MXXIV666

Isn't it possible to directly calculate what should a "not a human" pattern look like instead of using an adversarial network?

Of course, this is for a case where you know the structure and weights of the network you want to fool.