Wow I've read about adversarial images before but didn't think attacks would be this practical. It's weird to think that the added smudges have any relevance on

Wow I've read about adversarial images before but didn't think attacks would be this practical. It's weird to think that the added smudges have any relevance on the result when there is so much contrast. It appears easy to us because we're constantly training, cross-checking, and adjusting to conditions without much conscious interference. At some point, not now, we will accept what the machine says. Machines will be better (faster and more accurate) at number recognition than us. But this paper shows how far behind they are still. In the context of cars I think the machines will just refuse to drive like we do. They (really their builders) will demand much better controlled conditions to operate safely.