Along the lines of adversarial inputs, how hard do you think it would be to construct a test page to determine if a machine is affected? Such as front loading m

Along the lines of adversarial inputs, how hard do you think it would be to construct a test page to determine if a machine is affected? Such as front loading most of the page with 8's and then putting some patterns of 6's and 9's. Confirmation is overlaying the copy on the original, and seeing where it differs. Similarly for this approach, it looks like it does a great job, but some simple image processing would help smooth out the noise of the "traditional" pipeline and provide at least a more mathematically deterministic output. On the other hand, this points out that our brain only really cares about a few bits of information out of an image (e.g. the title of the book is readable in the processed image). So if it fills in the dark portions of the image with junk data, perhaps it isn't all that bad in practice.