Fooling and Stealing Models Through Their Inputs