A short history of hacked billboards and road signs

Graham Cluley
Graham Cluley
@

 @grahamcluley.com
 / grahamcluley

A short history of hacked billboards and road signs

Hacked roadside billboards are in the news again, so it felt like a good time to take a look back on some of the more notable incidents that have caught the media’s attention in the past…

January 2009

No, you don’t have to worry about a botnet bombarding you. It’s zombies in Austin, Texas, you have to watch out for.

Zombie traffic

“ZOMBIES AHEAD”


May 2012

Practical jokers meddled with a a road sign to warn drivers of an invasion from Skaro’s much-feared tin pepperpots:

Sign up to our free newsletter.
Security news, advice, and tips.

Daleks ahead pic

“WARNING DALEKS AHEAD”


January 2015

It’s a new year, but mischief-makers have quickly forgotten their resolution not to f**k around with road signs.

At least they’re encouraging literacy…


May 2015

Hackers remotely attacked an electronic billboard display to show the obscene Goatse image (Don’t Google it. If you don’t know what Goatse is, consider yourself lucky. You’ve been warned.) to motorists and passers-by in the affluent uptown Buckhead district of Atlanta.


August 2017

Naughty Welsh hackers meddled with a billboard on Cardiff’s main shopping street, to display swastikas, far-right images, and Big Brother.

Hackers hijack central Cardiff billboard to display swastikas and more...

As Carole Theriault discussed on an episode of the “Smashing Security” podcast, the hackers seized control of the digital advertising display after stealing its TeamViewer login credentials and locking out its genuine operator.


September 2019

It’s not all zombies and porn, sometimes road sign hackers can comment on topical political news stories.

“IMPEACH THE BASTARD”


September 2019

And, back to porn again…

Drivers on the interstate in Auburn Hills, Michigan, were greeted by an eyebrow-raising sight: a pornographic movie featuring adult actresses Xev Bellringer and Princess Leia (with a possible bit part played by an unidentified gentleman).

Police posted video footage of two suspects breaking into a shed containing the computer which was controlling the billboard.

We discussed the whole sordid affair with the type of gravitas it rightly deserves on an episode of the “Smashing Security” podcast.

0:00
0:00 0:00
0:00
Show full transcript
TranscriptThis transcript was generated automatically, probably contains mistakes, and has not been manually verified.

So they were shaking hands, is what I'm understanding. Very vigorously agreeing with each other.

Graham

Hello, hello and welcome to Smashing Security episode 148. My name is Graham Cluley.

Carole Theriault

And I'm Carole Theriault.

Graham

And this week, Carole, we are joined by a terribly popular returning guest. It's Maria Varmazis.

Carole

Yes, I know. Yay.

Graham

Yeah. Hello, Maria.

Carole

Hey, Maria. It's been a while.

Maria Varmazis

It has. Hello.

Graham

It's very early in the morning for you. Tell me you have a cup of chaw in front of you or something.

Maria

I do, and it's in my Swear Trek mug.

Graham

Swear Trek mug?

Maria

Yeah. One of my very first picks of the week. But I ended up buying a mug from them because I love them so much. It felt apropos.

Maria

Apropos. Apropos. Totes apropos.

Maria

Oh.

Graham

Yeah, it's cool. But it can't take the heat.

Maria

All right. Interesting.

Maria

Yeah, well, can't take the dishwasher.

Carole

Thanks to this week's sponsors, LastPass and Immersive Lab. Their support helps us give you this show for free. Now, on today's show, Graham gives us an SFW look at a porn incident along an American highway. Maria muses on the latest in the deepfake, cheapfake space. And I'll investigate whether Amazon really is finally taking our privacy concerns seriously. All this and loads more coming up on this episode of Smashing Security.

Graham

Now, fellows, fellows, do you remember what you were doing? I'm not allowed to say chaps.

Carole

No, no, no.

Graham

Do you remember what you were doing in 1994?

Maria

Yeah, having a great time.

Graham

I'll remind you of a few things which were happening back then. Nancy Kerrigan got walloped on the knee. The ice skater got walloped on the knee.

Carole

Huge, huge in my world.

Maria

That was huge in my world as well. It was massive. Nancy Kerrigan was from where I'm from around here. So it was big local news. That was all I heard about.

Carole

Yep.

Graham

Of course, her arch rival Tonya Harding, her ex-husband, was the one who did it. There's a great movie about it.

