News for hackers. Stuff that matters.
Re:Michelle's List: A free, anonymous landlord review site by neilv on Saturday May 18, 2024 @11:50PM (#40404128)
> Is it really anonymous?

> Yes! We will never give away any of your information.

For starters, they're leaking this information to Google.

After that, they're presumably subject to subpoenas. And they or an acquirer altering the agreement. And there's interpretations of "give away". And the inevitable data breaches.

I see no identification of who runs it, which doesn't seem consistent with their stated philosophy of "transparency and accountability", and might affect users' ability to hold them to their privacy assurances.

Re:Michelle's List: A free, anonymous landlord review site by EGreg on Sunday May 19, 2024 @01:51AM (#40404534)
“I see no identification of who runs it”

Sounds like it’s anonymous to me :)

That’s how governments like to run things: https://community.qbix.com/t/transparency-in-government/234

Re:Michelle's List: A free, anonymous landlord review site by 20240519 on Sunday May 19, 2024 @02:45AM (#40404759)
Even if there is no information given away there is an address published so the landlord and probably government can guess who you are.
Re:Michelle's List: A free, anonymous landlord review site by ZhadruOmjar on Sunday May 19, 2024 @02:58AM (#40404814)
How anonymous can it be? Sure, if you were dealing with a city-wide management company they can keep it somewhat anonymous but saying "John Smith, landlord at 123 Fake St" with the review on a set date is a pretty good indication of who left the review. Even for management companies it would not take a lot of investigation to find the reviewer.
Re:Michelle's List: A free, anonymous landlord review site by bsza on Sunday May 19, 2024 @05:55AM (#40405698)
For starters, they could hash every address with bcrypt and only show reviews to people who search for that exact address. Then they could hide the review pages from search engines (which they are currently not [0] doing). They also have no good reason to include the exact date beyond maybe the year, and even then they should let the user change it if they want to (haven’t checked if they do).

None of this would make the site lose its primary function, which is by their own admission to do a background check on the landlord you’re about to sign an agreement with.

[0]: https://www.google.com/search?q=Aberdeen+St%2C+Chicago%2C+IL...

Re:Michelle's List: A free, anonymous landlord review site by saagarjha on Sunday May 19, 2024 @06:49AM (#40405944)
Guess what every landlord is typing into the search bar of this site
Re:Michelle's List: A free, anonymous landlord review site by bsza on Sunday May 19, 2024 @06:57AM (#40405980)
And because of that let’s expose everything to Google Search so landlords don’t even need to know about this site?
Re:Michelle's List: A free, anonymous landlord review site by swores on Sunday May 19, 2024 @07:07AM (#40406044)
That clearly wasn't the point they were making, they were just explaining why your suggestion of "only make it show to people who search for a specific address" doesn't do anything to limit the ability of landlords to look up reviews about themselves.
Re:Michelle's List: A free, anonymous landlord review site by bsza on Sunday May 19, 2024 @07:19AM (#40406109)
It does though. It eliminates the need to ever include an address in plaintext on the site, making it a lot harder for data harvesters to extract private information from it. Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them.
Re:Michelle's List: A free, anonymous landlord review site by baby_souffle on Sunday May 19, 2024 @10:33AM (#40407231)
> Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them.

It only takes one. And if it’s been automated, you’ve just made it plain text but with extra steps.

Re:Michelle's List: A free, anonymous landlord review site by bsza on Sunday May 19, 2024 @03:19PM (#40409123)
> if it’s been automated

Bcrypt has key stretching, brute-forcing every address in existence would cost a lot of CPU even for one city. How will the attacker get compensated for that?

Re:Michelle's List: A free, anonymous landlord review site by saagarjha on Monday May 20, 2024 @01:56AM (#40412686)
A landlord is just going to check their address. Why would they brute force anything?
Re:Michelle's List: A free, anonymous landlord review site by bsza on Monday May 20, 2024 @03:23AM (#40413137)
You are only assuming one kind of attack vector, which is a landlord discovering this exact site. Whereas the more impactful scenario is a web crawler discovering this site, grabbing its content and making it Googleable, so that not one but every landlord can access it. Like I already explained 4 comments ago.

I honestly don’t get why I even have to explain this. The original question was how anonymous it can get. Any practice that reduces the amount of personal information, or the ease to access it, helps, period. Dismissing one because it doesn’t offer perfect protection is like not using condoms because they are ineffective against mono. There is no reason not to implement them - that is, if the maintainer actually cares about privacy.

