I created an account while in the store with an email of fuckyou@thisisstupid.com and a basic password and surprisingly didn’t have to verify the email. Then turned on a VPN to my house.
I plan on just creating a new account every time I go in just to fill up their database with nonsense.
Cool, is samwaltoncaneatabagofdicks@inhell.com still available?
It is not. You need to add a number at the end.
inhell.info is available and Postfix is a thing.
You do realize that they are actually tracking the device itself by the hardware MAC address and other device fingerprints.
The email is just a bonus to let them legally spam you. Anti-spam laws have an exemption. If there’s a prior business relationship like shopping in their stores, they can put you on their spam list unless you opt out.
Bogus email only helps for spam but doesn’t do anything about tracking.
EDIT: For Android when there’s a Captive Portal like the screen shot. devices will use Persistent randomization which while not the hardware MAC will remain the same for the same network where they can track your visits.
GrapheneOS let’s me do a per-connection randomized MAC.
I’m sure they do collect a lot more about my device, but there’s not much I can do about it short of wrapping my phone in tin foil.
Don’t forget to disable wifi and bluetooth before approaching the store, as those give off unique identifiers too.
Don’t forget to spoof your MAC address so they cant see who is making the fake accounts ;D
This is the way. Fuck them.
Not Walmart, not wifi but my default is @gfy.com
Literally 1984
NB4 VPN
At least they’re telling you. There’s also a lot of hidden surveillance in stores - they’ve done it with Bluetooth and cameras for some time. Things like monitoring how long you look at products and evaluating your reactions to displays.
That’s why I always introduce a good bit of entropy to my shopping patterns:
-Enter and go straight to produce
-Spend 20 minutes examining eggplants
-Walk up and down 5 aisles pausing exactly the square of the aisle number in seconds.
-Grab a box of tampons
-Grab what I need as quickly as possible
-Return tampons
-Checkout and leaveSomewhere a marketing team is spending hours trying to figure out how to improve the conversion rates for tampons and eggplants for customers in my demo.
deleted by creator
Then throw some pocketsand at the end
Shaaahhhhhh
Don’t forget to flick and knock on various fruits and vegetables. Randomize how many flicks/knocks per item, and throw in a few on produce items that normally don’t get that kind of test e.g. grapes or potatoes.
Wait, there are fruits/veggies that get this kind of treatment by typical customers? Please list a few.
Don’t forget to be visibly revolted by any ads you happen to glance at
At least they’re telling you.
Now there telling you. They just didn’t ask for consent before.
That’s what I mean.
In the EU they already had a complaint, because it violates GDPR, but in any case I would never use a public WiFi without a VPN, and even less in places with these conditions, there is also free WiFi in some Rstaurants (even in most McDonalds), public Libraries and others. Fuck surveillance advertising
There’s just no reason to unless you are really skimping on phone data. Random wifi hotspots are one of the most dangerous things for an average joe in terms of infosec.
They seem to explain pretty well how your data will be used, why would this violate GDPR?
I might be wrong but i think it is because they don’t give you the option to opt out and use the wifi.
Should they? I would simply not connect to their Wi-Fi and move on, it’s not like they are obligated to provide you internet.
No way to opt out?
I have seen it on Europe… maybe there was some way to circumvent it hidden away, not sure. But you could type a random email and that’s it, like they don’t send anything to confirm the email or anything once you submit you have access to internet.
Better to send a disposable mail, where yo can receive the log data before it expired.
eg
- https://maildrop.cc
- https://altmails.com
- https://www.disposablemail.com
- https://www.lazyinbox.com/#/
- https://www.guerrillamail.com
etc
anonbox from ccc
I was about to say… Isn’t using public wifi’s extremely dangerous?
Yes, because of this using an public WiFi without VPN is a no-go
Right, and this Walmart in Europe would be where exactly?
https://storelocator.asda.com/directory
Asda is Walmart
That’s England so no gdpr anyway
UK gdpr not withstanding, the question asked was: where in Europe. UK remains a part of Europe post brexit.
