Are adversarial example defenses improving?

Abstract: We (again) broke a large collection of published defenses to adversarial examples. Here's how and why....