Hacker News Reader

Comment by rglullis | Hacker News Reader

Yeah, imagine if every convenience store had CCTV security filming everyone 24/7.

Oh, wait...

they don't know necessary who are you and what are you buying. I don't think also for big shops with many customers that techonology and reliably do instance segmentation - this is not face id.

They don't, but there is a significant chance that their "security solution" uploads all the data to a cloud provider (Amazon, Google, Oracle) which will be more than happy to analyze the data for them.

That's possible but would be completely and highly illegal, the EU regularly fines companies violating GDPR, and those fines are not trivial at all, they can be quite hefty.

I was talking about the reality of the US, but even if I was talking about Europe: how does the GDPR even enter this equation here? I was never asked for consent to have my face recorded when I get into a shop in Germany. Were you?

Security recordings fall into the category if legitimate need, and have to be deleted after a short while.

How is that enforced?

Its not. Especially when using US Cloud services. And people do that. Hell even government run schools us GDRP-violating software and force the students to BUY them. The law is nice, the reality is different...

It doesn't need to. Those recordings are "radioactive" and can't be used in any legitimate fashion except by intelligence agencies.

Plenty of data brokers operating outside of the EU who wouldn't mind the "toxicity" of the data they buy.

Or, I should say, things are enforced after the fact, through the possibility of criminal charges or civil lawsuits. Enforcement doesn't mean that crime is made impossible, just that there is enough deterrent.

Except there isn't enough deterrent.

The big companies are still mining user data, they are just forced to use some extra dark patterns to trick people into compliance. Would-be criminals are not going to stop being criminals because of the threat of fines. And TLAs are not going to wait for due process to acquire access to data legally.

All that GDPR does is give the illusion that people are being protected and CYA for politicians and bureaucrats when asked "what are you doing about evil Zuckerberg?"

You're veering way off-course here. This started from "I was never asked for consent to have my face recorded when I get into a shop in Germany. Were you?", to which I replied that those recordings are radioactive and nobody's allowed to do anything with them except for intelligence agencies. We're not talking about generic web tracking and dark patterns.

of not if

The editing window is too short, unfortunately.

Stop correcting people when you can't even spell worth a damn yourself, you're just adding pointless noise to discussions.

I don't want to have to read your noise.

Doesn't stop the stores from posting clips of you embarrassing yourself online and your acquaintances giving your name away for clout.

Do you not pay for you groceries? Then the store probably has a good idea about your identity. In any case, they payment processor knows exactly who you are, and the store and anyone else who cares can buy this information online, albeit in a slightly obfuscated form.

Unless you live at some place where they still accept cash of course, but the writing is on the wall already.

Sure - that's saved for Visa or Mastercard to track your purchase history across time

Reply on news.ycombinator.com