News for hackers. Stuff that matters.
Re:Ingenious Low-Cost Tilt Detection System (2018) by dekhn on Monday March 02, 2020 @05:26PM (#22469720)
Large expensive equipment (shipped in custom-built pallets) use this. About $3/each to ship a $100+K box. https://www.amazon.com/Tiltwatch-STWPLUS-Plus-Label-Pack/dp/...
Re:Ingenious Low-Cost Tilt Detection System (2018) by exhilaration on Monday March 02, 2020 @05:39PM (#22469832)
How does one acquire these without triggering the tilt alert?
Re:Ingenious Low-Cost Tilt Detection System (2018) by klodolph on Monday March 02, 2020 @05:46PM (#22469900)
You can see that in each section, there is a small hole in the back where you can see the box through the hole. When you buy these, each hole has a pin in it, keeping the ball in the starting area. When you pull the indicator off the backing, the pins come with it. So you only have to keep it upright after you peel the backing off.

Here is a video: https://www.youtube.com/watch?v=TuLClpWRmQ8

You can see that each hole has a red colored pin in it, and you can see the pins come away with the backing (at about 0:21 in the video).

Re:Ingenious Low-Cost Tilt Detection System (2018) by tantalor on Monday March 02, 2020 @06:20PM (#22470163)
That means the pins could be replaced one at a time to reset the device back to its original "unperturbed" state.
Re:Ingenious Low-Cost Tilt Detection System (2018) by function_seven on Monday March 02, 2020 @06:28PM (#22470227)
To replace the pins, you'd need to tear the device off of the package. I assume that means cardboard is coming off with it, and the adhesive is ruined for re-application. So now you need to apply new adhesive, and do a good enough job that the recipient doesn't catch on to your shenanigans.
Re:Ingenious Low-Cost Tilt Detection System (2018) by derefr on Wednesday March 04, 2020 @06:38PM (#22489368)
Or you could order your own batch of them and, right before handoff, rip off their sticker and then affix yours to cover the damage.

...which is presumably why these have unique serial numbers! They really did think of everything. (You have to make sure the shipper communicates the serial number to the recipient for that part to function, though.)

Re:Ingenious Low-Cost Tilt Detection System (2018) by frandroid on Monday March 02, 2020 @08:21PM (#22470961)
You ship them in a box with one sticker applied to the side, of course. #inception
Re:Ingenious Low-Cost Tilt Detection System (2018) by ogre_codes on Monday March 02, 2020 @05:44PM (#22469882)
There are little dots at the top of the place where the each ball starts. I expect there is something in those spots which prevents the balls from moving and you remove it before you apply the detector.
Re:Ingenious Low-Cost Tilt Detection System (2018) by pretendgeneer on Monday March 02, 2020 @05:42PM (#22469858)
I believe those dots above the start area have something pulled out when you take the back of the sticker that stops it from rolling around until it gets applied to the correct thing
Re:Ingenious Low-Cost Tilt Detection System (2018) by phren0logy on Monday March 02, 2020 @05:41PM (#22469848)
You don't, you just flip them all around and jiggle them to reset them. Then you hope nobody does that to your box...
Re:Ingenious Low-Cost Tilt Detection System (2018) by LeoPanthera on Monday March 02, 2020 @05:59PM (#22470012)
If you don't know, don't guess.
Re:Ingenious Low-Cost Tilt Detection System (2018) by phren0logy on Monday March 02, 2020 @06:02PM (#22470041)
The ones I used (20 years ago?) worked this way. It's not a guess, it's just outdated. Regardless, my apologies for the inaccuracy.
Re:Ingenious Low-Cost Tilt Detection System (2018) by SamBam on Monday March 02, 2020 @09:29PM (#22471290)
I guess those ones didn't have the 180° sensors on them? With these one it would be pretty much impossible to jiggle both balls into place.
Re:Ingenious Low-Cost Tilt Detection System (2018) by Johnny555 on Monday March 02, 2020 @05:45PM (#22469892)
Are you sure? There are holes in the yellow backing that look perfectly placed to have some sort of retaining pin inserted to hold the balls in place until use.

At first I thought they were meant to insert the ball, but the holes look too small.

Re:Ingenious Low-Cost Tilt Detection System (2018) by heartbeats on Monday March 02, 2020 @05:53PM (#22469964)
Doesn't being mass-produced sort of defeat the purpose? Buy an identical label, replace the barcode, and you're done.
Re:Ingenious Low-Cost Tilt Detection System (2018) by mattkrause on Monday March 02, 2020 @06:03PM (#22470048)
Until someone checks the serial number.

See the C097412 in the bottom-right corner? Your replacement will be C097413 or something, and won't match.

Re:Ingenious Low-Cost Tilt Detection System (2018) by heartbeats on Monday March 02, 2020 @06:08PM (#22470079)
Yeah, but if you replace the barcode that's not a problem.

I suppose you could stick one on the inside and one on the outside, as paxys suggested. Then you'd have both deterrent and tamper-resistance.

As an extra bonus, if some schmuck tilts and replaces it, the deterrent will still be in force for the next guy down the line.

Re:Ingenious Low-Cost Tilt Detection System (2018) by mattkrause on Monday March 02, 2020 @06:28PM (#22470233)
The serial number is--in theory--recorded by the sender specifically so that you can't just swap them out.

You put sticker #C097412 on the crate yourself, record the number, and the shipper takes it away. If things arrive damaged--and these are usually used on very expensive shipments--you can check the tilt indicator AND its number. I would bet it's much worse if indicator #D108523 arrives instead.

