The argument that there exists SOME mask which will transform a cat into a dog for humans and computers is not relevant to the discussion. The anatomical featur

The argument that there exists SOME mask which will transform a cat into a dog for humans and computers is not relevant to the discussion. The anatomical features of the face in this picture have changed. The reason adversarial attacks against ML are scary is very simply that you can accomplish them robustly in ways that humans won't detect simply by looking at the images. Obviously I can manipulate a picture of a cat to make it look like a dog.