News for hackers. Stuff that matters.
Re:Edit store price tags using Flipper Zero by compton93 on Tuesday April 21, 2026 @08:26AM (#47847819)
That's crazy. But coming from someone who wrote a book on retail fraud and worked as a retail fraud analyst for several years... you could have just walked straight out with those items.

Transacting was your way of leaving a calling card for the investigators/analysts to find you... You stole regardless of how you did it.

Re:Edit store price tags using Flipper Zero by bpoyner on Tuesday April 21, 2026 @09:34AM (#47848611)
That's _bananas_.
Re:Edit store price tags using Flipper Zero by InexSquirrel on Tuesday April 21, 2026 @09:36PM (#47857605)
But definitely not nuts.
Re:Edit store price tags using Flipper Zero by Hilliard_Ohiooo on Tuesday April 21, 2026 @01:20PM (#47851724)
I think the point was that they COULDN'T have just walked out with them, BUT, by learning then going through the motions of a typical check out this A+++ hacker was able to bypass a normal security layer.
Re:Edit store price tags using Flipper Zero by conductr on Tuesday April 21, 2026 @01:22PM (#47851759)
The visual risk of walking out without paying is much greater than the risk that anyone actually investigates AND tries to track him down for it.

Back when I was a kid it was common to still just have simple price tag stickers on every single item. We’d pull off a cheap sticker and put it on an expensive item. If they noticed, we’d just shrug and say “oh Nevermind then” when they found the right price.

The only problem was most cashiers actually knew all the prices of stuff and paid attention, believe it or not they even knew how to make change back in those days /s. So you couldn’t always get super aggressive.

Re:Edit store price tags using Flipper Zero by MisterTea on Tuesday April 21, 2026 @03:29PM (#47853384)
> The only problem was most cashiers actually knew all the prices of stuff and paid attention,

Yup. I was in a local super market and saw Tomahawk steaks priced at $4-6 each. It had to be a mistake but I figured I would give it shot and see if they noticed. Cashier looked at the price, did a confused double take and immediately called over the manager. Turns out the decimal point was off by one so my $4.50 tomahawk was really $45. I bought it anyway and it came out great in the oven.

Re:Edit store price tags using Flipper Zero by TeMPOraL on Tuesday April 21, 2026 @04:19PM (#47854023)
Did you pay the sticker price or the intended price?

Over here in Poland we have a law that the store must sell you the good for the price it advertised, so in that case they'd be forced to accept $4.50 because of their mistake. May sound too biased in favor of the customer, but before that, the "errors" in price tags were more common.

Re:Edit store price tags using Flipper Zero by mrgoldenbrown on Tuesday April 21, 2026 @06:03PM (#47855160)
We have similar rules in the US, but depends on your state. In mine they have to give you the price on at least one of the items but you can't demand they give you 100 of them at the wrong price. Or yes you can demand but they are not required to do so.
Re:Edit store price tags using Flipper Zero by MisterTea on Tuesday April 21, 2026 @04:32PM (#47854163)
Intended price. Costly but it was too late as I already had steak on my mind.
Re:Edit store price tags using Flipper Zero by codethief on Tuesday April 21, 2026 @06:17PM (#47855323)
Might have been a marketing strategy. :-)
Re:Edit store price tags using Flipper Zero by lazide on Tuesday April 21, 2026 @04:51PM (#47854357)
In most US states, you have the same rules.
Re:Edit store price tags using Flipper Zero by forgotaccount3 on Tuesday April 21, 2026 @03:59PM (#47853763)
> The visual risk of walking out without paying is much greater than the risk that anyone actually investigates AND tries to track him down for it.

So scan everything, then put it in the cart and walk off without putting in the credit card. Again, both are stealing but paying some fake, reduced rate is leaving your calling card at the scene of a crime.

Re:Edit store price tags using Flipper Zero by Marsymars on Tuesday April 21, 2026 @04:12PM (#47853924)
> So scan everything, then put it in the cart and walk off without putting in the credit card.

