Urban sql injection
seanbonner.tumblr.com
seanbonner.tumblr.com
The second frame is telling a particular (valid) polish license plate number to slow down.
Google translate is great but I didnt cheat, I wrote that myself. (http://translate.google.com/#auto|en|).
I think its interesting that in the beginning I assumed this was an american car/place because the SQL statement is in Eglish but in computer language, the reserved statements are English, even though this car in the picture is from Poland.
Of course, the whole thing is meant as a silly joke (and that's one of the reasons I wish it wasn't posted here). It's unlikely that the camera would recognize something that's so obviously different from a license plate, let alone use a SQL database.
I'd love to see a real discussion on how the ubiquity of computers creates interesting vectors for attacking infrastructure. It seems inevitable that these systems will be connected to higher-value targets and that non-traditional input devices can still be used for launching attacks.
The more interesting question is whether YOU would've thought to sanitize license plate input?
Edit: Author's original post: http://dabroz.scythe.pl/2009/10/29/ocr-injection [English]
As reported by the driver, the 1994 national road safety camera mounted was interesting: http://niebezpiecznik.pl/wp-content/uploads/2009/10/radar-40...
The camera scans car number plates in excess of the speed, and a few dozen meters away, a special table shows the following message: http://niebezpiecznik.pl/wp-content/uploads/2009/10/radar2-4...
I wonder what happens when the national road 94 driven into the car http://niebezpiecznik.pl/wp-content/uploads/2009/10/radar3-4...
P.S. The whole reminds me of an old strip xkcd: http://niebezpiecznik.pl/wp-content/uploads/2009/10/xkcd-450...
Drivers report that an interesting radar camera has been installed on Rt. 94.
The camera scans license plates of cars that exceed the speed limit, and a few hundred feet further there's a special display that shows this:
[DW 530GS SLOW DOWN]
I wonder what will happen when a car like this drives down Rt. 94?
The whole thing reminds me of this old XKCD strip
Yeh its like Rt. 94 http://maps.google.com/maps?f=q&source=s_q&hl=en&...