4 ms·

This is pretty dangerous. At least in my country the displayed price must be honored and they cannot refuse the sale.

by weli 6mo ago

rickdeckard 6mo ago
Usually the advertised price must be honored, because it may have brought the customer to your store. For prices displayed on the shelf-label inside the store the law is usually not that strict (YMMV), as a shop-owner can refuse sale on check-out (otherwise I could put a pricetag on e.g. a shopping-basket and the shop-owner would be legally required to sell me the basket...). Besides, most shops I've seen (in Europe) already moved from Infrared communication to RF (NFC or proprietary), for centralized shelf-label management without handheld devices. So all this study (and the underlying reverse engineering of the IR-protocol) might do is probably accelerate the transition from IR to RF-based ESL...
- rimunroe 6mo ago
  > Usually the advertised price must be honored, because it may have brought the customer to your store. This is not the case for groceries in Massachusetts at least. If there’s a discrepancy between the tag’s price and the scanned price the store must charge the customer the lowest of the two: https://www.mass.gov/price-accuracy-information https://www.mass.gov/price-accuracy-information
  - stevekemp 6mo ago
    I recently learned that in some cases fines of mispriced goods were very low, leading to companies repeatedly failing tests - and over/undercharging their customers. https://www.theguardian.com/us-news/2025/dec/03/customers-pay-more-rising-dollar-store-costs https://www.theguardian.com/us-news/2025/dec/03/customers-pa... That seems shocking to me, but I guess I live in a country where the prices on the shelves are "final" (with no need to add taxes) and I think it would be immediately obvious if I'd been charged the wrong price for goods.
  - devilbunny 6mo ago
    I suspect this law does not apply in cases of fraud. If not, simple tag-switching would be rampant.
    - rimunroe 6mo ago
      The thing I was responding to was about pricing policy in general, but I would assume so
    - bee_rider 6mo ago
      I dunno, having worked in retail I think it is just not that hard to steal in general (I wasn’t going to get killed over some bananas). Most people are honest most of the time. The law probably doesn’t apply to fraud, but then the cashier only notices the really obvious cases.
    - drdec 6mo ago
      They are talking about the price on the shelf vs the price at the register. The price tag on the shelf has information identifying the product. The price at the register is obviously associated to the bar code on the product. So there's no way for a consumer to swap price tags from one product to another. Source - worked at a grocery store in Massachusetts as a teen
      - deleted 6mo ago
        [deleted]
      - devilbunny 6mo ago
        I was being colloquial by referencing the pre-scanner way of doing it, but since this article is all about changing the shelf tag, it seemed relevant.
    - otterley 6mo ago
      There is, as you suspect, a carveout: https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter94/Section184C https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Cha... (i) ...if there is a discrepancy between the advertised price, the sticker price, the scanner price or the display price and the checkout price on any grocery item, a food store or a food department shall charge a consumer the lowest price. If the checkout price or scanner price is not the lowest price or does not reflect any qualifying discount, the seller: (i) shall not charge the consumer for 1 unit of the grocery item, if the lowest price is $10 or less; (ii) shall charge the consumer the lowest price less $10 for 1 unit of the grocery item, if the lowest price is more than $10; and (iii) shall charge the consumer the lowest price for any additional units of the grocery item. For the purposes of this subsection and unless the deputy director determines otherwise, individual items that differ only by color, flavor or scent shall be counted as the same item if they are identical in all other aspects, including price, brand, and may only vary in random weight. This subsection shall not apply if: (1) there is evidence of willful tampering; or (2) the discrepancy is a gross error, in that the lowest price is less than half of the checkout price and the seller, in the previous 30 days, did not intend to sell the grocery item at the lowest price.
- master-lincoln 6mo ago
  How is the transport medium changing anything? To me this is about having protocols that are suitable so not anybody can write to these labels without knowing a store secret or using replay attacks.
  - mschuster91 6mo ago
    > How is the transport medium changing anything? it's mostly about efficiency. IR based, an employee needs to physically walk around. RF based, place a transmitter or two in the building and the system now works fully automated.
    - master-lincoln 6mo ago
      Sorry about not being explicit. I meant how it changes anything security-wise. With the same vulnerable protocol the RF system is as easy to attack with bigger consequences then it seems....
