A vending machine error at the University of Waterloo has led to the discovery of secret face recognition technology being used without consent. The controversial revelation has prompted the university to swiftly remove M&M-branded smart vending machines from campus.
The scandal unfolded when a student, using the alias SquidKid47, shared an image on Reddit displaying a vending machine error message, “Invenda.Vending.FacialRecognitionApp.exe,” after the machine failed to launch a face recognition application. This unexpected discovery raised concerns among students, with SquidKid47 questioning the presence of facial recognition technology in the M&M vending machines.
Following the Reddit post, a fourth-year student named River Stanley, writing for the university publication MathNEWS, initiated an investigation. Stanley’s research uncovered that the vending machines were capable of collecting and sending estimated ages and genders of users without their consent, as per Invenda sales brochures.
This revelation drew parallels to a previous privacy investigation involving a shopping mall operator, Cadillac Fairview, which had utilized facial recognition software on unsuspecting patrons. The investigation into Cadillac Fairview revealed that over 5 million non-consenting Canadians had been scanned into the database, leading to significant repercussions for the company.
Stanley’s report called for action, urging students to demand the university to prohibit facial recognition vending machines on campus. This call to action has spurred a response from the University of Waterloo, with spokesperson Rebecca Elming addressing the issue.
