Adversarial examples are not bugs, they are features
Deconvolution and checkboard artifacts
Noise or signal: The role of backgrounds in image classification