Tiny changes can make image recognition systems think a school bus is an ostrich, find scientists.