deflock.me

553 readers

359 users here now

Automated License Plate Readers (ALPRs) are AI-powered cameras that capture and analyze images of all passing vehicles, storing details like your car’s location, date, and time. They also capture your car’s make, model, color, and identifying features such as dents, roof racks, and bumper stickers, often turning these into searchable data points. These cameras collect data on millions of vehicles—regardless of whether the driver is suspected of a crime. While these systems can be useful for tracking stolen cars or wanted individuals, they are mostly used to track the movements of innocent people.

Learn more at deflock.me

founded 11 months ago

MODERATORS

cm0002@sh.itjust.works

cm0002@infosec.pub

Can Flock cameras and similar camera networks be tricked with projected images/video? (lemmy.world)

submitted 3 days ago by GamingChairModel@lemmy.world to c/DeFlock@sh.itjust.works

5 comments fedilink hide all child comments

In recent years, I've seen people use projectors at night to protest policies: projecting slogans, images, etc., using a normal projector against the wall of the target of a protest (embassies, government buildings, prisons/detainment facilities, corporate headquarters, etc.).

Here's an example, but I've seen lots of other examples. And even outside of protest, people have been doing ridiculous things with 3D projection, like this guy animating a hotel cuck chair (SFW).

This got me to thinking: if the image recognition of Flock and similar cameras is just an AI image recognition function (using ImageNet or something like that) being run on captured video, what's stopping people from projecting false data onto streets and sidewalks in a way that tricks the Flock camera into recording false people/vehicles in places where there was no person/vehicle? Including fake license plates, etc.?

Seems like an attack vector for some kind of denial of service attack, like putting fake faces and license plates all over.

Is there anyone doing this? Would it be possible, at least at night, for certain camera locations and angles?

you are viewing a single comment's thread
view the rest of the comments

[–] dr_yeti@lemmy.world 6 points 3 days ago* (last edited 3 days ago) (1 children)

I don't know about projection, but adversarial patterns on cars and clothes are one way to trick these systems. Benn Jordan has done some work on plate decals that make cars difficult to parse by plate readers (eg Youtube video). Bill Swearingen is developing adversarial clothing (eg his kickstarter). 'Adversarial pattern' or 'adversarial clothing' are good search terms if you're interested.

Edit: These guys are working with a heat-sensitive patch that powers up in a minute, then provides adversarial patterning in visible and infra-red. That's maybe closer to what you had in mind.

[–] pammyfromthesticks@mander.xyz -1 points 3 days ago

Anything but over throw your goverment