Zaslat SMS: On the hardness of robust classification