      - rickdeckard 6mo ago
        The RF system doesn't use the same protocol, it's a new protocol (to potentially hack and reverse-engineer). The early shelf-label systems were IR-based, sold in bulk and were programmed manually using handheld devices held against them. Most shelf-label solutions of today are part of a service-model, where gateways are mounted in the store to wirelessly update any label on price-change, often orchestrated remotely so store-chains can update all shops simultaneously.
- teeray 6mo ago
  It definitely varies by jurisdiction, but the register price always loses to any printed price in the US states I’ve lived in. This is a protection since retailers have used pricing mistakes to unfairly profit. Watch your receipt like a hawk at the dollar store[0] [0] https://www.theguardian.com/us-news/2025/dec/03/customers-pay-more-rising-dollar-store-costs https://www.theguardian.com/us-news/2025/dec/03/customers-pa...
  - deleted 6mo ago
    [deleted]
- ornornor 6mo ago
  Very much depends where. In QC, if it rings higher than tagged in the store you get the first one for free and the next ones at the lower price. They take it VERY seriously as a result and will take the tag down while they make a new one to ensure nobody else gets a freebie. Stores hate giving the product away and pricing errors are much lower in my experience.
gus_massa 6mo ago
I guess they can use the cameras to show you were tampering with the labels and call the police. Somewhat related xkcd https://xkcd.com/1494/ https://xkcd.com/1494/
dewey 6mo ago
Probably mostly dangerous for the user, or are people routinely writing their own price signs in the store and then "buying" it for less? Walking up to the lot at the car store and crossing out some zeros? Don't see how this would be any different.
- ModernMech 6mo ago
  What they do is swap bar codes, or they code organic fruit as regular, or they "forget" to scan in the self checkout, but yes.
  - dewey 6mo ago
    So it's just stealing with extra steps.
    - bombcar 6mo ago
      Amusingly enough the extra steps likely make it worse once caught as it shows intent to defraud and planning. In some places walking out with a MacBook Neo is a misdemeanor-but putting a barcode for bananas on it and checking out would be one or two felonies.
  - walrus01 6mo ago
    This is a big reason why retail product barcode stickers (not barcodes printed directly on a package as it comes from the manufacturer) are now commonly printed on frangible stock with built in slices in it which breaks apart in 3, 4 or more pieces if you try to peel it off.
    - rithdmc 6mo ago
      Hardly matters when one may print their own barcode on labels and cover the frangible one.
      - gruez 6mo ago
        printing your own sticker requires way more prep than ripping one off a pack of ground beef and sticking it on a pack ribeye steak.
wyldfire 6mo ago
In your country merchants are not obligated to honor fraudulently altered price displays.
- jeroenhd 6mo ago
  That may not be true if the faked display contents are reasonable. Price labels on shelves are leading: https://www.consumentenbond.nl/juridisch-advies/rechten-bij-aankoop/de-kassa-geeft-een-hogere-prijs-aan-dan-het-prijskaartje-van-het-artikel https://www.consumentenbond.nl/juridisch-advies/rechten-bij-... Supermarkets all throughout my country have these labels add "35% off" to any goods that they need to remove from shelves (either because they expire soon or because they want to replace the product with something different). That's done outside of normal advertising campaigns, just in the price tags on the shelves (and the digital systems, if they actually work). Supermarkets here are already on thin ice because they frequently do not charge the price listed on shelves already, without malpractice. Of course, if you happen to have a cart full of wrongly discounted stuff that someone needs to go out and correct, the store will probably look through security footage. If you play the game well and can make it look like a glitch in the system, a store would probably not bother, though.
rjmunro 6mo ago
In which country?
- weli 6mo ago
  spain
fennecbutt 6mo ago
No it's not. We've been able to take a price sticker off one object and put it onto another for a very, very long time. It's not really a new issue and current law should already cater for it.
Aurornis 6mo ago
That law probably wouldn't apply if someone brought their own label printer into the store and put their own price tags on to the merchandise, which is essentially what this is.
mock-possum 6mo ago
Yeah, the prices the store chooses to display, not your own edits.
jeroenhd 6mo ago
It's crazy that supermarkets invested in tags without even basic authentication. Hopefully they can sue the manufacturer for the cost of replacing them with moderately secure ones/reflashing the existing tags with secure firmware. The extreme lack of cybersecurity for something as essential as (often legally binding) price indicators should shock the entire industry, although I feel like it comes to no surprise to anyone actually working on integrating these things.