Maria

That movie was good.

Carole

Yeah.

Maria

Yeah. Great movie.

Graham

Netscape Navigator was released.

Maria

Oh, bless it. That's the best way to be online R.I.P.

Graham

Some superb movies came out like The Shawshank Redemption, The Flintstones with John Goodman, and of course Maria, Star Trek Generations.

Maria

Oh yeah. Was that the movie? It's the one where Picard and Kirk meet up.

Graham

I remember seeing that one. Malcolm McDowell is a bad guy isn't he?

Maria

Yeah it was weird. It's not a great movie.

Graham

It's not a good movie.

Maria

It's not. It's not. Most of the Star Trek movies, it's kind of terrible.

Graham

Is that the one where Kirk dies?

Maria

Spoilers. Yeah, it is. 1994, dudes.

Graham

And O.J. Simpson, he fled the police in his white Ford Bronco.

Carole

Yeah, another huge thing. Was that one of the first live tracking? There was helicopters following it. It was a big deal when that happened.

Maria

Yes. It was bonkers. The miniseries they just did about O.J., American Crime Story or something, fantastic. Really good. That's my pick of the week.

Carole

There you go.

Graham

Now it all seems so innocent, doesn't it, all those years ago. But it was also the year when a dangerous and pernicious ad campaign appeared on roadside billboards, putting drivers in peril. Yes. It was a serious road traffic incident. Well, here in the UK, at least, there was a campaign which featured Czech supermodel Eva Herzigová. And it was very controversial, much to the delight of the PR people working for Wonderbra, which is what she was advertising. There was a famous advert of Eva Herzigová looking down at her, and it was accompanied by the words.

Carole

Sorry, looking down at her what?

Graham

I'm sorry. You can't say boobs.

Carole

You know, what's the embarrassing bit there, Graham? Boobs.

Graham

Anyway, it was accompanied by the words, hello, boys. Now, I never quite understood whether she was saying hello, boys to her boobs. I don't think any woman that I've ever met would do that. So I don't think there was a pun in there.

Carole

No, they're always ladies. They're never men. That's kind of rule number one.

Graham

Okay, all right. But they do look kind of a couple of bald-headed men, don't they? It could almost be a couple of Picards there, maybe.

Carole

Yes, I suppose so.

Graham

This is getting really perverted. Now, Eva Herzigová, she is not the only person stripped down to their undies for a roadside ad. You may remember, of course, David Beckham advertising Armani underwear. There he was reclining as though he was having a sandwich. I don't know where he kept his cheese and pickle, but there he was enjoying himself.

Carole

You had fun pulling the story together, didn't you?

Carole

Oh, yes. Google image search. Right, because they're hot. Degrading and sexist. They're sexy pictures. And so people were ogling them.

Graham

Eva Herzigová, yes.

Carole

Oh, yeah. David Beckham. I'm sure no one looked at that and had a bit of a drool. People were averting their eyes of anything. Concentrating more on the road.

Graham

Now, it may not surprise you to know there are public safety rules about roadside adverts. I have been looking these up in the UK and elsewhere, which means I looked it up in the UK and assumed elsewhere as well.

Carole

Always going the extra mile, eh, Clue?

Carole

Your advert can be banned for being distracting or confusing if it puts vehicles or pedestrians in jeopardy. And this was the allegation about the Hello Boys advert.

Carole

You can get them on the side of buses. Really?

Graham

Yeah.

Carole

What is the why would you it just seems crazy I mean how distracting would that be a moving image while you're trying to drive a car.

Graham

Oh yeah I'm used to this now they're they're kind of everywhere here. Well last Saturday night the police department at Auburn Hills, Michigan began to receive phone calls.

Carole

Yes, how do you say it? Michigan. Michigan? No. Michigan.

Graham

Yes, exactly like that. Perfect. Well done. Yes. I had this argument at home the other day about, you know those lizardy reptile things? I-G-U-A-N-A with the funny eyes.

Carole

Iguanas?

Graham

You say iguana, do you? How on earth do you say it?

Carole

Oh, I've obviously been getting it wrong then. I've been saying iguana. Do you say guitar?

Carole

English is such a fucked up language, honestly. Nobody can get this right.

Carole

So you mean unreligious?

Graham

No, no, no. Not Greek Orthodox.

Carole

Okay.

