3 ms·
Nextdoor takes this approach too to verify that you live in a neighborhood. However, the vulnerability I see in this is that there’s nothing that actually vali
by tedmiston 9y ago
Nextdoor takes this approach too to verify that you live in a neighborhood. However, the vulnerability I see in this is that there’s nothing that actually validates I live at an address just because I can receive mail that was sent there. E.g., someone could take it out of my mailbox without living there to verify that they “live” there; or I could send it to a work address.
- ben1040 9y agoNextdoor does something that makes the postcard completely useless -- if you don't respond to the postcard, they'll put you in a queue for your "neighborhood leads" to approve: https://help.nextdoor.com/customer/en/portal/articles/990082-verify-neighbors https://help.nextdoor.com/customer/en/portal/articles/990082... The problem is this is your neighbor confirming that a person by that name lives near them. They have no way of confirming that person is the actual owner of the account being verified, unless they go over, knock on their door, and ask "hey, did you sign up for Nextdoor." So someone could sign up as Nextdoor as me. I throw away the postcard, because I don't know why I got it and I don't want anything to do with Nextdoor. Meanwhile a well-meaning neighbor of mine can just go and approves the account.