This is pretty dangerous. At least in my country the displayed price must be honored and they cannot refuse the sale.

by weli 6mo ago

This is pretty dangerous. At least in my country the displayed price must be honored and they cannot refuse the sale.

Usually the advertised price must be honored, because it may have brought the customer to your store. For prices displayed on the shelf-label inside the store the law is usually not that strict (YMMV), as a shop-owner can refuse sale on check-out (otherwise I could put a pricetag on e.g. a shopping-basket and the shop-owner would be legally required to sell me the basket...). Besides, most shops I've seen (in Europe) already moved from Infrared communication to RF (NFC or proprietary), for centralized shelf-label management without handheld devices. So all this study (and the underlying reverse engineering of the IR-protocol) might do is probably accelerate the transition from IR to RF-based ESL...

rimunroe 6mo ago
> Usually the advertised price must be honored, because it may have brought the customer to your store. This is not the case for groceries in Massachusetts at least. If there’s a discrepancy between the tag’s price and the scanned price the store must charge the customer the lowest of the two: https://www.mass.gov/price-accuracy-information https://www.mass.gov/price-accuracy-information
- stevekemp 6mo ago
  I recently learned that in some cases fines of mispriced goods were very low, leading to companies repeatedly failing tests - and over/undercharging their customers. https://www.theguardian.com/us-news/2025/dec/03/customers-pay-more-rising-dollar-store-costs https://www.theguardian.com/us-news/2025/dec/03/customers-pa... That seems shocking to me, but I guess I live in a country where the prices on the shelves are "final" (with no need to add taxes) and I think it would be immediately obvious if I'd been charged the wrong price for goods.
- devilbunny 6mo ago
  I suspect this law does not apply in cases of fraud. If not, simple tag-switching would be rampant.
  - rimunroe 6mo ago
    The thing I was responding to was about pricing policy in general, but I would assume so
  - bee_rider 6mo ago
    I dunno, having worked in retail I think it is just not that hard to steal in general (I wasn’t going to get killed over some bananas). Most people are honest most of the time. The law probably doesn’t apply to fraud, but then the cashier only notices the really obvious cases.
  - drdec 6mo ago
    They are talking about the price on the shelf vs the price at the register. The price tag on the shelf has information identifying the product. The price at the register is obviously associated to the bar code on the product. So there's no way for a consumer to swap price tags from one product to another. Source - worked at a grocery store in Massachusetts as a teen
    - deleted 6mo ago
      [deleted]
    - devilbunny 6mo ago
      I was being colloquial by referencing the pre-scanner way of doing it, but since this article is all about changing the shelf tag, it seemed relevant.
  - otterley 6mo ago
    There is, as you suspect, a carveout: https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Chapter94/Section184C https://malegislature.gov/Laws/GeneralLaws/PartI/TitleXV/Cha... (i) ...if there is a discrepancy between the advertised price, the sticker price, the scanner price or the display price and the checkout price on any grocery item, a food store or a food department shall charge a consumer the lowest price. If the checkout price or scanner price is not the lowest price or does not reflect any qualifying discount, the seller: (i) shall not charge the consumer for 1 unit of the grocery item, if the lowest price is $10 or less; (ii) shall charge the consumer the lowest price less $10 for 1 unit of the grocery item, if the lowest price is more than $10; and (iii) shall charge the consumer the lowest price for any additional units of the grocery item. For the purposes of this subsection and unless the deputy director determines otherwise, individual items that differ only by color, flavor or scent shall be counted as the same item if they are identical in all other aspects, including price, brand, and may only vary in random weight. This subsection shall not apply if: (1) there is evidence of willful tampering; or (2) the discrepancy is a gross error, in that the lowest price is less than half of the checkout price and the seller, in the previous 30 days, did not intend to sell the grocery item at the lowest price.
master-lincoln 6mo ago
How is the transport medium changing anything? To me this is about having protocols that are suitable so not anybody can write to these labels without knowing a store secret or using replay attacks.
- mschuster91 6mo ago
  > How is the transport medium changing anything? it's mostly about efficiency. IR based, an employee needs to physically walk around. RF based, place a transmitter or two in the building and the system now works fully automated.
  - master-lincoln 6mo ago
    Sorry about not being explicit. I meant how it changes anything security-wise. With the same vulnerable protocol the RF system is as easy to attack with bigger consequences then it seems....
    - rickdeckard 6mo ago
      The RF system doesn't use the same protocol, it's a new protocol (to potentially hack and reverse-engineer). The early shelf-label systems were IR-based, sold in bulk and were programmed manually using handheld devices held against them. Most shelf-label solutions of today are part of a service-model, where gateways are mounted in the store to wirelessly update any label on price-change, often orchestrated remotely so store-chains can update all shops simultaneously.
teeray 6mo ago
It definitely varies by jurisdiction, but the register price always loses to any printed price in the US states I’ve lived in. This is a protection since retailers have used pricing mistakes to unfairly profit. Watch your receipt like a hawk at the dollar store[0] [0] https://www.theguardian.com/us-news/2025/dec/03/customers-pay-more-rising-dollar-store-costs https://www.theguardian.com/us-news/2025/dec/03/customers-pa...
- deleted 6mo ago
  [deleted]
ornornor 6mo ago
Very much depends where. In QC, if it rings higher than tagged in the store you get the first one for free and the next ones at the lower price. They take it VERY seriously as a result and will take the tag down while they make a new one to ensure nobody else gets a freebie. Stores hate giving the product away and pricing errors are much lower in my experience.

