multi-modal retrieval

We show that any image or audio input in a multi-modal retrieval system can be turned into an adversarial hub that is retrieved for thousands of unrelated queries, and that standard hubness mitigations do not defend against it.