On the Geometry of the Latent Space of Deep Generative Models
Adversarial vulnerability for any classifier