DEF CON 29 - Joseph Gabay - DoS Denial of Shopping Analyzing and Exploiting Physical Shopping Cart

[@numa28612]

Great job, Joe! I'm very proud of you and am so happy that the ARRL Handbook proved to be a useful resource.

[@eideticex]

Those files would have been extremely useful when I was installing security systems for retail. In practice that system is very fragile and has a tendency to lock when you have a cart loaded with your tool boxes and a bunch of cable. Because they tend to go off similarly for customers with a lot of disparate items scattered around the cart, it becomes an egg hunt finding which employee currently has the Cart Key. Being able to just play a sound to unlock them when they do and if the store locks them overnight, lock them when you put the cart away would have saved a ton of time.

[@aquatrax123]

Just did that and I can confirm it works.

[@gilmotier]

Where?

[@L_Train]

Is it displayed where the perimeter wire is buried in the parking lot? It might be easy to just dig down and damage the wire to get away with a cart.

[@potkettle]

Does anyone know what the question he refused to answer was?

[@rincewindtvd]

"did you take a shopping cart home at the end of the day"

[@UnlikelyToRemember]

ngl kinda sad you can't just wander around a store randomly locking cart wheels.

[@bogoulbog6964]

Work very well to unlock,but not for lock.

[@thermonuclearpotato]

Some brands of gaff tape are made with an adhesive containing aluminum. I know this because wireless mic packs are often secured with gaff tape in field production for television, and the manuals will advise against using the tape with wireless devices. So - a bit of gaff tape/aluminum foil may also foil the system. Haven’t tested because I just saw one in action for the first time today.

[@Ty-ri7dy]

His voice sounds so much like Daniel Crowley's.

[@digidof21]

freedom

[@KamrynSayWhaaattt]

Of A*

[@KamrynSayWhaaattt]

DEF CON 29 - Joseph Gabay - DOS Denial Of Shopping Analyzing And Exploiting Physical Shopping Cart*

[@JustThomas1]

Wow, that's an amazing analysis. Unfortunately I think the system is quickly going to be modified.

[@theafro]

I doubt it, The cost of updating/replacing existing systems would be prohibitive (even just updating the codes used). and the manufacturers aren't going to modify the systems for new sales unless they're driven to by demand. I can't really see this exploit being used by anybody but mischievous hackers. Although maybe as a way to get closer to security staff for RFID skimming etc. but there are plenty of methods for those sorts of shinnanigans already. Fun though, and a great first talk! (SHOT!!!!!)

[@JustThomas1]

I should have been more clear, I didn't mean in the long term as in the next few years or so. Probably replacing them as they slowly die out on existing carts.

[@ProjectKennyB]

Brand new grocery store built in Texas, system very similar... Has the cover that goes over the wheel when locked. Both tones work great for lock/unlock via cell phone speakers.