How a Piece of Tape Tricked a Tesla Into Reading a 35MPH Sign as 85MPH
Apparently, a piece of electrical tape was put on a speed limit sign:
And this caused the sensor to misread it as "85" instead of "35."
I'm surprised that it would actually have to read signs. I thought all that information regarding roads and their speed limits would be in some GPS database. The company stated that in practice, they would not rely solely on the sensors to read signs:
I suppose another way to trick these cars would be to put a cardboard cut-out of a kid crossing the street in the path of an automated vehicle. The sensors would see it as a pedestrian and stop the car, and it would remain stopped until someone determined it wasn't a pedestrian or until someone moved it.
Researchers have identified a potential issue with sensors used in some older Tesla models that misinterpreted speed signs to read the speed limit as 50 miles per hour greater than the sign stated when a piece of electrical tape slightly obscured one of the numbers.
The issue was identified as part of 18 months of research by McAfee researchers Shivangee Trivedi and Mark Bereza, who sought to examine the ways that machine learning could potentially be exploited, specifically in the case of autonomous vehicles. Many autonomous vehicle suppliers use cameras produced by MobilEye to register the limits on speed signs, and McAfee researchers found that using stickers to slightly alter the appearance of the sign had the potential to interfere with the camera’s reading.
Apparently, a piece of electrical tape was put on a speed limit sign:
And this caused the sensor to misread it as "85" instead of "35."
I'm surprised that it would actually have to read signs. I thought all that information regarding roads and their speed limits would be in some GPS database. The company stated that in practice, they would not rely solely on the sensors to read signs:
Reached for comment, a MobilEye spokesperson told Gizmodo by email that stickers on the traffic signs “can confuse a human eye and therefore we do not consider this an adversarial attack.” While this may be true for the stickers that obscured the number, that’s not necessarily true for the electrical tape, which the researchers noted did not necessarily indicate to a human that the sign had been altered. However, the spokesperson added that the system was not meant to support fully autonomous driving.
“Traffic sign fonts are determined by regulators, and so advanced driver assistance systems (ADAS) are primarily focused on other more challenging use cases, and this system in particular was designed to support human drivers—not autonomous driving,” the spokesperson said. “Autonomous vehicle technology will not rely on sensing alone, but will also be supported by various other technologies and data, such as crowdsourced mapping, to ensure the reliability of the information received from the camera sensor and offer more robust redundancies and safety.”
The researchers commended MobilEye for apparent changes to its cameras and for looking to research to inform their product performance. They did note, however, that the camera that misclassified the speed limit is still present in a significant percentage of deployed Teslas. And while drivers are expected to still be alert behind the wheel of any semi-autonomous vehicle, history has shown that is not always the case.
I suppose another way to trick these cars would be to put a cardboard cut-out of a kid crossing the street in the path of an automated vehicle. The sensors would see it as a pedestrian and stop the car, and it would remain stopped until someone determined it wasn't a pedestrian or until someone moved it.