I actually saw someone do this a couple weeks ago.

Re:Edit store price tags using Flipper Zero by istjohn on Tuesday April 21, 2026 @05:17PM (#47854609)
I'm absent minded enough to accidentally do this on a bad day. I haven't yet, to my knowledge.
Re:Edit store price tags using Flipper Zero by conductr on Tuesday April 21, 2026 @06:29PM (#47855466)
Calling card doesn’t actually mean anything without enforcement. My city police didn’t have time to investigate when someone kicked in my back door and fled once the alarm sounded. I really doubt they give a crap about looking me up and coming to cite me for misdemeanor charges.

Anything that risks an employee might confront you in the store is a greater risk IMO. And, usually they light on the register is green (or a similar indicator) so they do know right then if you don’t pay.

Re:Edit store price tags using Flipper Zero by ssl-3 on Tuesday April 21, 2026 @07:31PM (#47856306)
Police may not care about stealing fifty dollars worth of steaks one time by entering a PLU of 4011 and declaring them to be bananas. It's hard to prove, and even if everyone takes the time to prove it: Then what? A misdemeanor?

But at some point, they do start to care.

Stealing fifty dollars worth of steaks on 20 different occasions (every couple of weeks, say), with video and transaction evidence of the acts happening over and over again? That's a lot easier to prove, and in many states adds up to a nice juicy felony.

Re:Edit store price tags using Flipper Zero by fc417fc802 on Tuesday April 21, 2026 @08:49PM (#47857185)
There will be video either way though. They'll either have security footage of you walking out the door without paying or they'll have security footage of you "paying". The only important variables here (AFAICT) are the likelihood of getting noticed coupled with the frequency of the act.
Re:Edit store price tags using Flipper Zero by ssl-3 on Tuesday April 21, 2026 @09:23PM (#47857485)
They're different risk profiles.

When a thief takes a steak from the cooler and walks out the door, they don't know who that person is. And while they may have video of parts of this, they don't necessarily see enough to prosecute. (Acting like you're stealing a steak but not actually doing it isn't a crime. Shoplifting can be hard to prove; part of that proof means demonstrating that they didn't change their mind and just drop off the steak somewhere else in the store.)

When a thief takes a steak from the cooler and walks it up to self-checkout and pays for it as if it is a bunch of bananas with their credit card, they have identified that person. They have them on video at the self-checkout committing this crime.

It actually doesn't matter much if they leave the store with their bounty or not in this second case. The crime is already done by converting the steak into bananas.

Re:Edit store price tags using Flipper Zero by fc417fc802 on Tuesday April 21, 2026 @09:45PM (#47857676)
In principle I agree with you but in practice I feel like this really misses the reality of the situation. If it was an isolated incident at an isolated store in the mid 90s I think you'd be right. But presumably the thief makes a habit of this (otherwise why worry), it's likely a major chain with centrally coordinated loss prevention, the thief has presumably made a legitimate purchase from this chain at some point in the past and will again at some point in the future, and facial recognition is a thing.

In that scenario it seems to me that the best the thief can do is to "accidentally" ring up a steak as bananas occasionally and hope that if someone ever takes note that the past events will remain undetected.

That said, I'm pretty sure all of the self checkouts I've interacted with over the past several years would automatically flag such a "mistake". There are some things they're still bad at and they generate plenty of false positives but they seem to be reasonably good at identifying obvious "errors".

Re:Edit store price tags using Flipper Zero by ssl-3 on Tuesday April 21, 2026 @10:02PM (#47857841)
I mean, eventually the people working there would take notice. "Oh, look. Banana Man is doing it again." :)

That said: I've never, ever weighed meat at self checkout. In fact, I've never had a cashier any weigh meat, either.

