‹ BackHN Continuity

Thread

500k facial scans at UK stations yield no arrests, 1 false positive

518 points · 305 comments · ilamont

  1. blitzar · · focus · HN ↗
    16 deployments for 6 months at rail stations - they must have been off 99% of the time to only scan 500k faces.

    For scale 500k people is 2 days of Liverpool Street Stations daily average

    1. iamacyborg · · focus · HN ↗
      How many unique faces though
    2. mrweasel · · focus · HN ↗
      A lot of those are going to be the same people day in and day out, the article says 500k faces, not people. You also have to filter out those people where the cameras aren't getting an image good enough to scan.

      The article doesn't say, and I haven't seen the cameras, but it's not like you're getting every single person parsing through those stations.

      But, yes, the numbers seems low.

      1. mtrovo · · focus · HN ↗
        They&#x27;re quite tall an positioned just after the barriers so I would believe they&#x27;re quite effective on capturing faces. <a href="https:&#x2F;&#x2F;images.ctfassets.net&#x2F;pjshm78m9jt4&#x2F;29ok6Erlnhk6WIqP3w4ZOc&#x2F;da5cb7225c3b03a7b337aa37e1eca93f&#x2F;TfL_Image_-_BTP_LFR_trial_at_London_Bridge_Station_1.JPG?fm=jpg&amp;fit=fill&amp;w=1600&amp;q=80" rel="nofollow">https:&#x2F;&#x2F;images.ctfassets.net&#x2F;pjshm78m9jt4&#x2F;29ok6Erlnhk6WIqP3w...
      2. matteason · · focus · HN ↗
        BTP say [0] that &quot;the images and biometric data of those who don’t cause an alert are automatically and immediately deleted.&quot; - if that&#x27;s true, they shouldn&#x27;t be able to tell that it&#x27;s the same faces being scanned multiple times so it has to be 500k total scans rather than, say, 500k unique faces across 2 million scans

        [0] <a href="https:&#x2F;&#x2F;www.btp.police.uk&#x2F;police-forces&#x2F;british-transport-police&#x2F;areas&#x2F;about-us&#x2F;about-us&#x2F;facial-recognition-technology&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.btp.police.uk&#x2F;police-forces&#x2F;british-transport-po...

        1. cortesoft · · focus · HN ↗
          You could still delete while maintaining the ability to tell if a face has been seen before, by using some fingerprinting + one way hash function
          1. Rumudiez · · focus · HN ↗
            that’s not deleting the data then. making people play Only Connect to parse out weasel phrases is akin to lying by omission. they say the same thing at US airports which is why I still opt out of the face scan at security. of course they keep hashes of the image and its features otherwise what’s the point
            1. cortesoft · · focus · HN ↗
              It is deleting data, but you are right that it isn&#x27;t all the data
              1. Borealid · · focus · HN ↗
                The sentence says &quot;the [...] data [...] are automatically and immediately deleted&quot;. It does not say &quot;some of the data are automatically deleted&quot;. It would be a staight lie to delete some, but not all, of the data and then issue the statement that &quot;the data are deleted&quot;. This is not an ambiguous case or weasel-wording: it is an unambiguous falsehood.

                If you have two coins and you spend one, you cannot truthfully say &quot;I spent the coins&quot;. The definite article &quot;the&quot; means all of something you have in this usage, not a single member of a class of something you have. It would be true to say &quot;I spent a coin&quot; or &quot;I spent some of the coins&quot;.