Graham

That's the one I'm talking about. The video was of a couple of young ladies with at least part of a gentleman as well and what was it? There wasn't much talking going on perhaps.

Carole

Well I don't know I haven't seen the video. Are you talking are you talking P-O-R-N here?

Graham

Possibly, yes.

Carole

Oh God.

Carole

So they were they were shaking hands is what I'm understanding. Very vigorously agreeing with each other. Shaking something else I think, vigorously welcoming each other. So the newspapers and the internet sites, they got hold of these videos of the footage that had been played for about 20 minutes. And as Motherboard reports, the porn aficionados on Reddit. Do people call themselves that? I'm sure they do.

Carole

What's your story for us this week? So from porn to deepfakes, which is also porn related, I suppose.

Graham

We should create a deepfake of her so she can come on the show regularly. Aww.

Graham

What's your story for us this week? So I wanted to look into a recent Amazon event.

Graham

Can I point out that at the beginning of the show, I had a lovely, heartwarming, life affirming story about a porn video.

Graham

What's the difference between the red lights and the blue lights on an ambulance? When was Rubik's Cube invented? What is 3,000 kilometres in Mars? Who Is playing in Wimbledon's Men's Final 2018?

Graham

My pick of the week is something I just discovered a few days ago. And the premise is this. It's a lovely day in the village and you are a horrible goose.

Graham

Oh, well Graham, have you played this? Did you help consult on the game? Are you a goose? I was playing this with my son this weekend, actually.

Carole

Oh, were you?

Graham

On the Nintendo Switch. So this is hot. This is hot to trot right now. This is a huge game right now. It's a fun game.

Carole

Oh, yeah?

Graham

Yeah. Maybe they'll come over and play. It's one of the most downloaded games. It's beating out some of the hugest titles right now on Switch. Yeah, I said beating out. Sorry.

Maria

But it's also available for Steam on the PC and Mac, so you don't have to be a Switch player. So basically, it's super fun. It's very easy. Very young children can play it and you can honk and steal things.

Graham

Yeah, you basically can just go around honking at people, which is just super fun. But you can go around and steal things and just wreak goose havoc everywhere, and it's super funny.

Carole

Cool!

Graham

Yeah, you steal things from behind people's backs and you dress up statues in bras and spectacles and just cause a nuisance generally like geese do, I suppose.

Maria

Yes, it's super funny. And I think they should come out with a patch where it's not just a regular white goose, but it's a Canada goose, and then you shit everywhere. That would be my recommendation.

Carole

Listen! What?

Maria

Well, she speaks the truth. It's not Canadian racism. It's just a fact about Canada goose.

Carole

Well, it kind of feels like goose-ism, Canada goose-ism.

Maria

It does, actually. Well, it is. I am very anti-Canada goose-ist.

Carole

Oh, you heard it here, folks.

Maria

Listen, I am. I'll go on record about that. They shit everywhere.

Carole

Yeah, so do babies. Should they go back to their own country?

Maria

Babies eventually stop shitting everywhere. Canada geese don't.

Carole

Well, I'm respectfully disagreeing with you. So your pick of the week is the Untitled Goose Game. Yes, it's at goose.game is the website, actually. So you can check it out. You can get a little video of it.

Graham

I it too, it's the game we need right now for these couple times. This is what's going to heal us and unite us, isn't it?

Maria

It's true, it is. We're all going to come together over our untitled goose game, peace on earth.

Graham

Oh shit Carole, what's your pick of the week?

Carole

So my pick of the week this week is a website. More specifically, a website that's a dictionary for Cockney rhyming slang.

Graham

Blimey, governor.

Carole

I know. And I thought we'd play a bit of a game, right? I thought I would give you some Cockney rhyming slang examples and you could tell me what you think it might be.

Maria

Oh, I'm going to fail this so hard.

Maria

No, no, no, no. So first, let me just give you a quick, a quick, so people can play at home as well. Let me just give you a little explanation about Cockney rhyming slang and how it works, right?

Graham

No, because that becomes the key word, right? So because what you would do is get rid of hook. You'd say, oh, take a butcher's at that. Yes, exactly. And butchers would mean butcher's hook. Hook rhymes with look. And that means take a look at this. Yeah. Does that kind of make sense?

Carole

Okay. Come on, let's have a go. Let's have a go. Maybe Maria has a first go, right? And then Graham can jump in and go wrong.

