Somewhat confusing because it seems like they didn't test it against any actual self-driving car stack, just some kind of toy version? Who knows what context b

Somewhat confusing because it seems like they didn't test it against any actual self-driving car stack, just some kind of toy version? Who knows what context besides the actual sign itself is used to determine where to stop, for example. Maybe the line on the road, maybe map data, maybe the pole or the appearance of the intersection itself. Maybe the vision system is resilient to this attack in some other way. Maybe the system detects this state and has a fail-safe behavior. Anyway, interesting to research, but unclear how it affects production systems.