Re:Michelle's List: A free, anonymous landlord review site by ZhadruOmjar on Monday May 20, 2024 @06:51AM (#40414137)
If the site becomes popular e.g. "#1 Landlord Review Site" then everyone will be checking their reviews on it. If it's never popular and not used often then it doesn't matter if it's clear text or not.
Re:Michelle's List: A free, anonymous landlord review site by bsza on Monday May 20, 2024 @07:17AM (#40414274)
Yes it does. Being a small business does not entitle you to share the addresses where your customers live with everyone.
Re:Michelle's List: A free, anonymous landlord review site by saagarjha on Tuesday May 21, 2024 @07:41PM (#40435612)
I think you fundamentally misunderstand or have yet to convey how such a site would solve the problem of distinguishing “I am a tenant looking for reviews of a property” and “I am a landlord looking for reviews of my property”.
Re:Michelle's List: A free, anonymous landlord review site by bsza on Wednesday May 22, 2024 @06:17AM (#40439284)
I never stated it does. You are the one driving at this point as if it were the only issue, or the most important issue, which it is neither.

What it does solve is the problem of this data being visible to every landlord who types the address of their property into a vastly more popular search engine known as Google. They need not even know of this site, it gets served to them on a silver platter.

And if you think a robots.txt alone solves that, you’re mistaken. A robots.txt is just a recommendation. Web crawlers are not obligated to honor it. The only way to solve it is to make sure the private data isn’t even there in the first place.

Re:Michelle's List: A free, anonymous landlord review site by mbg721 on Sunday May 19, 2024 @05:55AM (#40405700)
Yeah, anonymity in this kind of case isn't a technical problem, it's a social problem. I would never review a workplace on something like Glassdoor for the same reason; "worked in x department and wasn't happy" is easy to narrow down.
Re:Michelle's List: A free, anonymous landlord review site by xtiansimon on Monday May 20, 2024 @01:30PM (#40417873)
Seems like it’s a grudge-site, if your tenancy ended badly.

Regardless, if the info did get leaked or the landlord did some basic investigation, or the property was just small enough that the data pool was small, what’s to keep the tenant from litigation by the landlord?

I’m thinking about all those review-sites for hospitality where a bad review starts a whole lot of grief for the reviewer.

Re:Michelle's List: A free, anonymous landlord review site by throwaway290 on Sunday May 19, 2024 @03:36AM (#40405026)
"We will never give away" could be read as "we will sell for the right price".
Re:Michelle's List: A free, anonymous landlord review site by surfingdino on Sunday May 19, 2024 @04:07AM (#40405194)
There is no anonymity. You can only make it more expensive to obtain one's identity.
Re:Michelle's List: A free, anonymous landlord review site by bsza on Sunday May 19, 2024 @05:44AM (#40405647)
This site isn’t even trying, they just shove random reviews with the exact address in your face on the front page.
Re:Michelle's List: A free, anonymous landlord review site by thih9 on Sunday May 19, 2024 @07:29AM (#40406173)
> For starters, they're leaking this information to Google.

How are they leaking the information to google? Our, if you’re unwilling to share the details, how much is revealed?

Re:Michelle's List: A free, anonymous landlord review site by yazzku on Sunday May 19, 2024 @11:37AM (#40407614)
googlesyndication.com

googletagmanager.com

Re:Michelle's List: A free, anonymous landlord review site by thih9 on Sunday May 19, 2024 @04:40PM (#40409591)
Both of these redirect to google for me. I suppose these are endpoints specific for google ads.

Is that your point? That is, do you mean that the website uses google's ads, which can collect user data and google might identify the website's users based on that?

Re:Michelle's List: A free, anonymous landlord review site by yazzku on Sunday May 19, 2024 @08:42PM (#40410942)
Yes. Recent example: https://techcrunch.com/2024/04/25/kaiser-permanente-health-p... Much of the Web is infested with this plague, even some banks and other high-stakes online services.
Re:Michelle's List: A free, anonymous landlord review site by RobotToaster on Sunday May 19, 2024 @08:57AM (#40406649)
> Yes! We will never give away any of your information.

Which implies they store the information. If it was anonymous they wouldn't store identifying information.

Re:Michelle's List: A free, anonymous landlord review site by m463 on Sunday May 19, 2024 @08:57PM (#40411033)
also radar.com/radar.io which seems to be a geolocation site?