Graham

I'm going to get wronged today.

Graham

Yes, it's true. Yeah, you're going to get wronged.

Maria

Oh, for fuck's sake. There's no way. No, I have no idea what any of that means.

Carole

Okay. I'll give you the full rhyming cockney slang for each one to help you give a rhyming.

Graham

I think I know most of that one. I think I understand that.

Carole

Can you do it with all the full rhyming slangs before you translate it?

Graham

There's one of them I'm not sure about, but I can definitely do two. On your loaf of... Loaf of bread. You have a barnet... Yeah, I know what that... Fair. Barnet fair. Or maybe a syrup of... Syrup of figs, yeah.

Maria

What?

Carole

So, Graham, can you translate that?

Graham

So, what it means is on your head, you either have hair or a wig. So, on your head rhymes with bread. Fair rhymes with hair. So you say on your loaf, you've got a barnet or you've got your syrup.

Maria

Okay. You took me there. It's still completely incomprehensible to me, but okay. Mary Poppins. No, no, no. It's better. Now you know.

Carole

Now you know that loaf is head, right? So your loaf sits on your Gregory Peck, which sits on your naughty holders. So neck and shoulders. Gotcha.

Carole

Not face constipation in your life yet?

Maria

Yes.

Carole

Okay, last one, last one, last one. Male or female, we've all got a bottle and glass at the back with which we can have a Thom Tit.

Graham

Oh, that's smutty. Can we please raise the tone on this podcast?

Maria

I think I can guess what that one is.

Carole

I didn't say anything about Ethan Hunt.

Graham

Whoa, whoa, whoa. I think let's just let's just stop right there. Let's stop right there. Carole, shush. Carole, shush.

Maria

Fair enough, fair enough. We're talking to Maria now. You can put your rhyming slang away.

Carole

Yes, it's in the show notes, but it's called cockneyrhymingslang.co.uk.

Graham

Okay, all right. So, Maria, mostly... Hello, Maria.

Maria

Hi, hi.

Graham

Now, let's be civilised. I'm sure lots of our listeners would love to follow you online. What's the best way for folks to do that?

Maria

I'm still on Twitter for some incomprehensible reasons. So my handle is M-V-A-R-M-A-Z-I-S.

Graham

X-Y-Z.

Maria

No, no, no. No X-Y-Z. No X-Y-Z. It sounds it, but no. And I'm also on Infosec.exchange if you are a Mastodon user. And my handle is simply at Maria. So I'm spot on that one.

Graham

And you can follow us on Twitter at Smash Security. No G. Twitter wouldn't allow us to have a G. And you can also join us to discuss the show on Reddit. We're at smashingsecurity.com/Reddit, or just search on Reddit for Smashing Security and you'll find us. Once again, thanks to this week's Smashing Security sponsors, Immersive Labs and LastPass. Their amazing support helps us give you the show for free. And thank you to all the people that listen to us, review us or support us on Patreon. We love you. Everything you do is magic. And of course, check us out on smashingsecurity.com for past episodes, sponsorship details and info and how to get in touch with us. Until next time. Cheerio.

Maria

Bye bye.

Carole

Ta-ta.

Maria

See ya.

Graham

Quite smutty this week.

Carole

Oh yeah.

Graham

Just see who's smutty. Mr. Cluley.

Carole

Yeah.

Graham

Not me this time. Not me. Thank you.


Although lists like this can be amusing, we shouldn’t ignore that there’s a serious side to this.

Hacked electronic billboards and road signs can be a huge distraction for motorists, and it’s easy to imagine how an accident could occur which might result in a driver or pedestrian being injured… or worse.

I’m sure most of these roadside defacements are being done with mischief in mind, exploiting default passwords, a lack of multi-factor authentication, poorly-maintained systems, and sloppy security (sometimes it’s poor computer security, sometimes physical, not uncommonly it’s both).

In short, if you hack a road sign or electronic billboard you might gain the attention of the media but you’re not proving that you have done anything “clever” or “novel”. There are rarely leet hacking skills on show in such attacks, and no-one who knows anything about security is going to be remotely impressed.

Nonetheless, because you may be putting public safety at risk, don’t be surprised if law enforcement officers fail to see the funny side of your roadside prank.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and hosts the popular "Smashing Security" podcast. Follow him on TikTok, LinkedIn, Bluesky and Mastodon, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.