820
'Facial recognition' error message on vending machine sparks concern at University of Waterloo (kitchener.ctvnews.ca)
submitted 3 months ago by Ninjazzon@infosec.pub to c/privacy@lemmy.ml
151 comments fedilink hide all child comments

A set of smart vending machines at the University of Waterloo is expected to be removed from campus after students raised privacy concerns about their software.

The machines have M&M artwork on them and sell chocolate and other candy. They are located throughout campus, including in the Modern Languages building and Hagey Hall.

Earlier this month, a student noticed an error message on one of the machines in the Modern Languages building. It appeared to indicate there was a problem with a facial recognition application.

"We wouldn't have known if it weren't for the application error. There's no warning here," said River Stanley, a fourth-year student, who investigated the machines for an article in the university publication, mathNEWS.

you are viewing a single comment's thread
view the rest of the comments
[-] jeffhykin@lemm.ee 275 points 3 months ago* (last edited 3 months ago)

It gets worse :/

I looked up the brand (Invenda). Their PDF includes "using AI", "measuring foot traffic", and gathering "gender/age/etc" e.g. facial recognition to estimate a persons age and gender

And in terms of "stored locally" this is straight from their website

The machine comes with a “brain” – Invenda OS – and is connected to the Invenda Cloud, which allows you to manage it remotely and gather valuable environmental, consumer and transactional data. The device can be branded according to your requirements to further enhance your brand presence.

The marketing also so fricken backwards that it reads like satire:

For a consumer, there’s no greater comfort than shopping pressure-free. Invenda Wallet allows consumers to browse, select and pay for products leisurely and privately 🤦‍♂️

[-] neutron@thelemmy.club 159 points 3 months ago

I'm dreading for the day they introduce dynamic pricing based on who's buying and refuses to sell without a full face scan.

[-] jeffhykin@lemm.ee 92 points 3 months ago* (last edited 3 months ago)

What really bothers me is the "measuring foot traffic". I already refuse to use vending-machines because of the pricing and unhealthyness, but you're telling me I need to make GDPR takedown requests just for walking to class?

[-] tryptaminev@feddit.de 9 points 3 months ago

Also this is data that any reasonable company could get in like half an hour of searching and asking.

There is data on how many meals are sold a day at the mensa, how many students are enrolled, how many students live on campus...

Unless the vending machine is in the last corner of the third floor of an half empty building, all this information can be puzzled together to get a good estimate of how many people are passing the machine on a day to day basis.

load more comments (9 replies)
load more comments (34 replies)
this post was submitted on 23 Feb 2024
820 points (99.5% liked)

Privacy

29356 readers
423 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
k_o_t@lemmy.ml
tmpod@lemmy.pt
TheAnonymouseJoker@lemmy.ml
Yayannick@lemmy.ml
ranok@sopuli.xyz