"Adversarial" communication with a CV model inference process isn't necessarily an attack because it is unintended by the humans associated with the process. It

"Adversarial" communication with a CV model inference process isn't necessarily an attack because it is unintended by the humans associated with the process. It is more akin to using the full range of an API that uses radiation instead of a network port. It could be used to stage a protest by stopping or slowing cars on a freeway or call attention to deteriorating infrastructure by inducing the car to go over potholes instead of avoiding them. Maybe a neighborhood could self-implement traffic calming measures that don't apply to emergency vehicles.