2 clvrby 0.5 —

Geeky license plate earns hacker $12,000 in parking tickets

A California man's vanity license plate backfires spectacularly.

This can be a bad idea, evidently.
Enlarge / This can be a bad idea, evidently.
Aurich Lawson

The relationship between Americans and their automobiles is a complicated one. More than mere transport, cars can become extensions of one's personality—think of stereotypes about drivers of a particular model like a Corvette, for instance. Since cars are mass-produced, it's natural that people want to personalize them. Sometimes it's covering them with every bit of chromed plastic you can find at JC Whitney. Sometimes it's plastering them in stickers. And sometimes, it might just be a personalized number plate.

The rules for personalized plates vary depending on the state in which you're registering your car. These can foster creativity, but today we have a cautionary tale from California, which reveals the risks of being too creative. It's the story of a security researcher known as Droogie, who presented his experience at the recent DEF CON conference in Las Vegas. Droogie decided his new vanity plate should read "NULL." While he did this mainly for the giggles, he told the audience that there was an ulterior motive, as reported by Mashable:

"I was like, ‘I'm the shit,'" he joked to the crowd. "'I’m gonna be invisible.' Instead, I got all the tickets."

Droogie's hope was that the new plate would exploit California's DMV ticketing system in a similar manner to the classic xkcd "Bobby Tables" cartoon. With any luck, the DMV's ticket database would see "NULL" and consign any of his tickets to the void. Unfortunately, the exact opposite happened.

First, Droogie got a parking ticket, incurred for an actual parking infraction—so much for being invisible. Then, once a particular database of outstanding tickets had associated the license plate NULL with his address, it sent him every other ticket that lacked a real plate. The total came to $12,049 worth of tickets. Droogie told the DEF CON audience that he received little sympathy from either the California DMV or the Los Angeles Police Department, both telling him to just change his plate to something else. That remains something he refuses to do.

Although the initial $12,000-worth of fines were removed, the private company that administers the database didn't fix the issue and new NULL tickets are still showing up.

Channel Ars Technica