Comment by etaioinshrdlu

This book featured adversarial inputs to the human neural network long before deep learning was cool.