Relating Implicit Bias and Adversarial Attacks through Intrinsic Dimension