A student investigation at the University of Waterloo uncovered a system that scanned countless undergrads without consent.