I created an account while in the store with an email of fuckyou@thisisstupid.com and a basic password and surprisingly didn’t have to verify the email. Then turned on a VPN to my house.
I plan on just creating a new account every time I go in just to fill up their database with nonsense.
GIGO (Garbage in, garbage out) is the correct way to deal with the surveillance system.
Cool, is samwaltoncaneatabagofdicks@inhell.com still available?
inhell.info is available and Postfix is a thing.
You do realize that they are actually tracking the device itself by the hardware MAC address and other device fingerprints.
The email is just a bonus to let them legally spam you. Anti-spam laws have an exemption. If there’s a prior business relationship like shopping in their stores, they can put you on their spam list unless you opt out.
Bogus email only helps for spam but doesn’t do anything about tracking.
EDIT: For Android when there’s a Captive Portal like the screen shot. devices will use Persistent randomization which while not the hardware MAC will remain the same for the same network where they can track your visits.
Pretty much all modern phones randomize the MAC address everytime they connect to a network unless the user explicitly says not to do that.
randomize the MAC address everytime they connect to a network
+1, had issues using Android devices for presence detection because of this very useful privacy feature. Even on your home network, the MAC address and device hostname get randomized, unless disabled in the settings
Edit: typo
When there’s a Captive Portal like the screenshot, many devices use a random but persistent mac for that network avoid reauthorization after any network drop. This will make your access to the specific network trackable.
GrapheneOS let’s me do a per-connection randomized MAC.
I’m sure they do collect a lot more about my device, but there’s not much I can do about it short of wrapping my phone in tin foil.
Don’t forget to spoof your MAC address so they cant see who is making the fake accounts ;D
I think the point of this post is all the stuff below the email field. Yikes.
That data isn’t nothing, either. Over ten years ago, Target was able to use shoppers habits to determine when women were pregnant, sometimes even before the women knew.
https://www.nytimes.com/2012/02/19/magazine/shopping-habits.html
Imagine how much more robust this has gotten 10 years later.
This is a fantastic read.
I remember febreeze coming out and being like, that would be cool but you can’t trust ads and it sounds like total BS. I knew they added a scent, but I had not idea about the subtle social manipulation that they used to shift people’s habits.
Speaking of habits, this is the first time I have heard about all the science involved in studying and breaking them.
Thank you for that link. Definitely going to save it.
Not really. With https luckily being the default, at most they could get the sites you were going to (I don’t think dnss is dead, but it’s been very slow to grow unfortunately).
They could probably see if you’re checking Amazon or Google, but wouldn’t be able to see what you’re looking at exactly. Theoretically they could use cameras and or triangulation to see what you’re in front of when you use the Internet, but a VPN would still show traffic so they’d know you’re looking up something.
The big thing this would do is act like a loyalty card… They give you some amount of benefit in exchange for tracking your purchases in ever higher detail. Mostly it’s just like that, except they’d also be able to see how long you are in the store, and ideally they can link it to your purchases so they can infer more about it
FWIW, I wouldn’t only consider giving them a disposable email
At least they’re telling you. There’s also a lot of hidden surveillance in stores - they’ve done it with Bluetooth and cameras for some time. Things like monitoring how long you look at products and evaluating your reactions to displays.
That’s why I always introduce a good bit of entropy to my shopping patterns:
-Enter and go straight to produce
-Spend 20 minutes examining eggplants
-Walk up and down 5 aisles pausing exactly the square of the aisle number in seconds.
-Grab a box of tampons
-Grab what I need as quickly as possible
-Return tampons
-Checkout and leave
Somewhere a marketing team is spending hours trying to figure out how to improve the conversion rates for tampons and eggplants for customers in my demo.
Don’t forget to flick and knock on various fruits and vegetables. Randomize how many flicks/knocks per item, and throw in a few on produce items that normally don’t get that kind of test e.g. grapes or potatoes.
Wait, there are fruits/veggies that get this kind of treatment by typical customers? Please list a few.
At least they’re telling you.
Now there telling you. They just didn’t ask for consent before.
In the EU they already had a complaint, because it violates GDPR, but in any case I would never use a public WiFi without a VPN, and even less in places with these conditions, there is also free WiFi in some Rstaurants (even in most McDonalds), public Libraries and others. Fuck surveillance advertising
Agreed. My iPhone connects to my home VPN via Wireguard as soon as I leave my home WiFi. Has the added benefit of pihole ad filtering everywhere.
Have you experienced any downsides to using pi hole? Does anything stop working?
In the 6 years I’ve ran mine, I’ve not had any issues and I run a blocklist with over 1 million domains on it.
If I was to run into something that’s blocked that I do want loaded, I can just open the pihole interface and either whitelist the blocked domain or disable blocking for a short time, each with just a couple clicks.
I have seen it on Europe… maybe there was some way to circumvent it hidden away, not sure. But you could type a random email and that’s it, like they don’t send anything to confirm the email or anything once you submit you have access to internet.
Better to send a disposable mail, where yo can receive the log data before it expired.
eg
- https://maildrop.cc
- https://altmails.com
- https://www.disposablemail.com
- https://www.lazyinbox.com/#/
- https://www.guerrillamail.com
etc
Went to a Walmart the other day and my phone automatically connected to a wifi that was apparently hosted by my cell carrier. Immediately turned on my VPN because wtf. I disconnected at first then realized I didn’t have any service at all which was probably why it existed. Thankfully didn’t need to log in but that’s why I have Firefox relay.
They seem to explain pretty well how your data will be used, why would this violate GDPR?
I might be wrong but i think it is because they don’t give you the option to opt out and use the wifi.
AFAIK it does not exist in Europe, but I meant that these conditions in the EU would not be tolerated. Maybe because of this there isn’t a Walmart in the EU, there are a lot of Malls from other companies and none of these use this practices in their restaurants, mostly with free WiFi for their visitors. Offering free WiFi is already enough of a benefit for them, because it attracts customers, they do not need to intrude on their privacy with an obvious attempt to spam them and make money with their data.
