DoS: Denial of Shopping - Analyzing and Exploiting Physical Shopping Carts
Joseph Gabay reverse engineers supermarket anti-theft perimeter wheel locks, spoofing low-frequency RF control signals to lock and unlock shopping carts.
Summary
The Physical Perimeter Defenses of Retail Shopping Carts
Supermarkets and commercial shopping centers deploy electronic perimeter-locking caster wheels to prevent shopping carts from leaving parking lots.
Reverse Engineering Anti-Theft RF Wheel Locks
Joseph Gabay analyzes the low-frequency RF signals, underground perimeter loop transmitters, and optical triggers used to command cart wheel locking mechanisms.
Capturing, Replaying, and Spoofing Lock Signals
Using low-cost software-defined radios and microcontrollers, Gabay demonstrates capturing and replaying the unencrypted locking and unlocking radio codes.
Designing Secure Contactless Physical Perimeter Systems
The author discusses the complete absence of cryptographic authentication in physical retail deterrence devices and presents design improvements.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.
Red Team Village·23 min
Mauro Cáseres
Mauro Cáseres explores weaponized keyboards and hardware keyloggers, demonstrating how physical peripherals can be backdoored for stealthy initial access.