Live data from Hacker News

Retail stores use Bluetooth beacons to track customers

nytimes.com

201–210 of 257 posts

Re: Retail stores use Bluetooth beacons to track customers

#201

Earlier quoted context omitted.

Part of the problem I think is that these people don't actually comprehend what is happening and the possible consequences. To them it's just a magic black box.

Maybe I’m one of these people. What exactly are the consequences? So far, the most damaging consequence of overreaching customer privacy is the famous teenage pregnancy leak when Target sent out coupon mailers to expecting moms based on shopping history. That’s a really weirdly specific issue, and hard to imaging a similar scenario that would affect my life in some equally horrible way. Am I missing something? Why sh…

I work in credit scoring and you should be afraid of what you will not be eligible / priced systematically for in the future.

What will employers find when they use this for background checks? If you regularly buy alcohol a drinks_alcohol flag could be set or a health_indicator could increase.

Re: Retail stores use Bluetooth beacons to track customers

#202

Earlier quoted context omitted.

Maybe I’m one of these people. What exactly are the consequences? So far, the most damaging consequence of overreaching customer privacy is the famous teenage pregnancy leak when Target sent out coupon mailers to expecting moms based on shopping history. That’s a really weirdly specific issue, and hard to imaging a similar scenario that would affect my life in some equally horrible way. Am I missing something? Why sh…

As a more serious and well-known concrete threat, this type of data is regularly aggregated by data brokers, and then used by stalkers and domestic abusers to commit crimes. I imagine it being available and cheaply for sale is also a boon for various financial crimes/fraud. It's not home depot specifically to be worried about knowing a little about you, but about them not being competent to control that data and ever…

Never heard of them selling to individuals but it wouldn't surprise me if they do. At the very least a record should be kept of who they sold the data to in case it is used for a purpose like stalking someone.

Re: Retail stores use Bluetooth beacons to track customers

#203

Earlier quoted context omitted.

Maybe I’m one of these people. What exactly are the consequences? So far, the most damaging consequence of overreaching customer privacy is the famous teenage pregnancy leak when Target sent out coupon mailers to expecting moms based on shopping history. That’s a really weirdly specific issue, and hard to imaging a similar scenario that would affect my life in some equally horrible way. Am I missing something? Why sh…

I work in credit scoring and you should be afraid of what you will not be eligible / priced systematically for in the future. What will employers find when they use this for background checks? If you regularly buy alcohol a drinks_alcohol flag could be set or a health_indicator could increase.

This feels like it should be better dealt with via legislation. Already sounds like health data, which is legislated to high-heaven in the US, and also sounds like the juiciest ever GDPR suit waiting to happen in the EU.

Re: Retail stores use Bluetooth beacons to track customers

#204

Earlier quoted context omitted.

Yes that's exactly how this gets implemented in practice. I did quite a bit of client work here too, specifically around using already existing surveillance camera networks to build user profiles. At the end of the day the goal is to optimize for the intersection of "what the user wants" and "what we want to sell." So, a low collection system will give bad recommendations and a really good recommendation system will…

Part of the problem I think is that these people don't actually comprehend what is happening and the possible consequences. To them it's just a magic black box.

Is there a concise, well written, summary of the types of things that are likely to happen to folks because of data collection? Would be nice to have something to give people that don’t understand.

Re: Retail stores use Bluetooth beacons to track customers

#205

Maybe the existence of such toolkits is a Chesterton's Fence that says you can't make this work without something installed on the phone. But this would be possible without these trojans. If the Bluetooth beacon configures itself as a master, and enters inquiry mode, phones that pass nearby will happily respond with their Bluetooth ID (see https://www.bluetooth.org/docman/handlers/downloaddoc.ashx?d... , section 8.4)…

> Maybe the existence of such toolkits is a Chesterton's Fence that says you can't make this work without something installed on the phone. But this would be possible without these trojans. Without these trojans the store would have on its hands a major networking infrastructure project. With these trojans, all they have to do is drop a few battery-powered beacons in their venue and store their IDs along with coordin…

"The store" that implements these is probably not a mom-and-pop. Places like Walmart succeed because of their ability to execute major logistics and networking projects.

If the beacons increased Wal-Mart's revenue by 1%, the "major networking infrastructure" project could be a $5 billion department, larger than Google's entire R&D operating expenses.

Re: Retail stores use Bluetooth beacons to track customers

#206

Earlier quoted context omitted.

I work in credit scoring and you should be afraid of what you will not be eligible / priced systematically for in the future. What will employers find when they use this for background checks? If you regularly buy alcohol a drinks_alcohol flag could be set or a health_indicator could increase.

This feels like it should be better dealt with via legislation. Already sounds like health data, which is legislated to high-heaven in the US, and also sounds like the juiciest ever GDPR suit waiting to happen in the EU.

Well the example was now around health data, but you can easily make up other more innocuous examples that will discriminate enough to give you a disadvantage.

Re: Retail stores use Bluetooth beacons to track customers

#207
post #107

Earlier quoted context omitted.

1. Pretend it is the 1970s in East Berlin and someone follows you around, noting down every interaction you have with other humans and every bit of media you consume and collects this information in a file somewhere for future use. This is the horrifying and oppressive surveillance machine of a paranoid dictatorship. 2. Use a computer to the the exact thing automatically today. This is just the natural state of the w…

There is a clear difference between 1970s East Berlin and now. Stasi spying propped up a system that provided a relatively low standard of living and a limited availability of consumer goods. Modern tracking of customers fuels a vibrant customer-good market that is a win-win for everyone.

I don't think it is ok for any entity to make notes of when you buy condoms and then spend the night at an adress you don't live on and infer whatever it infers from that and then sell this information to any other entity to do whatever it pleases with marketing or otherwise. Even if I make more money than the X% who still have a worse material standard today than the median East Berliner.

Re: Retail stores use Bluetooth beacons to track customers

#208

Earlier quoted context omitted.

This feels like it should be better dealt with via legislation. Already sounds like health data, which is legislated to high-heaven in the US, and also sounds like the juiciest ever GDPR suit waiting to happen in the EU.

Well the example was now around health data, but you can easily make up other more innocuous examples that will discriminate enough to give you a disadvantage.

But the more innocuous, the less I care...

Re: Retail stores use Bluetooth beacons to track customers

#209

Earlier quoted context omitted.

self checkouts already have eye level cameras and they know which items you actually purchase so really not that farfetched to assume they're also using beacons to track your phone as well.

And when you swipe your card to check out they have your name, even if you don't use a loyalty card. Name + Face, along with some bluetooth tracking data. They can now track you forever, even if you delete the app, stop using your credit cards, etc.

>And when you swipe your card to check out they have your name, even if you don't use a loyalty card

I thought the name’s embossed on the card, but not on the magstripe/EMV chip data?

Re: Retail stores use Bluetooth beacons to track customers

#210
post #55

Android has a feature called "nearby device scanning" so even if you turn off bluetooth, apps can still do BLE. I suspect stuff like this, where many many apps can spy on you on behalf of others, is why Google made BT access a Location category. But it means your weather app that uses location to tell you where you are? It is selling your location via BT beacons to 3rd parties.

I really wish android differentiated between foreground and background location permissions.

Meet the newest Android Q (10) which is available as a beta. The permission levels are there for what you wish. It's impressive to see just how many apps were previously getting background location (and many other) permissions by default. Eye opening experience for someone that figured it wasn't that bad.
Post reply on HN