I've bought plenty of steaks in regular grocery stores, but each of those steaks (even the ones that they wrapped in butcher paper just for me after I selected them from the glass case at the back of the store) had the weight coded into the UPC that was printed at the time it was wrapped up (and weighed by the meat cutter).

There has no further weighing required for the register to know the price, so weighing a steak at the checkout is pretty bizarro-world behavior to begin with -- at least in my experience.

https://en.wikipedia.org/wiki/Universal_Product_Code#Number_...

Re:Edit store price tags using Flipper Zero by fc417fc802 on Tuesday April 21, 2026 @11:08PM (#47858415)
That's why you peel off the UPC and then ring it up as however many cucumbers would approximately correspond to its weight. Fooling the overhead camera and associated ML algorithm is left as an exercise for the reader.
Re:Edit store price tags using Flipper Zero by ssl-3 on Tuesday April 21, 2026 @11:49PM (#47858715)
Well since you put it that way:

There's already an scale that prints UPCs in the produce department for customers to use. I'll just put the package of steak on there, punch in 4011, and scan out my "bananas" at the self-checkout. ;)

(But they'll still know who I am. Walking out is cleaner, and has fewer steps.)

Re:Edit store price tags using Flipper Zero by conductr on Wednesday April 22, 2026 @11:06AM (#47864688)
The man in the sky can see what is being scanned in real time, it’s on his video display just like the cash register except overlayed on the video of you. If they see a ribeye in your hand and it says bananas on the screen, good chance they’re going to stop you before you exit (assuming they can mobilize to do so).

Honestly if you’re a thief this is just a dumb idea. Probably works for the original commenter a few times fine. But it’s way too obviously and intentionally theft. You need to come up with something you can claim was an honest mistake.

Find another item that sounds similar but is cheaper and use that upc. If you’re keying in the upc, on a scale or something, then find one that’s cheaper but off my 1 digit or something where you can say it was a typo and you didn’t notice. Those kinds of things are more defensible. None of us have been trained to be a cashier so honest mistakes are a strong defense to any claim of misconduct.

Re:Edit store price tags using Flipper Zero by conductr on Wednesday April 22, 2026 @11:03AM (#47864658)
The best a thief can do is just not ring up the steak at all and if confronted just act like it’s an honest mistake.

Anyone just buying bananas and steaks is going to look suspicious fast. So rotating the banana for other things is key. Having a mixed bag of purchases where the steaks are always just accidentally unscanned or misscanned.

The facial recognition thing isn’t really in the picture for this minor type of crime. Law enforcement doesn’t have easy access to it as Hollywood would lead you to believe. Its use is reserved for higher profile crimes. You’d have to really be running a steak stealing criminal syndicate for this to happen. Before that, retailers would have already started forcing different procedures for the steaks. Like locking them up or pay at the butcher stand.

One thing facial recognition can do, if used properly by the retailer, is flag you and alert the store to put extra eyes on you every time you enter the store. There’s an increased chance they’ll confront you in the act or otherwise scare you off of it.

Re:Edit store price tags using Flipper Zero by ComputerGuru on Tuesday April 21, 2026 @06:50PM (#47855750)
Police know which side their bread is buttered on. Target is famous for being to get local cops to do exactly what they need post-facto (now prosecutor is another story).

I.E. just because police don’t “waste” time investigating a crime with $1000 of damage to your personal property does not mean they won’t dedicate the time to pursue $200 in losses for the local mega mart.

Re:Edit store price tags using Flipper Zero by fc417fc802 on Tuesday April 21, 2026 @08:52PM (#47857210)
What Target is famous for is doing their own investigations rather than expecting the police to do the grunt work. They operate such a sophisticated forensics lab that they actually do contract work for LE agencies across the country.

If you funded your own private investigation which unambiguously identified the culprit and demonstrated damages sufficient for a felony I imagine the local police would readily act on your behalf as well.

