Discrete Point-Wise Attack Is Not Enough: Generalized Manifold Adversarial Attack for Face Recognition | Read Paper on Bytez