Las Vegas: What Sensors? What Privacy? What Anonymity?(Jeff Jonas) – ETech08

Gaming principles:
Deliver fun worth the price (don’t want you to lose all your money)
Optimized for consumer experience over interference (spend minimum amount on surveillance; security intervention limited to very egregious behavior)
What happens in Vegas stays in Vegas (responded to unintentional disclosures of personal data)

Every game has a standard hold percentage. They will always win what they expect to win. Comps are given out to reward people for playing.

Player’s Club, need to see some ID (age, gambling amount, esp if you cross $10k). They will watch you and track you if you cross the threshold of winnings. They are obligated to do so. End up on Nevada Gaming Commission exclusion list. If a casino is caught transacting these people they can be fined or lose license. Are you a subject of interest.

Las Vegas as a target. Enormous amount of cash trading hands in probabilistic transactions. Scams, armed robberies, kidnappings (Steve Wynn’s kid).
Scams: hardware vulnerabilities – spoofing slots; Card counting – 1 mistake an hour and you still lose, bet variations; MIT team splut the counter & the hi better; hand mucking; sleeve camer transmitting to van outside watching the deal in slo mo, radioing player.

Resorts have 10′s of thousands of sensors; ID cross-checking; hot player in the house; human eyeballs; so many cameras; door key systems; laser perimeter alarms; machine-generated alarms; back of the house counting and server rooms.

Surveillance Intelligence Group – tracking the cheats. Griffin Investigations. Biometric facial recognition (barely used). ID matching by profile.

Free to enter w/o id and use only cash. Video is destroyed after a few weeks. No metal detectors. o checkpoints. Most vulnerabilities are fixed in process not instrumentation.

Casinos don’t have much risk.