the Uber incident investigation showed how a continuous input generated wildly varying output in practice. in theory the existence of adversarial images and adversarial training has been studied for a while, but the state of the art can still produce singularities around continuous inputs.

start here: https://arxiv.org/pdf/1312.6199.pdf