A cybersecurity researcher covered a Toyota in an AI-generated pattern to confuse Flock cameras

https://www.techspot.com/news/113418-cybersecurity-researcher-covered-toyota-ai-generated-pattern-confuse.html

550 points · 102 comments · view on lemmy.world

102 Comments

callous_trog@lemmy.zip · 137 pts · 2d (18 replies)

Seems like a great way to get rear ended by a Tesla autopilot driver.

nymnympseudonym@piefed.social · 102 pts · 2d (9 replies)

Seems like a great way to get an insurance payout from a Tesla autopilot driver.

AgentSeven@lemmy.zip · 36 pts · 2d (6 replies)

Except insurance has basically decided it doesn't need to actually pay for the most part.

WhyIHateTheInternet@lemmy.world · 23 pts · 2d (4 replies)

At some point people are just going to roll the dice on this bullshit. If they aren't gonna pay out when they should why are we even paying them? This seems incredibly criminal to deny payment while accepting increasing payments.

Malyca@lemmy.zip · 35 pts · 2d (2 replies)

Wait till you hear about health insurance

WhyIHateTheInternet@lemmy.world · 7 pts · 2d

You're right, I should've waited... This is fucked.

baines@lemmy.cafe · 4 pts · 2d

seems like a plumb er solution

Passerby6497@lemmy.world · 6 pts · 2d

If they aren't gonna pay out when they should why are we even paying them?

Because you can end up losing your car, being fined thousands of dollars, or in jail for driving without insurance. The fact the peasants get no value from it isn't important, you better keep paying!

LodeMike@lemmy.today · 10 pts · 2d

The figures don’t mean insurers rejected nearly half of otherwise valid claims. Claims can close without payment because another insurer covered the loss, a customer withdrew the claim, damages fell below the deductible or the loss wasn’t covered by the policy.

You can't just say this shit and then just dismiss it:

Still, the increase suggests motorists face greater scrutiny when seeking compensation for some of the most complicated and costly types of auto claims.

chiliedogg@lemmy.world · 19 pts · 2d (1 reply)

You don't need dazzle paint to get hit by a Tesla.

I live in an area where Tesla and Waymo both operate taxis. Waymo is actually pretty solid. Those cars are some of the best, most-predictable drivers on the road. Tesla cabs are meth-addicted clankers.

Frenchgeek@lemmy.ml · 3 pts · 2d

The car reflect the owner?

kamee@lemmy.zip · 29 pts · 2d (5 replies)

autopilot driver

CmdrShepard49@sh.itjust.works · 18 pts · 2d (4 replies)

Dude's probably on his way to the ATM machine

daychilde@lemmy.world · 19 pts · 2d (3 replies)

Quick! What's his PIN number‽

fleem@piefed.zeromedia.vip · 6 pts · 2d

nobody got it smh my head

nymnympseudonym@piefed.social · 5 pts · 2d (1 reply)

He's a geek. It's either 2112 (Rush) or 1701 (Star trek)

TheLightItBurns@lemmy.world · 5 pts · 2d

Don't forget 0451 if they are an In-Sim game nerd!

Evotech@lemmy.world · 20 pts · 2d (1 reply)

Free money glitch

WhyIHateTheInternet@lemmy.world · 3 pts · 2d

It's not a bug, it's a feature.

dwalin@lemmy.world · 112 pts · 3d (2 replies)
muzzle@lemmy.zip · 46 pts · 2d (1 reply)

I think the correct xkcd for this arms race is: https://xkcd.com/3167/

Funwayguy@lemmy.world · 80 pts · 3d (16 replies)

This approach only works in daylight with cameras that rely on colour only. Infrared spectrum cameras such as what Australia uses on mobile phone traffic cameras are much harder to deal with. Patterns don't cut it and it's a huge part of military research into hiding vehicles from infrared spotters.

Disabling the cameras entirely is much more effective.

nymnympseudonym@piefed.social · 19 pts · 2d

DO BOTH

(defense in depth)

4am@lemmy.zip · 13 pts · 2d (10 replies)

Can’t you make patterns in infrared reflective paint?

ag10n@lemmy.world · 10 pts · 2d

Here comes the sun, do do do do

lemmyvore@feddit.nl · 8 pts · 2d (2 replies)

No need, you can just use an IR spotlight to blind the camera. Unlike the military you're not trying to hide the vehicle.

