Black-box Adversarial Attacks on Commercial Speech Platforms with Minimal Information.