Figure 5. On the left, an image of >>74. On the right, the same image with our universal adversarial single bit flip applied, causing the image to be classified with 99% confidence as a cucumber by all thirty-nine selected classifiers. Of course, >>74 is actually a panda.