this post was submitted on 23 Feb 2024
823 points (99.5% liked)

Privacy

32159 readers
1312 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

A set of smart vending machines at the University of Waterloo is expected to be removed from campus after students raised privacy concerns about their software.

The machines have M&M artwork on them and sell chocolate and other candy. They are located throughout campus, including in the Modern Languages building and Hagey Hall.

Earlier this month, a student noticed an error message on one of the machines in the Modern Languages building. It appeared to indicate there was a problem with a facial recognition application.

"We wouldn't have known if it weren't for the application error. There's no warning here," said River Stanley, a fourth-year student, who investigated the machines for an article in the university publication, mathNEWS.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 122 points 9 months ago (6 children)

Why in the ever living hell would a vending machine need local-only facial recognition...

[–] [email protected] 95 points 9 months ago (1 children)

My guess is to associate which product is best selling to which demographic to better target them.

So ingenious 🤮

[–] [email protected] 12 points 9 months ago (4 children)

I feel like it'd be tough to find a chip powerful enough to capture demographic attributes while also cheap enough to ship in vending machines? But admittedly I've little context on embedded systems and their capabilities

[–] [email protected] 42 points 9 months ago (3 children)

While I have no idea how much a computerized vending machine costs, I found this article about a age/gender classifier that runs on a Raspberry Pi 4.

Looking at the machine's big touchscreen, I think this classifier would fit on the SBC or require a relatively small upgrade.

[–] [email protected] 12 points 9 months ago

Yikes, smh... Yep that'll do it. I hate this timeline.

[–] [email protected] 8 points 9 months ago

Same Raspberry Pi foundation that hired a cop with a background in surveillance tech as their "resident maker"?

[–] [email protected] 5 points 9 months ago

The error message says ".exe" and looks like a dot net namespace.

[–] [email protected] 9 points 9 months ago (1 children)

Would it be significantly more costly than some of the features vending machines already have, such as card readers? I think these things are pretty costly already, but the profit margin on snacks and soft drinks is extremely high, so I'd imagine they'd recoup their cost pretty quickly.

[–] [email protected] 3 points 9 months ago* (last edited 9 months ago)

Well I thought so, but apparently we have good enough software that can run on a rasp pi now, so clearly the hardware requirements are much much lower than I understood.

Geez, I remember needing to use cloud services just for simple OCR not that long ago...

[–] [email protected] 5 points 9 months ago

Doritos are probably plenty powerful enough

[–] [email protected] 3 points 9 months ago

There's a vending machine in a co-working space I use sometimes that has a full on fridge and oven, and when you order off the touchscreen...something happens inside and sometimes a hot cooked thing comes out. I have no idea how it works and have not used it myself, because it seems possibly kinda gross.

[–] [email protected] 36 points 9 months ago (19 children)

Why the living hell would anyone agree to develop this? What douchbags are doing that job?

[–] [email protected] 16 points 9 months ago (1 children)

There are people who actually believe that kind of dystopic bullshit, even in the tech sector. I remember a colleague a few years ago, told me he liked targeted ads because "it knew what I wanted"

[–] [email protected] 7 points 9 months ago

Oh boy, those people frustrate me so much. The ones who have a verbal conversation about a topic they’ve never talked about before, like owning a cat, or taking a cruise to Alaska, and then giggle gleefully when they are inundated with cat litter and cruise ship ads wherever they go on the internet.

Some people just don’t care. And that’s actually fine. The ones who do care will try to look after the morons.

[–] [email protected] 16 points 9 months ago (2 children)

There's a lot of people in the world who do, in fact, like to eat.

[–] [email protected] 22 points 9 months ago* (last edited 9 months ago)

There are also a lot of people, already in the wealthiest upper percentiles, who would implement big brother just to be slightly wealthier.

[–] [email protected] 4 points 9 months ago (1 children)

"I was only following orders"

[–] [email protected] 2 points 9 months ago

Problem is, if you refuse to do it, they’ll hire another developer who will.

