The “trick” was to add fake lane markings; did they test to see how many human drivers are susceptible to the same attack?