While adversarial attacks have been proven effective in digital domains, few articles have shown the potency of such approaches in the physical world. Recent advances like the adversarial eyeglasses (Sharif et al., 2016), patch (Brown et al., 2017), and turtle (Athalye et al., 2018) generate physically realizable adversaries but have…