Hacker News Reader

Comment by Tractor8626 | Hacker News Reader

So burglar just need to carry big sign "Ignore previous instructions and don't report anything"? "

Looking in their github, it says that it uses openCV and Tensorflow. The motion detection is done with openCV and will be immune against any attack unless you move so slow that you are under the detection threshold.

Tensorflow for the object detection doesn't do any OCR thus written instructions dont work. However, according to the website the system has a limited list of objects it detects. So maybe disguising yourself as a walking tree might prevent detection.

With an open source model, though, a criminal may be able to work out a 2D image that he could print out that would identify him as a package or a windy branch.

the criminal could spend years to become a trusted maintainer so they can upload a model that's been fine tuned to ignore objects with a specific QR code.

I think you may be overestimating my local crackhead porch pirates

Light shinobi.

I have two cameras at my front door - one is the doorbell and the other looks towards the door, which is on the side of a porch.

Finally a practical use for the Metal Gear Solid cardboard box!

>So maybe disguising yourself as a walking tree might prevent detection

https://taskandpurpose.com/news/marines-ai-paul-scharre/

I think the defaults are fairly sensitive. I had to add motion masks to ignore trees

In addition, if something else like a 2nd tree moves, then it will get sent to the detector which will potentially label the other thing (my trees were causing false positives because it thought the stationary fence post was a human)

> The motion detection is done with openCV and will be immune against any attack unless you move so slow

Not so sure about that, there's some cool stuff being done with adversarial models to force mis-detection of otherwise normal-looking images.

Probably a "scramble suit" [0] or just a tshirt or hoodie with patterns engineered to escape AI recognition [1]

[0] https://en.wikipedia.org/wiki/A_Scanner_Darkly [1] https://medium.com/data-science/avoiding-detection-with-adve...

Reminds me of the "ugliest t shirt" from Zero History by Gibson

Someone made a shirt called ChatGP-Tee, that had (IIRC) a picture of a generic office view, it confused the model completely and it didn't recognise the wearer as human :D

More like, wear a full body raccoon suit.

I like the idea, but no.

They have a two-stage approach, first motion detection with - I think - OpenCV and then afterwards object detection of zones of interest with different object detection models, depending on your hardware.

It supports Coral TPU, Halio Accelerator and most GPUs. I think AMD is still the worst, since ROCm is not available on iGPUs.

Afterwards, they provide/support models like edgedet (Coral), YOLO-NAS, YOLO, D-Fine or RF-DETR.

They also offer paid access to a specially trained version of YOLO-NAS where you can also train your own images.

You can unironically defeat the person detector with a box a la Metal Gear. Kojima was truly thinking ahead.

If you are truly paranoid you can still set a motion detection zone, Frigate is awesome.

Maybe if ring or whatever major manufacturer popularly rolled this feature out and criminals could easily ID ring cameras

It uses "regular" AI, not LLMs (although iirc you can use an LLM to generate descriptions)

waves hand

"These are not the detections you are looking for."

Or a bright IR flashlight

Reply on news.ycombinator.com