As you store more <vector,scalar> associations using a dot product with a weight vector the larger the angles to the weight vector and the larger the length of the weight vector. Hence one attack is to input a vector pointing in the same direction as the weight vector to get an extreme response. Similar to supernormal stimuli in biological neural networks AI462 neural networks.
@hoaxuan7074