Re:Edit store price tags using Flipper Zero by conductr on Wednesday April 22, 2026 @11:35AM (#47865111)
Breaking and entering into a home is more serious of a crime than $1000 of property damage. But regardless of that, it’s a point just to highlight how little policing resources exists and tells a broader story. At least in my city, cops don’t do anything for minor crimes. On my local Reddit, I see people mentioning that you have to mention that you have a gun in your hand if you ever want them to actually show up. I think our police force has half the personnel they’re supposed to have given our city size. I think this is becoming more common in the US.

There’s plenty of documented cases where local police are the basically henchmen for large corporations, but I’ve seen no evidence of this and believe it’s kind of a fear mongering meme to think they have enough power over them to dictate them to do roundups after the fact. They may however give all the evidence they collect on you to the police with a bow on it and the cops may decide to take it seriously. Where I am, I do not see this happening. The police will have expected the retailer to have protected their inventory. Off duty police officers make a lot of money working private security and they don’t want to disturb that dynamic.

Re:Edit store price tags using Flipper Zero by JCTheDenthog on Tuesday April 21, 2026 @02:44PM (#47852756)
A year or two ago I had a cashier ring up my zucchini as cucumbers because he apparently couldn't tell the difference. Young guy, looked barely 18. I have no idea if he overcharged or undercharged me as a result, but I didn't care enough to point it out because he seemed like the type who would have needed 20 minutes to figure out how to change it (or would have needed to call down a manager for help) and I didn't want to waste any more of my time (or his).
Re:Edit store price tags using Flipper Zero by ButlerianJihad on Tuesday April 21, 2026 @10:00PM (#47857822)
I've had dates like that
Re:Edit store price tags using Flipper Zero by fragmede on Tuesday April 21, 2026 @11:39PM (#47858642)
Did it get rung up as a drupe?
Re:Edit store price tags using Flipper Zero by dpoloncsak on Tuesday April 21, 2026 @02:38PM (#47852680)
This gives the ability to use the excuse "I didn't know how to use the machine, I thought I used it correctly, nobody ever trained me on this", where as just walking out does not

(Not a lawyer, I'd imagine you know better here than I do)

Re:Edit store price tags using Flipper Zero by crazygringo on Tuesday April 21, 2026 @03:54PM (#47853697)
Seriously. Especially since self-checkout is almost always with a card tied to your identity, not cash.

Depending on the value, the police probably aren't going to show up at your address, but use that card again at the store in the future and you might find the security guard coming over. Or, like many stores, they wait for you to do it repeatedly until it adds up to enough for a felony instead of just a misdemeanor, and then they bring felony charges...

The stores have cameras. Likely someone is well aware those weren't all bananas, and has it on video.

Play stupid games, win stupid prizes.

Re:Edit store price tags using Flipper Zero by rkomorn on Tuesday April 21, 2026 @03:58PM (#47853751)
I agree that they're well aware.

I once got stopped at self checkout because I put two vegetables (peppers, IIRC) of different types in the same bag and weighed them together.

They were the same price so it's not like I was trying to pull a fast one one anyone, but "the system" noticed and flagged me for someone to come over.

This was pre-pandemic, and I'm sure they're not less capable now than before.

Re:Edit store price tags using Flipper Zero by garciasn on Tuesday April 21, 2026 @04:59PM (#47854446)
IKEA did this to me two years ago. Flagged me as not having paid the right amount. Turns out that they sell fake plants as one cost and the pot you put them in as another; even if they're put together.

It was a difference of like $5 at most on a $400 bill. I suppose 1.25% is enough to pay someone in another country to monitor everything.

Re:Edit store price tags using Flipper Zero by rationalist on Tuesday April 21, 2026 @04:20PM (#47854039)
Any lawyers here?

> wait for you to do it repeatedly until it adds up to enough for a felony instead of just a misdemeanor

Isn't there a concept in the legal system where you have to mitigate damages even if you're the victim? I can't think of the example off the top of my head that Steve Lehto (consumer lawyer on YouTube gave).

