China's national security departments have issued a safety alert, stating that when using electronic retail services, one must raise awareness of security, as certain vending machines that use QR code scanning and facial recognition payments may pose risks of collecting biometric information, making users vulnerable to 'data assassins' stealing their personal information.
According to a report from 'CCTV News,' the Ministry of State Security issued the latest alert on the 24th, pointing out that digitization has made self-service vending machines and other forms of electronic retail increasingly popular. These vending machines let you buy items instantly using QR code scanning or facial recognition. However, such machines are typically equipped with biometric recognition, audio/video recording, facial recognition, infrared imaging, and other technologies that can collect the facial features of passersby and capture iris patterns and other biometric data from users.
Certain machines that enable facial recognition features may further require users to provide their phone number, gender, date of birth, and other personal privacy information after obtaining facial data. If the back-end information system these devices connect to has security vulnerabilities, it may be breached by attackers, resulting in data leakage risks.
In addition, services that let users order through apps or mini-programs and have goods delivered to designated locations are becoming increasingly popular. However, some online shops, in order to obtain buyers' precise delivery locations, may automatically mark sensitive areas and sites on the delivery map, and conduct associated analysis based on purchase frequency, product preferences, social graphs, and other information, forming user profiles for those regions or locations.
If these devices contain security loopholes and are exploited by criminals, they may lead to personal data leaks. Once stolen, such data could become a breakthrough point for foreign espionage or other illegal activities.
National security departments urge consumers to strengthen their awareness of data protection while enjoying convenience, and to beware of the potential threats posed by 'data assassins.'
According to a report from 'CCTV News,' the Ministry of State Security issued the latest alert on the 24th, pointing out that digitization has made self-service vending machines and other forms of electronic retail increasingly popular. These vending machines let you buy items instantly using QR code scanning or facial recognition. However, such machines are typically equipped with biometric recognition, audio/video recording, facial recognition, infrared imaging, and other technologies that can collect the facial features of passersby and capture iris patterns and other biometric data from users.
Certain machines that enable facial recognition features may further require users to provide their phone number, gender, date of birth, and other personal privacy information after obtaining facial data. If the back-end information system these devices connect to has security vulnerabilities, it may be breached by attackers, resulting in data leakage risks.
In addition, services that let users order through apps or mini-programs and have goods delivered to designated locations are becoming increasingly popular. However, some online shops, in order to obtain buyers' precise delivery locations, may automatically mark sensitive areas and sites on the delivery map, and conduct associated analysis based on purchase frequency, product preferences, social graphs, and other information, forming user profiles for those regions or locations.
If these devices contain security loopholes and are exploited by criminals, they may lead to personal data leaks. Once stolen, such data could become a breakthrough point for foreign espionage or other illegal activities.
National security departments urge consumers to strengthen their awareness of data protection while enjoying convenience, and to beware of the potential threats posed by 'data assassins.'