Batches of 100 are the maximum for M-CT and T-Lex, but we go up to 1000 with A-CT. As expected, the performance of the classifiers trained on individual tweets is poor (see Figure 1).
as all linguistic stegosystems rely on automatic paraphrasing, and generally require a source of data, it is conservative to assume that the attacker has access to this data source.