Disrupting Deepfakes with an Adversarial Attack that Survives Training. - Eran Segalis (CoRR, 2020)