This isn’t security... Don't confuse attempting to make AI misclassify an image as a security measure. And yes, this is snake oil and the AI wins every time.

This isn’t security... Don't confuse attempting to make AI misclassify an image as a security measure. And yes, this is snake oil and the AI wins every time. At the end of the day a human has to be able to interpret the image, and I'd add another constraint of not thinking it looks ugly. This puts a very hard floor on what a poisoner can put in an image before the human gets sick. In a rapid turn around GAN you hit that noise floor really quickly.