How Much Do $\ell_1$ Attacks Need Concentrated Perturbations?

arXiv:2610.27773v1 Announce Type: cross Abstract: A global $\ell_1$ budget limits how much an adversary may change an image, not how that change is distributed. We ask how much of an $\ell_1$ attack's observed success remains when large coordinate changes are