Creating adversarial attacks in the physical world is much harder than the digital world, as it requires accounting for variations in viewing distance and angle. Adding preservation to digital images is a common tactic for generating adversarial attacks, but physical attacks must be more carefully crafted.