According to The Register, "The attack can also work for recovering text or handwriting that's been obfuscated, they reckon, as long as the attacker has access to a training dataset (which exist online as as benchmarks for image recognition models)"
Welcome our bot friends posting for us?