AFAIK it does not exist in Europe, but I meant that these conditions in the EU would not be tolerated. Maybe because of this there isn’t a Walmart in the EU, there are a lot of Malls from other companies and none of these use this practices in their restaurants, mostly with free WiFi for their visitors. Offering free WiFi is already enough of a benefit for them, because it attracts customers, they do not need to intrude on their privacy with an obvious attempt to spam them and make money with their data.
Why would anyone interested in privacy connect to any public WiFi? That’s crazy.
When you need service, but data is blocked by all the steel in the ceiling/roof. I’ve used it, but with my VPN active. I wonder if they’re now going to try to block VPN services?
Just VPN to your home network. What are they going to do, block every IP but theirs?
Why are all you mother fuckers shopping at Walmart. They are a welfare corporation offloading their costs to tax payers because despite making tons of money they pay shit and skirt employee benefits laws by keeping worker hours low and give new employees info on how to get financial aid such as food stamps.
This is the most privileged thing you could say.
“Hey, why isn’t everyone eating sustainably sourced GMO-free, organic, locally-grown food all the time?”
Spoiler alert: it costs more
Yeah, this is the thing. Does literally anyone want to go to Walmart? No. Is it the place I can afford? Increasingly, still no. Not sure I can even afford to walk past whatever the good version of a Whole Foods is today, though.
Dollar tree is looking expensive these days
At least dollar tree is significantly easier to shoplift from.
Haha exactly. People shop at Walmart because they work at target and don’t make enough money to shop at Whole Foods.
Cause WinCo doesn’t always have what I need, but most importantly:
I’m poor.
I needed a job, alright. I usually shop at hannaford although it’s expensive. I wanna farm someday.
A lot of people in rural areas find themselves in situations like being 10 minutes from a walmart and an hour from any other option. So then anything besides walmart costs gas and time, on top of the product cost difference to begin with.
Nobody wants to drive extra after 8 hours of shitty minimum wage work and/or taking care of children.
Not like other grocery stores are any good for workers, either.
Because all of the other retailers do the same shit only with higher prices. Here in Canada they don’t pay their employees any less than the competition, yet their prices are 30-40% cheaper on average.
That extra 40% doesn’t result in better working conditions for the employees, it goes directly to the shareholders and bonuses for the C-suite.
I respect the hell out of Walmart because they actually keep their price increases tied to inflation and aren’t out there trying to sell a loaf of poverty white bread for $5 or a pack of 4 chicken breasts for $37.
I got some insight from a friend who works at a major supplier for these retail stores in Canada. He said how they manage prices is that when they anticipate a rise in cost they’ll jack the price all the way to a future projected target instead of following the current inflationary rate so that they won’t need to constantly quote their customers different prices. They don’t care because they know it will get passed downstream.
Fake email and vpn = Free private connection
You dont even have to type a real email it doesn’t verify anything. Just something@somewhere.xxx
The amount of success I’ve had with optout@businessdomain.tld is unreal
I personally use .@dot.com or dot@dot.com because it’s fast to type lol
I usually do
thepresident@whitehouse.govWorks most of the time.
I sincerely hope no one has the email
test@testtesttest.combecause ohhhhh boy have they been getting some emails.It was you!!
deleted by creator
Next time try @@@@@@@@@@@ and see if it works
deleted by creator
@@@@@@@.@@@
Pedantic but
vpn free
Boy I hope not
There was an equal sign in between those words. Idk if it’s visible on your end but I see it on mine. That being said, the only free vpn I would use is protonvpn. Downside is it’s slow and unstable due to using a free plan.
I use https://temp-mail.org/en/ when signing up for one time stuff
Yeah I use simplelogin but for stuff I don’t care about like this I’d probably use that or spam keyboard for fake email
Your phone simply being in the store with Wi-Fi enabled makes you personally identifiable. A request for your email when they have your location, shopping habits, taste in electronics, estimated address, browsing habits, and your full appearance isn’t shocking. That no one has pointed this out yet is a bit eye opening.
Mac address randomization has been enabled by default since Android 10. I would assume iPhone does something similar.
