Printed signs can hijack self-driving cars and drones
UC Santa Cruz researchers just revealed CHAI, an attack that manipulates autonomous vehicles using simple printed text in the physical world. By treating signs as direct instructions, vision-language models can be tricked into steering toward pedestrians or botching drone landings, achieving over an 87% success rate in real robot tests.