To 1 or to 0: Pixel Attacks in Image Classification