Oh, ok. Thanks for linking it! :)
Per-network, though, not per-connection.
iOS requires each network to individually be randomized, there’s no singular setting, unfortunately.
deleted by creator
Buy RFID/NFC shields for all your tap cards in your wallet, these can be used to track your presence
deleted by creator
That was an interesting read. Didn’t know stores were doing that.
Expecting privacy on someone else’s network is absurd.
deleted by creator
Cause I get shit service in Walmart and don’t really have any other option if I need to look something up while shopping.
Same here. I wonder if they do it on purpose.
I live near a shopping area with a bunch of stores. It has zero cell coverage from any provider. Apparently there’s been some NIMBY resistance to putting up towers in nearby neighborhoods.
Fair, but even using your normal router without a VPN isn’t good imo. Even if it’s not as bad as public. And VPNs are usually an extreme measure. If I was using public WiFi, and doing stuff on my bank account, then yes, VPN all the way, but I usually don’t feel that I need it.
Why is the vpn necessary when you have https to the bank? Just to hide you’re ip from the bank?
Public WiFi would make me skeptical when I always put in my passwords.
Well im just saying thats what https is for but there’s nothing wrong with extra security
So if https is all that’s needed, why do VPNs recommend using them at public locations? Just false advertising? I click on my bank app and it always wants a password and I guess I don’t know enough about network engineering. I’m interested in Android Development but don’t know much about WiFi I guess.
Marketing mostly. The vpn makes an encrypted tunnel that you’re traffic goes thru. If using https and vpn there are 2 layers of encryption. It’s not false advertising bc an extra layer doesn’t hurt. Now if your sending password over http it would help but you shouldnt be using a site that sends passwords over plaintext. I would say vpn is mostly to either hide your ip from websites or to hide internet activity from your isp
So more for privacy than security, so it would make sense to use a VPN depending on your threat model I suppose, or how much you care.
Not sure about this Walmart case but most you can write any email like random letters a@gmail.com or not even the Gmail part as long as it’s a valid looking mail and then works like you don’t even have to confirm the email or anything.
this is incorrect for the walmart case, next step is the password for the account, so you need to login or create a Walmart account for access
Oh yeah I see I mis read the prompt, I thought it was going with a enter you mail as alternative to using an account.
Walmart, the biggest grocery retailer in the entire United States, uses face tracking in the majority of their stores in several sections, and we’re concerned about their Wi-Fi?
The Wi-Fi seems like such a minor problem compared to them collecting massive amounts of data off of something you aren’t consenting to explicitly.
Like you walk into their stores and they can know: How often you visit, what items you buy, what payment method you use most often, what items you looked at and what aisles you visit, who you bring with you, what your kids look like, what disabilities you may have, size of your household, and whatever else they want. There’s basically no respect for any privacy in their stores.
The US is a privacy nightmare in competition with China. Most of the US doesn’t have any option over their privacy. You just don’t get it here.
It’s even worse as an associate. They make us sign up for some social media I never use, download apps on our phones, and make us give them our handprints for a machine to take out our tills. And we’re getting face scanned by cameras all day. Dystopian nightmare and it makes me feel ashamed to have accepted the job here.
I use GOS and therefore believe that I have some level of protection on the WiFi level based off of that, and I have their apps on a separate profile but it’s getting tougher on privacy here at Walmart.
Edit: That’s also why I have no pictures of me in my socials and deleted my Facebook, Instagram, and twitter, so they shouldn’t have too many ways to market to me aside through my debit and credit cards possibly.
it’s not like they weren’t doing this before
I always give some bs emails in those authentication forms. Mainly because as a client who tries to connect, I do not have internet access, so I cannot verify my email before they give me the access. And when they gave me access, there is no power in the world to make me do that 🤷
I am so happy to live in Sweden. All open WiFi networks here are free to use and requires no email or account (VPN recommended as always, though). Even at grocery stores.
That’s generally true in the US as well. That’s why people are so outraged by this.
So Walmart has done it again, huh?
Lol, I’m jealous. Pretty much all public WiFi requires login in the UK.
This might be anecdotal tbh. I am in the US and I run into captive portals all the freaking time. It’s so annoying.
