The second one, the "adversary" tries to accomplish the task of predicting formula_3, the sensitive variable, given formula_106 by modifying its weights formula_107 to minimize some loss function formula_108.