As an added impediment, they're often on the surface of the item but buried beneath a bunch of plastic wrap/padding/etc.

Re:Ingenious Low-Cost Tilt Detection System (2018) by ska on Monday March 02, 2020 @07:30PM (#22470636)
Yes, your shipping department records the barcode and signs, receiver gets the list of them by separate record. Receiver checks these of course.

You'll often also put a variety of them inside.

It's not just rough handling, but temperature and humidity too. You can audit this sort of thing by sending occasional fake packages with precise recording instruments in them, but for usual shipments just use a variety of indicators.

Re:Ingenious Low-Cost Tilt Detection System (2018) by heartbeats on Monday March 02, 2020 @08:53PM (#22471129)
Yes, but I mean, what if you replace the sticker with the barcode and the serial number?

You have #C097412. You remove it, and put on #D108523. You then replace the barcode and serial number underneath with #D108523.

Re:Ingenious Low-Cost Tilt Detection System (2018) by mattkrause on Monday March 02, 2020 @10:55PM (#22471659)
The vendor puts the tilt detectors onto the crate before the shipper collects it. The tag numbers are noted on the invoice/shipping notice/etc which says something like “Please verify tilt indicator C097412 before accepting the package. If the indicator is missing or reads 40+ degrees, DO NOT SIGN FOR THE PACKAGE; CALL US ASAP INSTEAD.” This is sent by email or (alas) fax directly from the vendor to the recipient.

At some point in transit, the package tips over (oops). You sneak in and swap the indicator for #D108523 while it’s awaiting a connection.

When it arrives, the recipient checks the crate against the invoice. She notices that the indicator numbers don’t match: the email says C097412, but the crate has D108532 on it. She won’t sign for it. She calls the vendor and says “There may be a problem with the very fragile, VERY EXPENSIVE microscope I ordered from you. Send me another one that’s demonstrably intact or get a service team out here NOW to check this one over. Legal says you’re not getting paid otherwise.”

Several other people are about to have bad days. The vendor checks their own logs and finds that the crate did indeed go out with C097412 on it. They proceed to ream out the shipping company. A lot of things might happen next, but after most of them, you get fired.

You might have gotten away with it if you could change that email, but how would you at the shipping company, have access to either parties’ email or records? And if you did have such access—-and wanted to use it for evil—-surely you could think of something more lucrative than fractionally increasing the number of possibly-damaged items received?

Re:Ingenious Low-Cost Tilt Detection System (2018) by sokoloff on Monday March 02, 2020 @09:21PM (#22471272)
I, as the shipper, tell you (the receiver) out-of-band that you're getting a tilt indicator with serial #C097412. You check the received label against my out-of-band signal to ensure it matches.
Re:Ingenious Low-Cost Tilt Detection System (2018) by heartbeats on Monday March 02, 2020 @09:58PM (#22471416)
And you did, but it's a forgery. It doesn't look like it has the fancy holo stickers or anything.
Re:Ingenious Low-Cost Tilt Detection System (2018) by MrMorden on Monday March 02, 2020 @11:33PM (#22471796)
That might not exactly take a Tony Mendez-grade forger, but making a good one is probably not going to be within the skill set of random warehouse workers who enjoy agitating expensive shipments. They have to find a decent forger, get in contact, and arrange for the service. That wasn't going to be cheap to begin with, but the package is constantly in motion, so now someone else has to emplace the forged detector in a different location.

Assuming the warehouse worker can afford all that, someone offering anti-tamper-bypass-as-a-service is going to run headfirst into the FBI, SCA, and other well-resourced government organizations with which a sane individual would never consider fucking. That does not lead to rising property values in Tokyo.

Re:Ingenious Low-Cost Tilt Detection System (2018) by mattkrause on Tuesday March 03, 2020 @12:43AM (#22472128)
And what’s the point of all this effort?

Tilting packages doesn’t seem particularly fun or lucrative. It’s not even a particularly effective form of sabotage: maybe you’ll increase the damaged-in-shipment claims by a bit, but maybe not.

If you’re already forging and breaking into wear houses, surely you could find something more enjoyable, profitable, or vicious to do than provide post-hoc cover to a rough shipper.

Re:Ingenious Low-Cost Tilt Detection System (2018) by michaelt on Tuesday March 03, 2020 @06:28AM (#22473547)
Usually?

You are a delivery worker. You will get fired if you aren't fast enough. You will also be fired if you trigger a tilt indicator.

You're on your final warning, and replacement tilt stickers cost $3 on ebay.

A delivery worker won't be hacking e-mails - but if they know hardly anyone checks the tilt sensor serial numbers anyway...

Re:Ingenious Low-Cost Tilt Detection System (2018) by mattkrause on Tuesday March 03, 2020 @06:44AM (#22473609)
The solution is obviously to find a forger, put them on retainer, and swap out the indicators as needed so that you can keep a $15/hr warehouse job.

I have no idea how much such a service would cost (perhaps your life is much more exciting than mine), but I'd imagine skilled forgers don't come cheap, as they could easily find something more profitable to do than faking tilt indicators.

Re:Ingenious Low-Cost Tilt Detection System (2018) by paxys on Monday March 02, 2020 @05:58PM (#22470000)
Not if it is stuck inside the box.
Re:Ingenious Low-Cost Tilt Detection System (2018) by rootusrootus on Monday March 02, 2020 @06:11PM (#22470098)
I imagine half the point (or more) is to be very visible to encourage anybody handling it during shipping to be careful.
Re:Ingenious Low-Cost Tilt Detection System (2018) by ska on Monday March 02, 2020 @07:30PM (#22470639)
That's why you do both. They are cheap (relatively).