But either way you're actively trying to avoid being picked up by speed cameras so you get a fine.

xthexder@l.sw0.com · 26 pts · 2d (1 reply)

This isn't about speed cameras, it's about "safety" surveillance cameras. No laws have to be broken. Evading Flock isn't illegal

mangobanana@discuss.online · 10 pts · 2d

*yet

Cocodapuf@lemmy.world · 1 pts · 2d (5 replies)

Not really. We don't have materials that absorb or reflect infrared light. It's one of the reasons it's hard to beat inferred-guided (heat seeking) missiles, the only real solution is to drop something hotter than your plane, aka a flare.

So... get ready for a new era of commercial automotive flares I guess?

Eheran@lemmy.world · 3 pts · 2d (3 replies)

You are mixing different types of IR and on top are wrong for both cases too. We have materials for both NIR and thermal IR that absorb or reflect them.

Cocodapuf@lemmy.world · 1 pts · 2d (2 replies)

I've been wrong before, this wouldn't be the first time. But what part of it was wrong? Genuinely, can you clear it up?

As far as absorbing IR light, I'm not even sure how that would work, wouldn't it just be emitted again as heat?

Eheran@lemmy.world · 1 pts · 14h (1 reply)

So if we focus on thermal IR: shiny metal surfaces hardly emit or absorb it. A black surface emits and absorbs as much as possible. We quantify this via the emissivity (and also reflectivity, shiny metal is a mirror). Emissivity of 1 = theoretical maximum of a prefect absorber/emitter (both are directly linked), everyday stuff like skin or wood is about 0.95, shiny metal surfaces roughly 0.1, a rusty or painted surface again about 0.95.

You only emit and absorb the same in thermal equilibrium. If the surface is hotter, it emits more. If it is colder, it absorbs more.

Cocodapuf@lemmy.world · 1 pts · 3h

So with that last part, I get that in theory, but practically, you can only really absorb IR temporarily, right? Because it all gets released again as heat eventually. Like, say you have a mostly inert object, that isn't creating any meaningful amount of heat. If you hit that object with 10 joules of thermal IR, over time, wouldn't nearly all of that energy be either reflected or emitted off it as IR radiation?

anonymouse2@sh.itjust.works · 1 pts · 2d

What if I just hold a sparkler out my window?

MangoCats@feddit.it · 9 pts · 2d

For IR you can feasibly run IR dazzle lights all over whatever you want to mask, including your face.

gothic_lemons@lemmy.world · 5 pts · 2d

Dumb question I have no idea how infrared light works and cameras. But what if my license plate was just constantly firing infrared light to counter act or "blind" the cameras?

ReignOfTerror@lemmy.world · 1 pts · 2d

I wonder if those cameras stop working if you have the new IR blocking window tint that keeps the suns heat out but are otherwise clear. Would the camera just not be able to see inside the car at all?

partofthevoice@lemmy.zip · 1 pts · 2d

Are infrared cameras only detecting the vehicle or are they getting the license plate too?

DarrinBrunner@lemmy.world · 31 pts · 2d (2 replies)

A fun experiment, but the real solution is preventing all the shit in the first place by government regulation.

I saw a post yesterday with practical suggestions about how to move that process along.

BananaIsABerry@lemmy.zip · 13 pts · 2d

The same governments that are pocketing the sweet Flock dollars to ignore public opinion?

explodicle@sh.itjust.works · 1 pts · 1d

We should just deregulate cutting them down.

einkorn@feddit.org · 27 pts · 3d

Fighting fire with fire.

blitzen@lemmy.ca · 24 pts · 2d (5 replies)

My solution so far is a bike rack that blocks my plate from view. Easy enough to feign ignorance and “correct it” in the moment. Flocks database no doubt has an entry for [color][make][model], but at least it’s not associated with me directly through motor vehicle bureau records.

ayyy@sh.itjust.works · 10 pts · 2d (1 reply)

I’m pretty sure based on previous reporting that they will just track you as “blue car with this specific model of bike rack”.

blitzen@lemmy.ca · 3 pts · 2d

I am sure of that too. Best I can do is try to avoid linking it to my name.

flandish@lemmy.world · 7 pts · 2d

adding it also logs your phone, earpods, etc signals alongside the car’s data.

plateee@piefed.social · 5 pts · 2d (1 reply)

Are you in one of the nice states that doesn't require front license plates?

blitzen@lemmy.ca · 4 pts · 2d

I am not, but no one seems to give a shit.

DarkFuture@lemmy.world · 22 pts · 2d

I'm not a big fan of adapting to fascism, but sometimes you gotta do what you gotta do.

Cocodapuf@lemmy.world · 21 pts · 2d

Have they tried painting a fire hydrant a truck and and a bicycle on the back? Let's test if these cameras are a robot or not.

Cocodapuf@lemmy.world · 18 pts · 2d

To me, this looks a lot like taking one dose of a prescribed antibiotic. All it really succeeds in doing is training dazzle resistant strains of cameras.

