Slashdot Mirror


Researchers Discover How To Fool Tesla's Autopilot System (cnet.com)

An anonymous reader writes from a report via CNET: Researchers from the University of South Carolina, Zhejiang University and Qihoo 360 have discovered how to fool Tesla's Autopilot sensors, according to a report from Wired. The researchers were able to trick the system into thinking an object didn't exist when it did, and that an object existed when in fact it did not. Therefore, possible security concerns arise as Autopilot could drive incorrectly, potentially putting passengers and others in danger. CNET reports: "Two pieces of radio equipment were used to convince Tesla's radar sensor that a cart was not placed directly in front of it. One of those pieces, a signal generator from Keysight Technologies, costs about $90,000. The group also tricked the car's short-range parking sensors into malfunctioning using about $40 worth of equipment. Wired points out that this was, thankfully, a rather difficult feat. Most of the technological tomfoolery was done on a stationary car. Some of the required equipment was expensive, and it didn't always work. But it brings up an important point -- even though Autopilot is quite capable, there's still no substitute for an attentive human driver, ready to take control at a moment's notice."

21 of 177 comments (clear)

  1. Illusions by Anonymous Coward · · Score: 5, Funny

    Because it's so hard to make humans see or not see things.

    1. Re:Illusions by Guybrush_T · · Score: 5, Insightful

      This actually shows how great autopilot can be, especially if it combines a camera, radar, and other sensors, compared to humans who can be sooo easily defeated.

      But in any case, this is just about attacking a car : it is illegal. There are many other (cheap) ways to cause an accident : blow a tire, use light, fumes, oil, ice, or use a missile. If someone wants to attack a car, there are plenty of choices.

      Maybe the only difference here is that it may be hard to understand afterwards what happened. The secret services may like that.

    2. Re:Illusions by halltk1983 · · Score: 5, Insightful

      Yeah, like this car that crashed into a painted tunnel scene: https://i.imgur.com/mOTHgnfl.j... People make mistakes. Machines make mistakes, because people made the machines. It's good to improve the machines through testing like this, but let's be honest: the time when the machine is the better driver is fast approaching, especially considering the number of distracted drivers there are on the road.

      --
      Watch for Penguins, they eat Apples and throw rocks at Windows.
    3. Re:Illusions by jgriffith325 · · Score: 2
      1. If I have to give the car my full attention, why don't I just drive the damn thing?

      Drive one, then you'll understand. All my car has is adaptive cruise control. It reduces stress while driving significantly. Even just being able to rest your foot helps. I'll never buy another car without it.

    4. Re:Illusions by fluffernutter · · Score: 3, Insightful

      But if you relax that much you're risking getting into an accident. At least, I'd have to relax that much.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    5. Re:Illusions by Pentium100 · · Score: 2

      You can cut the brake lines or plant a bomb in any car, that will do the job quite well. You can also use a bigger car to ram the car off the road, it should also work.

      However, messing with the car using radio waves (be it confusing the radar, hacking via bluetooth or wifi or hacking the car via the internet) does not leave evidence. Or, at least does not leave any evidence that may be used to identify you.

      So, standing on a bridge and dropping bowling balls or bricks on cars, that are driving under the bridge for fun may get you in trouble. Sitting by the road (or traveling in another car) with an antenna (especially if the equipment and antenna can either be made small/inconspicuous or work from longer ranges) probably won't get you in trouble, since the radio waves do not have your fingerprints.

    6. Re: Illusions by Pentium100 · · Score: 2

      It will also look really suspicious to any bystanders. It may also not work as intended - the driver could have seen the obstacle before you turned on the light or he can use his hand to shield his eyes from the light.

      It will also be difficult to achieve this during the day with clear skies.

  2. How about humans? by roca · · Score: 2

    If you spent the same resources to fool a human driver, how hard would that be?

    1. Re:How about humans? by MightyYar · · Score: 3, Insightful

      I don't think you need to get very fancy... I would think a laser or extremely bright light bought from eBay would similarly blind a human "sensor".

      --
      W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
    2. Re:How about humans? by hawguy · · Score: 5, Interesting

      If you spent the same resources to fool a human driver, how hard would that be?

      Exactly, for far less than $90,000 you can set up a water curtain projection system that would fool any unsuspecting driver. Put one on a highway and show a film of an approaching wrong-way driving semi and let the hilarity commence.

      They are already used as hard-to-miss warning signs on some roads: https://youtu.be/Dk9DjO-_rT8

    3. Re:How about humans? by Tablizer · · Score: 2

      I almost flattened a pedestrian the other night who was wearing clothing that blended into the background. His pants were the same color as the road, and his shirt the same color as the foliage on the other side of the road, and he happened to be lined up so that his shirt boundary matched the road/foliage boundary of the other side of the street. The stealth was probably not intentional, but effective nevertheless.

      Reminds me of a prank where actors wore stripes that blended into the Abbey Road crossing, made famous by the Beatles. (Google & Bing failed me when I went to find it. Damn WebTubes!)

