Before revision:  Extensive experimental results and human studies show that AdvCodec generated adversarial text can successfully attack the neural models without misleading the human.
After revision:  Extensive experimental results and human studies show that T3 generated adversarial texts can successfully manipulate the NLP models to output the targeted incorrect answer without misleading the human.