Trying to trick the cameras is playing into an expensive game of cat and mouse. And sure, fine, that may work for a little while, but it's not a solution.

PattyMcB@lemmy.world · 15 pts · 3d (6 replies)

Spend a large sum (for some) of money to make my vehicle look stupid vs. they can fuck off with their privacy-invading cameras.

I prefer "they can fuck off"

glimse@lemmy.world · 12 pts · 2d (5 replies)

I mean at least they're trying..? Your alternative isn't really a solution

Spend a large sum of money on a suit of armor vs. they can fuckin stab me

I prefer "they can fuckin stab me"

daychilde@lemmy.world · 1 pts · 2d

I prefer “they can fuckin stab me”

Well, alright… :grabs a stabby:

;-)

PattyMcB@lemmy.world · -3 pts · 2d (3 replies)

No... it's actually "stick your knife up your ass instead of into me"

glimse@lemmy.world · 10 pts · 2d (1 reply)

They are still tracking you. This guy didn't opt in to be tracked so he could give the car wrap a try.

Unless you're implying you'd destroy the cameras. In which case, that wasn't clear but I wholly support it

PattyMcB@lemmy.world · 1 pts · 2d

I would never destroy that poor company's property!

jdr@lemmy.ml · 1 pts · 2d

Oh, ok, sorry

Tylerdurdon@lemmy.world · 15 pts · 3d (14 replies)

Should have done random license plates

crank0271@lemmy.world · 29 pts · 3d (7 replies)

From this bit in the article:

The pattern does not stop a camera from recording. Instead, it is designed to prevent the software connected to the camera from recognizing what it sees. A person or car wearing the pattern would still appear in the footage, but the detection system may not flag it as a person or vehicle.

I wonder if these systems won't "notice" and record the license plate on its own if they don't think there's a vehicle present.

Steve@startrek.website · 15 pts · 3d (4 replies)

Detected smudge with license plate. SWAT team has been dispatched.

otacon239@lemmy.world · 7 pts · 3d (2 replies)

That’s the trick, though. With these patterns, the camera doesn’t even recognize that there’s a car there at all.

Steve@startrek.website · 3 pts · 2d (1 reply)

Would it read a license plate if you set it in the bushes?

frongt@lemmy.zip · 8 pts · 2d

There's an idea. Start putting fake license plates everywhere to poison ALPRs.

nymnympseudonym@piefed.social · 1 pts · 2d

"Let's hear it for the vague blur" -p k dick, A Scanner Darkly

CmdrShepard49@sh.itjust.works · 9 pts · 2d (1 reply)

More likely is that these companies will just update their models to identify these vehicles once again. Furthermore, patterns like this make the car really stand out from the crowd which is a terrible way to disguise yourself.

nymnympseudonym@piefed.social · 4 pts · 2d

Correct. The arms race of evolution never stops. Eternal vigilance.

RaoulDook@lemmy.world · 11 pts · 2d (2 replies)

Benn Jordan did a video on that, he was able to add patterns of stuff to make plates unreadable by ALPR systems. He didn't share the pattern for people to use as it may be illegal, but you can see it in the video

Tylerdurdon@lemmy.world · 10 pts · 2d (1 reply)
RaoulDook@lemmy.world · 5 pts · 2d

Yep, about 23.5 minutes into that one

acosmichippo@lemmy.world · 1 pts · 2d (2 replies)

it’s illegal to reproduce/mimic license plates.

nymnympseudonym@piefed.social · 8 pts · 2d

Interesting. I have this Tshirt from a few years ago.

image

The vendor's website still has anti-AI patterns, but removed the license plates prints.

https://adversarialapparel.com/products/deception-mosaic-anti-surveillance-t-shirt-advanced-deception-clothing

Cricket@lemmy.zip · 3 pts · 2d

Where and under what circumstances? Do you have a link for more information? In my US state, I see reproduced license plates (i.e., not the original state-issued metal ones) all the time. Like stickers, e-paper (I think?), etc.

decolo@piefed.social · 11 pts · 2d (5 replies)

now find something that stops it from reading Bluetooth and other RF signals. I wonder if anyone has acquired one for security research

deliriousdreams@fedia.io · 7 pts · 2d

It would be simpler to just overlay Bluetooth or RF signals it can read with signals so numerous and strong that it is overwhelmed. The main problem with that is the size of the hardware you'd need.

You could pull the 20 phones in a trench coat thing that one guy did to create "traffic jams" where there were no cars.

