Recognizing objects in adversarial clutter: breaking a visual CAPTCHA