                1. autoexec · · focus · HN ↗
                  The sentence says &quot;...the images and biometric data...are automatically and immediately deleted&quot;. It doesn&#x27;t say that the information they learned by using the images and biometric data that they collected, such as your name, location, the timestamp etc is being deleted. Who you are and where you were at what time isn&#x27;t an image and isn&#x27;t your biometric data.
                  1. Borealid · · focus · HN ↗
                    The data necessary to determine a face had previously been seen are biometric data.
                    1. no-name-here · · focus · HN ↗
                      If the name&#x2F;address is already in the “already seen” list, wouldn’t that be enough to determine the face had already been seen? Or are you saying the name&#x2F;address should be considered biometric data?
                      1. Borealid · · focus · HN ↗
                        We have no reason to believe a given face is linked to a person&#x27;s name by this system.
                2. cortesoft · · focus · HN ↗
                  It isn’t exactly like coins, because data is both singular and plural.
                  1. Borealid · · focus · HN ↗
                    If we&#x27;re going to be precise, the word &quot;data&quot; is plural and its singular is &quot;datum&quot;. But treating it as a substance noun does not change the argument I made in any way - &quot;I gave away the water&quot; does not mean &quot;I gave away some of the water (and kept some for myself)&quot;.
        2. techjamie · · focus · HN ↗
          They&#x27;re being very specific about images and biometric data, and they&#x27;re weaseling those words for a reason. If they deleted all data about such scans, they&#x27;d say that.

          To do the lookup they&#x27;re still hitting a database somewhere to know you aren&#x27;t a concern, which is prime time to log that you were seen, when, and where. Then your &quot;images and biometric data&quot; can be &quot;immediately deleted&quot; since they&#x27;ve gotten anything else they want now.

          This is just a theory, but I bet I&#x27;m not far off.

      3. blitzar · · focus · HN ↗
        Digging in it cameras were deployed 21 times for about 4 hours each time ... matching against a watchlist of around 400 faces.

        Sounds like it was intended to achieve the outcome it achieved - a near zero false positive rate. If I were a betting person, I would wager the threshold for a match was set comically high.

        <a href="https:&#x2F;&#x2F;www.btp.police.uk&#x2F;police-forces&#x2F;british-transport-police&#x2F;areas&#x2F;about-us&#x2F;about-us&#x2F;facial-recognition-technology&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.btp.police.uk&#x2F;police-forces&#x2F;british-transport-po...

    3. MisterMunchkin · · focus · HN ↗
      And they allow people to walk around them with a labelled route, so you see all the criminals just walk around it.
      1. flumpcakes · · focus · HN ↗
        Perhaps not many criminals use train stations during the day, for example, people probably deliver drugs by bike or car so they don&#x27;t walk around a busy place stinking of weed.

        How many known criminals have biometrics of them in the first place?

        Of the criminals that do have identifiable biometrics, do they operate in that area?

        We also don&#x27;t know the false negative rate. Perhaps it&#x27;s very high in order to keep the false positive rate as low as possible.

        These are things pulled out of thin air that could easily explain why 500,000 face scans (not people) provided no arrests&#x2F;identifications.

        The biggest reason probably being as you said... it was clearly marked. Honestly I would be shocked if they found a criminal dumb enough to walk past it, but not dumb enough to have yet to be caught.

        1. ErroneousBosh · · focus · HN ↗
          &gt; people probably deliver drugs by bike or car so they don&#x27;t walk around a busy place stinking of weed.

          A year or two ago there was a &quot;shock horror&quot; piece in one of the far-right extremist tabloids, possibly the Daily Mail, claiming that Glasgow was so lawless &quot;you could get a gram of coke delivered quicker than you could get a pizza delivered&quot;.

          Shut down by one person&#x27;s tweet - &quot;yes, because one of them arrives in a Vauxhall Corsa and one arrives in an Audi RS3&quot;

          1. antonvs · · focus · HN ↗
            Simple solution: order your pizza from your coke dealer.
            1. ErroneousBosh · · focus · HN ↗
              100 quid pizza that comes with a &quot;free gift&quot;.
          2. BobaFloutist · · focus · HN ↗
            I also kind of wouldn&#x27;t expect that my coke is made to order and would hope that my pizza is.
            1. ErroneousBosh · · focus · HN ↗
              &gt; I also kind of wouldn&#x27;t expect that my coke is made to order

              I mean I expect you could get that, for the right sort of money.

              Maybe not in Brigton, but certainly in the wealthier parts of the South Side.

    4. megous · · focus · HN ↗
      It&#x27;s called sampling. It works. :)
    5. LastTrain · · focus · HN ↗
      OK, so turn them on 100%, scale (your numbers here) the results out to 50 million faces. Now you have still caught 0 criminals and you have 500 false positives.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.