I wonder if it's possible for an attack like this to work against the human brain.
I'd bet they could be engineered to affect a higher proportion of the population.
I'd expect a malicious adversarial example to be more like the ones discussed in Snow Crash or BLIT ( https://en.wikipedia.org/wiki/BLIT_(short_story) )