Live data from Hacker News

Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

themarkup.org

211–220 of 243 posts

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#211

Earlier quoted context omitted.

Better yet: find somewhere to shop that they don't do that.

Name a place.

Well, my grocery store doesn't do that. Granted, whether or not you have a choice is highly dependent on where you live, but I'm just saying that its a better option if you can get it.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#212
post #83

Earlier quoted context omitted.

Not probably. They're certainly selling your data.

Unless you are in the EU, where it's illegal thanks to GDPR.

True. I'm being US-centric. Even though I consider the GDPR to be a bit inadequate, it's orders of magnitude better than what we have in the US, and I'm jealous.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#213

One thing I didn't see in the comments yet: at many stores in my region you can pick up a discount card and not register it, and it will still apply discounts when scanned. Of course it won't work everywhere and it's a half measure but it's one avenue worth trying if you care about privacy to some degree but still want the discount.

It's getting less common, but in my area many stores have a loyalty card sitting on their cash registers and, if you tell them you don't have one, they'll just use that.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#214

Earlier quoted context omitted.

theoretically the phone could still record all audio and then sync with the cloud when back online, but I'm grasping at straws here.

Why would it, though? If you're the sort who puts your phone into a faraday cage, you're not the sort who will install an app from the stores.

zero day OS-level exploit by some govt? idk.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#215

Earlier quoted context omitted.

Why would it, though? If you're the sort who puts your phone into a faraday cage, you're not the sort who will install an app from the stores.

zero day OS-level exploit by some govt? idk.

I thought we were talking about retail stores here, not governments.

If your threat model is governmental, then that's a whole different thing entirely. You'll have to go to true extremes to even have a chance at defending against that. For instance, you shouldn't have a cell phone at all.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#216
post #113

Earlier quoted context omitted.

"With facial recognition being a nearly solved problem, .." Meanwhile in Switzerland https://www.iamexpat.ch/expat-info/swiss-expat-news/facial-r... It’s never a nice feeling to think you are being watched, even if it is in a public place like the centre of a city or train station. Now, Swiss Federal Railways (SBB), the main public transport provider in Switzerland, has announced that it will be installing facial rec…

That is not necessary any more now. Now, when there are riots, it is well known that police has human "super-recognizers", which can scan thousands of photos and identify suspect individuals on a whim.

This is far more acceptable than facial recognition systems.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#217

I wouldn't mind so much if they also gave it to me. But my grocery points card sells my shopping list to everyone else BUT me. I've looked, and PC Optimum doesn't provide line items back to the consumer. So rude. Just like Experian and friends. Keeping detailed notes on me, and acting all surprised when I want to read them. It's like they are embarrassed I actually exist.

GDPR should allow you to access that data.

I've filed a request under PIPEDA. We'll see.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#218
post #195

Earlier quoted context omitted.

and probably very illegal

Not illegal yet. Read the paper, stores have already been trying versions of it and it's being used in some industries already. Airlines have been playing with it for ages, which is how you can get very different prices online depending on things like which browser you are using. ( https://millionmilesecrets.com/guides/are-airlines-raising-y... ). It's not transparent to the consumer when it's happening so you may ne…

It’s not illegal until a protected class is charged a higher price and has grounds for a lawsuit, and the grocery stores cannot prove their AI isn’t racist.

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#219

Earlier quoted context omitted.

If you have bluetooth on, beacons can try to connect and track your movement throughout the store. With Apple and Google both instituting rolling bluetooth mac addresses, this doesn't persist across the whole visit to the store, but will still let them see how long people stand in front of the cookies or how quickly they pass by the eggs.

It's also probably not that hard to recognize a freshly rolled over mac address as belonging to the same device as the previous address.

It's not.

1) The MAC that you saw entering the store and standing in front of the eggs vanishes suddenly.

2) A new MAC appears suddenly in front of the eggs.

3) Therefore, new MAC is probably the same device as old MAC

Re: Forget Milk and Eggs: Supermarkets Are Having a Fire Sale on Data About You

#220

Well, as long as people realize their data is sold by food markets, I am personally OK with it. That said, to not get the discounts (thus not sharing your information) is leaving money on the table. Also, if you are not part of a loyalty program, and you use a credit card, it is very possible that your purchases are still tracked - all it takes is cooperation between store and credit card company.

Why does it take cooperation with your credit card company? The supermarket can uniquely identify the card used for payment, even if they don't get the full credit card number due to PCI.

You are correct.
Post reply on HN