Chapter Fifteen. The Adversarial World.
When Someone Is Trying to Break It
Systems tested under normal conditions fail under adversarial ones. The
gap between those two states is exactly where the most serious
vulnerabilities exist.
In 2013, a research team at Google published a finding that briefly
stopped everyone in their track who read it carefully.
They had been working with image recognition systems that could look at
a photograph and identify what was in it with accuracy that matched