On the Robustness of Dataset Inference