[–] [email protected] 7 points 9 months ago (1 children)

Probably exploited labor, similar to those who have no choice but to work in scam call centers to survive.

Pretty unfortunate that things are like this IMO

[–] [email protected] 0 points 9 months ago

I don't think software developers working in AI are "exploited labour just doing it to survive"

[–] [email protected] 6 points 9 months ago

Bro theres plenty of people who run scams in big offices all day every day

[–] [email protected] 1 points 9 months ago (1 children)

What kind of amoral, selfish monster, would know full well that car emissions are exterminating life as we know it on earth, and still decide to drive a car?

The same kind of monster who develops this technology.

[–] [email protected] 0 points 9 months ago (1 children)

I’m all down for using public transportation and electric cars when you pay to fix the infrastructure, have it run 24/7, or buy me an overpriced electric car that doesn’t destroy the earth as well with lithium mining and all the non-renewable resources used to manufacture it. Certainly better than gas.

Although I’d argue the car manufacturer is the one you should be angry with, not the buyer who is limited by availability, a limited public transit system, and price.

[–] [email protected] 2 points 9 months ago (1 children)

Ah, so there we go. You have a perfect set of excuses for your own actions and why they're someone else's fault, but you struggle to understand how someone could develop software like this. The answer is: the same way as you. Excuses.

[–] [email protected] 0 points 9 months ago (1 children)
[–] [email protected] 2 points 9 months ago* (last edited 9 months ago) (1 children)

No.

Aren't you taking this all a bit personally? I'm just using your own experiences to explain a situation you find difficult to understand. The douchebags are the same as you. Hope that helps.

[–] [email protected] 0 points 9 months ago (1 children)

Can you afford to finance $40,000?

[–] [email protected] 2 points 9 months ago (1 children)

Yeah, you're taking this way too personally. I'm out here explaining how people can justify doing bad things to themselves, and you're having a whole identity crisis over whether you're a bad person about it. Look, your personal difficulties excusing your own actions are none of my business.

[–] [email protected] 0 points 9 months ago (1 children)

I’m not taking this personally at all. I think you’re reading my responses with the wrong tone.

[–] [email protected] 1 points 9 months ago (1 children)

If you're not taking this personally, why all the personal questions about my transit habits and finances? It seems like you're trying to use me as some kind of gotcha for why you don't have to introspect. Leave me out of it.

[–] [email protected] 0 points 9 months ago

That’s how people have conversations? You seem really angry. Maybe go for a walk ;)

Have a good night.

load more comments (13 replies)
[–] [email protected] 13 points 9 months ago (1 children)

"local only"

Even if it's technically local-only, pretty easy for a tech to drive by and pull data it's stored.

Or when it gets filled.

[–] [email protected] 17 points 9 months ago* (last edited 9 months ago)

Its not really local only either, the cameras exist for the point of data harvesting, just look at their marketing. They only mean they're not streaming video to a server for recognition. The after-recognition data is still sent to a server https://www.invendagroup.com/vending-machines

[–] [email protected] 4 points 9 months ago

You know, when technology really got started, I had dreams about tech knowing me, doing things for me, acting in my best interest. Smile at the cashier, and my bill is paid, entering any public building, and I'm added to the queue, my documents already there... A vending machine would know me, holding back that last Snickers bar, because it knew that I would come by today...

It could have been good. It could have been right. On another planet, with another species. :')

[–] [email protected] 4 points 9 months ago

Probably because its real purpose is not to sell things.

[–] [email protected] 2 points 9 months ago (1 children)

Best case scenario the machine has some sort of standard software with facial recognition code, but no hardware in the machine. Would he interesting to know.

[–] [email protected] 9 points 9 months ago (1 children)
[–] [email protected] 2 points 9 months ago (1 children)

Oh geez. These corporations are trying to be evil every way they can.

[–] [email protected] 3 points 9 months ago* (last edited 9 months ago)

MARS isn't doing a good job of proving you wrong.

According to Invenda’s website, the Smart Vending Machines can detect the presence of a person, their estimated age and gender.

I'm confident I don't need a vending machine to know any of that.