A machine and human reader study on AI diagnosis model safety under attacks of adversarial images