text: Query-specific gadgets. By default, our gadget generation method is query-independent and the same gadget can be used 
  to reroute any query. An adversary with more resources may instead generate a dedicated gadget for each query (using 
  the same algorithm). 
  
  Table 8 and Table 9 show the results for the white-box and black-box settings, respectively. (Here, percentage numbers 
  are not averaged and there is no standard error since we used a single gadget per query.) The white-box results are nearly 
  perfect; the black-box results are often better but sometimes somewhat worse than those for query-independent gadgets. 
  We conjecture that this is due to some level of overfitting. 
  
  11 