I'm guessing people who steal from the stores aren't able to afford a decent lawyer, but I imagine a decent lawyer would ask the Target witness(es), why didn't you stop him after the first theft? Why did you keep letting him steal?

Re:Edit store price tags using Flipper Zero by Aurornis on Tuesday April 21, 2026 @05:08PM (#47854521)
> why didn't you stop him after the first theft? Why did you keep letting him steal?

Enforcement goes to the police. Stores can't apprehend thieves. There is a lot of training for store employees to not try to engage the thieves because some can behave erratically and dangerously when they feel like they're caught.

You can tell someone they need to stop and pay for merchandise, but if they choose to keep walking there's nothing the store staff can do but document and report it.

The reason stores wait until it reaches felony level to report it is because police are too busy to try to pursue every small case that happens everywhere. There are fewer crimes that rise to the level of a felony, so they have to focus their efforts on the smaller number of more serious crimes instead of taking every report FIFO style

Re:Edit store price tags using Flipper Zero by rationalist on Tuesday April 21, 2026 @05:12PM (#47854563)
Stores can and do trespass people without police involvement.

The stores can also make a police report after the first theft, but the stores are choosing not to.

The stores are choosing not to mitigate their damages, something that the courts frown upon in my limited knowledge.

I understand that might be a civil aspect (mitigation) versus a criminal aspect, but perhaps someone who has been to law school and studied the law, might be able shed some light.

Re:Edit store price tags using Flipper Zero by fc417fc802 on Tuesday April 21, 2026 @08:56PM (#47857242)
Well they can apprehend thieves but they choose not to because it has the potential to go poorly or result in bad PR. That's a modern trend though - 50 years ago they were happy to have private security do the job.
Re:Edit store price tags using Flipper Zero by nkohari on Tuesday April 21, 2026 @05:01PM (#47854457)
I used to work in a suburban supermarket during high school and college, first as a cashier and then as a frontend supervisor and payroll clerk. We had a security booth where you could watch security cameras, and it was literally never manned. Tapes were changed, but they were there mostly in case someone would try to rob the place. Cashiers routinely rang their own lunch up either as 99 cents or as bananas. No one cared.

Supermarkets actually factor breakage, theft, and spoilage into their books as "shrink", which averages between 2-3% of sales. There's no detective building a case, biding their time to bring down the banana bandit.

Although, modern self-checkouts have cameras on the scanner with ML-powered item detection, and they will alert the attendant if you incorrectly scan something that's sold by weight. (I've done this before on accident, fat-fingering the wrong PLU.)

Re:Edit store price tags using Flipper Zero by dylan604 on Tuesday April 21, 2026 @05:07PM (#47854510)
> Especially since self-checkout is almost always with a card tied to your identity, not cash.

Pre-paid gift cards would fall into the part where almost always doesn't cover. There's a reason scammers love gift cards

Re:Edit store price tags using Flipper Zero by cogogo on Tuesday April 21, 2026 @05:08PM (#47854525)
I know people who regularly stole this way. They would usually work in pairs and one would leave a full cart near the exit and the other would walk out confidently. Worst case they figured they would just act the fool and either leave the cart or pay. Irked me that they did this but not enough to rat. I bet these days doing that with any kind of regularity would have you starring on much higher quality film.
Re:Edit store price tags using Flipper Zero by alwa on Tuesday April 21, 2026 @10:25PM (#47858044)
I’d be interested in your book!

I was of the impression that, in our golden age of individualized surveillance, merely interacting with the kiosk was enough to leave a facial-geometry calling card these days.

I feel like I may have heard this from one of those Illinois BIPA class action suits [0], which reliably have a whiff of crackpot to them from a technical perspective. But it surely seems an obvious enough sort of application…

[0] https://www.law360.com/articles/2372764/home-depot-s-self-ch...

Re:Edit store price tags using Flipper Zero by per1 on Wednesday April 22, 2026 @06:40AM (#47861615)
What's the books name?