“ Students at the University of Waterloo discovered that their candy machines were covertly collecting facial recognition data when 'Vending.FacialRecognitionApp.exe' crashed.”