- Researchers demonstrate that misleading text in the real-world environment can hijack the decision-making of embodied AI systems without hacking their software.
- Self-driving cars, autonomous robots and drones, and other AI systems that use cameras may be vulnerable to these attacks.
- The study presents the first academic exploration of environmental indirect prompt injection attacks against embodied AI systems.
Photos
And it can’t even get the colour of the drone or number of propellers it has consistent between two panels