Probably referring to this section.
Images can also be manipulated this way so that the model sees a completely different image than the human.
Probably referring to this section.