Earlier quoted context omitted.
Something like flipping a pixel would work if you manipulate the actual image (raw image) being fed to the software. Here it is captured via a camera and then fed to the software and I doubt pixel level details are captured by a camera
I don't mean literally flipping pixels, but subtle changes in the image that cause a misclassification. See this post for examples: https://pyimagesearch.com/2020/10/19/adversarial-images-and-... .
Yes, I had a sense for what you were referring to and my reply was geared towards that. Not just flipping pixels.