Researchers fooled AI into ignoring stop signs using a cheap projector

A trio of researchers at Purdue today published pre-print research demonstrating a novel adversarial attack against computer vision systems that can make an AI see – or not see – whatever the attacker wants. It's something that could potentially affect self-driving vehicles, such as Tesla's, that rely on cameras to navigate and identify objects. Up front: The researchers wanted to confront the problem of digital manipulation in the physical world. It's easy enough to hack a computer or fool an AI if you have physical access to it, but tricking a closed system is much harder. Here's how your business can benefit from free citizen data Adversarial attacks and defenses today are predominantly driven by studies in the digital space where the attacker manipulates a digital image on a computer.