99.3%certainty for "gibbon"
How it works
Ian Goodfellow and colleagues showed this in 2014 with GoogLeNet. Before, the network saw a panda, 57.7 % sure. Then they added a tiny, deliberately computed pattern: per pixel about as much as the smallest step of an 8-bit image. To people the picture looks the same.
Not just on screen
Such tricks work in the real world too. One team 3D-printed a toy turtle whose pattern made a Google image recognizer see a rifle from every angle. Others altered stop signs so that a self-driving car misread them.
