Researcher Hacks Self-Driving Car Sensors
An anonymous reader writes: Jonathan Petit, security researcher at Security Innovation, has created an electronics kit that costs only $60, which can flood LiDAR sensors on self-driving cars with a laser beam that contains fake data, making them think they have objects in front of them. This forces the self-driving car to slow down and sometimes abruptly stop. Affected cars include all manufacturers that deploy LiDAR sensors. As of now, Google and Apple are affected. According to this article, so may be Toyota's upcoming car.
Throwing a puppy in front of the car will also achieve the same result.
Nearly all of them (from sonar, radar, lidar...) all are susceptible to various interference techniques.
The only ones that exist that I'm sure are NOT directly affected are used by whales, dolphins, bats... They can be overpowered causing problems... but at the operational strength none seem affected even though they are using the same frequencies.
Even normal drivers are affected by having lights shined into their eyes... (which happens to be why it is illegal to aim laser pointers at aircraft or cars).
Great. I now know that a company called ‘security innovations’ is basically a front for a bunch of marketing and PR muppets who will sell you some snake oil attached to whatever is the latest media feeding frenzy using fear and misinformation.
I could go down to my local motorway junction with a pocket full of laser pointers right now and cause a whole lot of human-driven cars to have to slow down and enter a safety mode. I'm pretty sure I would get arrested for doing this, and I doubt the outcome for someone doing this to driverless cars will be any different. No doubt it will be drones with lasers next week.
You can buy a simple point laser for less, for hacking the visual systems of the human driverâ"hopefully making the driver stop, but maybe at times not.
But the attack itself seems interesting, though it seems it is possible to fix the issue with new hardware. Good research!
[citation needed]
At this point, Apple's auto project is still officially rumor and the idea of it being self-driving, and using LIDAR technology, has not been confirmed either.
Hopefully not with puppies! But you can just imagine kids pissing about pushing stuff in front of self driving cars and watching them do an emergency stop then just standing in front so it won't move and giving the occupants the finger. And to anyone who says they won't - kids already play chicken with human driven cars.
So LiDAR sends out a laser beam, then looks at reflections. It makes sense this can be flooded - just pick up the signal and send it back amplified, and it seems there's something really close. I assume at least they're looking for brightness rather than timing (distance travelled is very short and light is very fast) to determine the distance of an object.
This makes me wonder. Would it be possible for cars to pick up signals from other cars, and react to them?
Anything to prevent this from happening - and so also prevent such a disturbance attack from working?
These are no reason to stop for this confused signal, while a puppy is a real reason. The two situations are thus not comparable.
To be clear why, what if the signal is not of malicious intent? What if its a laser from another self driving car? What if its a laser used for other purposes? Like 3D mapping, lights shows or games?
So they have to encode their signals so they can tell their signals from others signals.
It's possible to stop trains with even cheaper kits, and this hasn't been a major problem.
This sounds less dangerous than throwing a rock off a bridge.
So he floods the sensors with bad data, and the car stops safely...what is the issue here exactly?
Guy wastes his time developing a high tech way of making the car stop, when much simpler and cheaper ways are available?
Yep same thing, this is not news worthy.... File this under obvious.
It's a tech-specific site, could we at least use tech-specific jargon correctly?
Hacking implies breaking into or somehow achieving a level of control. He didn't do that at all, he merely confused the sensors with a false-positive return, something long-since know in the elint world as "spoofing".
This researcher "hacked" nothing, he "spoofed" them.
-Styopa
In other news, screaming into someone's ear when they're not expecting it might just make them jump.
We're headed towards the age of "push-button pile-ups". (There, I coined a new phrase. Now go viral).
Ordinary engineering and typical engineers assume a friendly environment, i.e. the absence of intentional sabotage and hacking. This state of affairs is not true with globally networked infrastructure and sensors operating outside of protected spaces. What these people lack is what Bruce Schneier calls "the security mind-set". It involves not only thinking about how things can be made to work, but also how they can be intentionally broken and subverted. Having it is critical. That most people designing software and software-driven systems these days do not have it the main reason why IT security is in such an abysmally bad state these days.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
They forced a self driving car to stop, wow. Is it any harder to blind a human driver causing him to hit the breaks?
Use a search light or lasers, or a pretty woman flashing her breasts.
This is hardly a "hack" and definitely not a weakness of self driving cars compared to the human variant.
Just put tinfoil over your sensors. Problem solved.
You can buy those to flood the front of your car to screw with police LIDAR so they cant get a reading on you or they only read 0. Except mine has a 1 mile range.
for $60, is he doing it from 1 mile down the road? I bet his only works from a hundred feet away.
Do not look at laser with remaining good eye.
It would be trivial and cheap to halt these cars - a box, a trash bag, or a bit of carpet would probably do the trick for $0. A fact which I'm sure criminals would soon figure out, assuming such vehicles ever see the light of day.
Any vehicle with an OnStar system provides the means to remotely disable it.
Manual car sensors can also be hacked! Shining bright lights at the windshield, especially in nighttime driving conditions, incapacitates the optical sensor of a manually-driven car. Worse, unlike self-driving cars, manual cars behave erratically or unpredictably in these conditions. Even worse, all cars are equipped with hardware that can generate these bright lights, meaning that any car can attack any other manual car in vision range.
Cars are doomed!
Comment removed based on user account deletion
Its the standard business versus technology model: Rush to market THEN consider the security and privacy implications.
Not sure how affected Google is going to be given Ray already knows about this,
http://www.kurzweilai.net/new-...
http://www.nature.com/articles...
Throw a basketball at LiDAR -based car, or even a "traditional" human-operated one, and they both will see an object coming at them at a high rate of speed. If I write an article about it, will Slashdot post that, too?
A puppy is a real reason to stop, or swerve, only if you can do so safely.
You should always be driving safely, which is to say defensively. Riding a motorcycle for a while soon knocks this habit into you.
To have a right to do a thing is not at all the same as to be right in doing it