gus_massa 6mo ago

I guess they can use the cameras to show you were tampering with the labels and call the police. Somewhat related xkcd https://xkcd.com/1494/ https://xkcd.com/1494/

dewey 6mo ago

Probably mostly dangerous for the user, or are people routinely writing their own price signs in the store and then "buying" it for less? Walking up to the lot at the car store and crossing out some zeros? Don't see how this would be any different.

ModernMech 6mo ago
What they do is swap bar codes, or they code organic fruit as regular, or they "forget" to scan in the self checkout, but yes.
- dewey 6mo ago
  So it's just stealing with extra steps.
  - bombcar 6mo ago
    Amusingly enough the extra steps likely make it worse once caught as it shows intent to defraud and planning. In some places walking out with a MacBook Neo is a misdemeanor-but putting a barcode for bananas on it and checking out would be one or two felonies.
- walrus01 6mo ago
  This is a big reason why retail product barcode stickers (not barcodes printed directly on a package as it comes from the manufacturer) are now commonly printed on frangible stock with built in slices in it which breaks apart in 3, 4 or more pieces if you try to peel it off.
  - rithdmc 6mo ago
    Hardly matters when one may print their own barcode on labels and cover the frangible one.
    - gruez 6mo ago
      printing your own sticker requires way more prep than ripping one off a pack of ground beef and sticking it on a pack ribeye steak.

wyldfire 6mo ago

In your country merchants are not obligated to honor fraudulently altered price displays.

jeroenhd 6mo ago
That may not be true if the faked display contents are reasonable. Price labels on shelves are leading: https://www.consumentenbond.nl/juridisch-advies/rechten-bij-aankoop/de-kassa-geeft-een-hogere-prijs-aan-dan-het-prijskaartje-van-het-artikel https://www.consumentenbond.nl/juridisch-advies/rechten-bij-... Supermarkets all throughout my country have these labels add "35% off" to any goods that they need to remove from shelves (either because they expire soon or because they want to replace the product with something different). That's done outside of normal advertising campaigns, just in the price tags on the shelves (and the digital systems, if they actually work). Supermarkets here are already on thin ice because they frequently do not charge the price listed on shelves already, without malpractice. Of course, if you happen to have a cart full of wrongly discounted stuff that someone needs to go out and correct, the store will probably look through security footage. If you play the game well and can make it look like a glitch in the system, a store would probably not bother, though.

rjmunro 6mo ago

In which country?

weli 6mo ago
spain

fennecbutt 6mo ago

No it's not. We've been able to take a price sticker off one object and put it onto another for a very, very long time. It's not really a new issue and current law should already cater for it.

Aurornis 6mo ago

That law probably wouldn't apply if someone brought their own label printer into the store and put their own price tags on to the merchandise, which is essentially what this is.

mock-possum 6mo ago

Yeah, the prices the store chooses to display, not your own edits.

jeroenhd 6mo ago

It's crazy that supermarkets invested in tags without even basic authentication. Hopefully they can sue the manufacturer for the cost of replacing them with moderately secure ones/reflashing the existing tags with secure firmware. The extreme lack of cybersecurity for something as essential as (often legally binding) price indicators should shock the entire industry, although I feel like it comes to no surprise to anyone actually working on integrating these things.