Someone figured out that the Flipper Zero — a tiny hacking gadget that's become a cult favorite — can send a rickroll message to electronic shelf price tags in stores. The video went viral, and now everyone's wondering: just how secure are those little digital price signs?
What Happened
A security researcher demonstrated that the Flipper Zero, a palm-sized device marketed as a learning tool for radio protocols, can broadcast signals compatible with Electronic Shelf Labels (ESLs) — the digital price tags you see in some modern retail stores.
These tags typically use low-power radio protocols to communicate with a central system. Flipper Zero happened to be able to send a valid signal, and with the right data payload, it could change the displayed price. In the demo, a price tag was made to read "$0.00" and briefly displayed a rickroll lyric instead.
Is This Real Threat?
⚠️ Technically impressive, practically limited: For this to actually cause problems, you'd need to be within radio range of the tags, know the right protocol, and have a store running vulnerable, unencrypted ESL hardware. Most major retailers have since encrypted their ESL communications — this trick works mainly on older or cheaper systems.
✓ Still a valid security concern: The fact that a consumer device can interact with retail infrastructure at all is worth noting. Even if it's not practical for most bad actors, it points to a category of IoT devices that were deployed without assuming anyone would try to exploit them.
What Stores Use These?
Electronic shelf labels are increasingly common in large retail chains — think electronics stores, some grocery chains, and big-box retailers. They've replaced paper price tags in many stores because they allow instant price updates from a central system. The tag itself has a small e-ink or LCD display and a radio chip.
Should You Be Worried?
Probably not as a shopper. The odds of someone being within range, having a Flipper Zero, and caring enough to change your store's price tags are extremely low. But it does highlight a broader issue: the Internet of Things is full of devices that were deployed with "security through obscurity" — assuming nobody would try to talk to them.
As IoT devices become more common, we should probably expect more researchers finding quirks like this. The good news: the Flipper Zero community is generally good about responsible disclosure, and most major retailers have already patched their systems.
← Back to Home