    4. Re:How about humans? by Solandri · · Score: 2

      The key difference is that any system designed to fool a human is blindingly obvious to any passerby. They will spot the danger, call the cops, and the device will be torn down, and the person behind it arrested if they're hanging around nearby.

      A system designed to fool radar or sonar or lidar can be invisible to people, and go unnoticed and undetected even after it's caused an accident. If it's a portable system (like mounted in a van), the perp can simply drive off. meanwhile it takes the cops, NTSB, and vehicle manufacturer weeks or months to pore over the data to figure out that spoofed data caused the autonomous vehicle's computer to get confused and do the wrong thing, by which time the perp is long gone.

  3. This is pseudo research/news by klingens · · Score: 2

    Of course you can trick any sensor invented by man some way or other. That's nothing new. We even know tons of ways to trick the sensors made by god/nature aka our eyes as well. Shine a bright light into them for $10 or maybe $100 and the driver will be forced to drive blind. Or you can have a $0 natural snow storm and the driver will also be on literally very dangerous ground: zero visibility and icy roads.

    The point is not that either can be fooled, the point is, is the mechanical sensor better or at least equal to mark I eyeball? Is the program doing the automatic driving at least as good as an average driver? as good as the best driver possible?

  4. This is stupid by AK+Marc · · Score: 3, Insightful

    Yes, someone going through great effort can cause a crash. I've know cases where people stoodn on overpasses and threw down bricks to cause crashes. Nobody published papers on the "brick loophole" in car security. In most of the examples, it'd have been easier to just cut the brake lines. But we have to target the sensors to get media attention, for a non-story.

  5. Re:It'd probably slam into a stealth fighter jet t by im_thatoneguy · · Score: 5, Funny

    Researchers discover that for $100 they can dig a hole, cover it with a thin layer of asphault and potentially kill a driver.

    In other news, researchers also discover that $3 hedge clippers can cut a brake line endangering drivers.

    Researchers discover that $10 high powered flash light carefully timed at a blind corner can confuse a human driver's imaging sensors.

  6. The researchers confirmed what Elon Musk has said by alphad0g · · Score: 2

    The last sentence sums up what Elon Musk has been saying about AutoPilot:

    "even though Autopilot is quite capable, there's still no substitute for an attentive human driver, ready to take control at a moment's notice."

    The technology is not called "self driving" - it is called autopilot. Similar to plane where course and speed are maintained. Tesla reminds users to keep hands on the wheel and remain attentive.

    No news here. Couple that with the cost of the hack, and there is not much to report. I could fool a real driver with mirrors and some Acme landscape canvas.

  7. Re:Who is more likely to be 'fooled'? by geekmux · · Score: 2

    It seems to me that the best choice is if both the human driver is paying attention and the autopilot is on.

    And how in the HELL do you figure that when the autopilot is going to make split-second sub-human decisions to react and manipulate a vehicle to dodge an imaginary object that the human can clearly see does not exist? By the time the human reacts, the autopilot may have already put them and others around them in considerable danger (like SLAMMING on the brakes to avoid an imaginary object on a freeway).

    Second best is the autopilot by itself (at least it can pay attention all of the time)

    And as these sensor hacks get fine-tuned, they will be able to fool the autopilot all of the time. No, this isn't the answer either.

    , and last is the human (who can both be fooled and be inattentive).

    Inattentive? Yes. Fooled by an imaginary invisible object? Highly unlikely.

    This entire proof of concept was to demonstrate that machine sensors are still not that intelligent, and can be fooled worse than a 5-year old.

  8. Perspective by HangingChad · · Score: 4, Insightful

    That it takes $90,000 worth of equipment and then always doesn't work right is pretty darn impressive to me. Where I live a good 30 percent of drivers are too old to be behind the wheel and another 10 percent are functional alcoholics. Share the road with south Florida drivers long enough and you'll be begging for autopilot.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  9. Re:It'd probably slam into a stealth fighter jet t by Applehu+Akbar · · Score: 3, Funny

    Basically.

    I was thinking more of painting the road lines into a rock wall, then painting a picture of a tunnel on said wall.
    (Then waiting for a roadrunner to come by)

    After all, Coyote v. Acme was this country's longest running product liability suit. Though the plaintiff, a partially disabled male Canis latrans, meticulously documented his problems with Acme's mail order line of bird-trapping hardware in a long series of filmstrips and videos, his evidence was leaked to the public, exposing Coyote to generations of ridicule. Most recently the Ninth Circuit sent the case back to lower courts, ruling that Coyote had no standing to invoke the Americans With Disabilities Act, since the ADA applies only to humans.

  10. Fortunately, a radar sensor won't be fooled... by GPS+Pilot · · Score: 2

    ... by a painted tunnel.

    --
    That that is is that that that that is not is not.
  11. Re:It'd probably slam into a stealth fighter jet t by Antique+Geekmeister · · Score: 2

    > After all, Coyote v. Acme was this country's longest running product liability suit.

    I don't see where he'd have standing to sue under the ADA in any case, since Wile. E. Coyote _won_ his lawsuit for manufacturing defects in 1990.

                            http://www.newyorker.com/magaz...