Axolotl_cpp@feddit.it · 3 pts · 2d (3 replies)

RF shields already exist, so you could in theory cover the car with it, it could be a problem tho since you can't really do calls and listen to the radio anymore but i guess you can just put an antenna

maturelemontree@lemmy.zip · 3 pts · 2d (1 reply)

That and for it to actually work you'd have to cover your windshield and other windows.

Axolotl_cpp@feddit.it · 2 pts · 2d

I meann, is it necessary? Bluethoot is already weak, i feel like that without covering windshield and windows it wouldn't be strong enough to be detected outside

cmnybo@discuss.tchncs.de · 3 pts · 2d

Just put the phone in a Faraday cage and turn off the bluetooth devices. You will need an older car without bluetooth and telemetry built in though.

Gork@sopuli.xyz · 11 pts · 3d

Give 'em the ol' Razzle Dazzle

REDACTED@infosec.pub · 7 pts · 2d (4 replies)

For some reason I imagined a car covered (colored) in fake license plates

CmdrShepard49@sh.itjust.works · 8 pts · 2d (1 reply)

Seems like a good way to get stopped by police and have your car impounded.

XeroxCool@lemmy.world · 4 pts · 2d

Car enthusiasts seem to get away with alternate plates around me. Sometimes plates from the manufacturer country, sometimes decorative plates resembling the local jurisdiction but being the car's name or year/model. Either there's nothing specifically against additional plates that are clearly "novelty" items or my local police just don't care. Now, if they're legitimate government-made plates, I'd bet you'd run into issues.

I'm sure you could add something that expands your plate info, but I can't see a solution that keeps your true plate visible (to avoid direct police activity) without also keeping your actual plate number as part of the character string associated with your vehicle. I do recall reflective letters being sold at one point to defeat standard speed/light cameras (plate is reflective by default, characters are not). But, still, with all the extra details the system logs with y/m/m/c, stickers, attachments, and damage, I regrettably don't see this being especially effective. But, I suppose, it has a chance to keep your unique vehicle unassociated with government records.... For now.

AgentSeven@lemmy.zip · 5 pts · 2d (1 reply)

Probably better to be able to just hide your plate at will.

Manjushri@piefed.social · 2 pts · 2d

Lol. Those flock cameras must be sending out a recognizable signal, right? Link this to a detector and it could automatically hide your plate when a camera is in range and then flip it back when. You leave range.

boonhet@sopuli.xyz · 4 pts · 3d

I wonder if that dazzle camo used by manufacturers for testing prototype cars would work. I wouldn't mind getting something like that on my car

lastlybutfirstly@lemmy.world · 4 pts · 2d

I wonder if WWI dazzle paint designs would work too.

artyom@piefed.social · 4 pts · 3d (2 replies)

Did he cover the license plate in a pattern as well?

PattyMcB@lemmy.world · 3 pts · 3d

Not in the article photo

jaybone@lemmy.zip · 2 pts · 2d

On the Internet, no one knows you’re a pattern.

SalamiDommie@lemmus.org · 4 pts · 2d

Looks like Donut Media. A YT car channel I once live that sucks because they sold off to an investment group. And the investment group is really really bad at the content.

ElcaineVolta@kbin.melroy.org · 4 pts · 2d

the future is hideous

perishthethought@piefed.social · 4 pts · 3d (6 replies)

(My ad blocker doesn't like *.techspot.com. Is it OK or are they shady?)

REDACTED@infosec.pub · 6 pts · 2d (4 replies)

It's quite popular tech-related news website. Been around for as long as I can remember and never really noticed anything shady. Not a single filter/AdBlock blocks it on my end.

perishthethought@piefed.social · 1 pts · 2d (3 replies)

Thanks. It goes in just fine on my desktop, so there's something else on my phone that didn't like it. Not sure what, all good for now in any case.

perishthethought@piefed.social · 2 pts · 2d (2 replies)

So, tried again in my phone and its uBlock Origin in Ironfox that's complaining. Odd, because I have the same extension in my desktop PC.

JtGtLhIsUq9XA4O.png

Axolotl_cpp@feddit.it · 3 pts · 2d (1 reply)

BadBlock+ on ironfox has given me various problems with legittimate sites too...is BadBlock actually bad?

perishthethought@piefed.social · 2 pts · 2d

I took a glance at the list in BadBlock+ and there are a ton of things I'm glad they're blocking, and a few that I am not. They have grafana.com in there, e.g. I intend to allow sites when needed but will keep the file in use.

shininghero@pawb.social · 1 pts · 3d

Hmm, opens fine with my adblocker. Does yours say which list is blocking them?

roguetrick@lemmy.world · 0 pts · 3d (1 reply)

Donut.

XeroxCool@lemmy.world · 2 pts · 2d

Yes. Donut, of Donut Media, the car-focused entertainment group partnered with this project.