Researcher Hacks Self-Driving Car Sensors

An anonymous reader writes: Jonathan Petit, security researcher at Security Innovation, has created an electronics kit that costs only $60, which can flood LiDAR sensors on self-driving cars with a laser beam that contains fake data, making them think they have objects in front of them. This forces the self-driving car to slow down and sometimes abruptly stop. Affected cars include all manufacturers that deploy LiDAR sensors. As of now, Google and Apple are affected. According to this article, so may be Toyota's upcoming car.

Comments

Re:Yet another attack vector

[Derekloffin]

Indeed. While this might be interesting in the future, as is it is kinda a 'so what' kind of thing. Human drivers are even more easy to disorient and in generally far more seriously, and the car is just slowing down or coming to a halt, something you can also accomplish with putting a cheap obstacle in its path. Now, if they can get it to speed up or ignore obstacles then that would be concerning.

Re:Thats the usual problem with any radar system.

[arglebargle_xiv]

Nearly all of them (from sonar, radar, lidar...) all are susceptible to various interference techniques.

For LIDAR it's actually not that hard to counter, instead of emitting a continuous series of pulses you emit a pseudrandom sequence. Anything that comes back that's out-of-sequence gets rejected. Since the attacker can't predict the sequence, they can't send back fake signals in the same order (assuming you're not using a crappy random number generator).

Friendly vs. unfriendly environment

[gweihir]

Ordinary engineering and typical engineers assume a friendly environment, i.e. the absence of intentional sabotage and hacking. This state of affairs is not true with globally networked infrastructure and sensors operating outside of protected spaces. What these people lack is what Bruce Schneier calls "the security mind-set". It involves not only thinking about how things can be made to work, but also how they can be intentionally broken and subverted. Having it is critical. That most people designing software and software-driven systems these days do not have it the main reason why IT security is in such an abysmally bad state these days.