Downscaling Attack and Defense: Turning What You See Back Into What You Get