777