5 ms·

How anonymous can it be? Sure, if you were dealing with a city-wide management company they can keep it somewhat anonymous but saying "John Smith, landlord at 1

How anonymous can it be? Sure, if you were dealing with a city-wide management company they can keep it somewhat anonymous but saying "John Smith, landlord at 123 Fake St" with the review on a set date is a pretty good indication of who left the review. Even for management companies it would not take a lot of investigation to find the reviewer.

bsza 2y ago
For starters, they could hash every address with bcrypt and only show reviews to people who search for that exact address. Then they could hide the review pages from search engines (which they are currently not [0] doing). They also have no good reason to include the exact date beyond maybe the year, and even then they should let the user change it if they want to (haven’t checked if they do). None of this would make the site lose its primary function, which is by their own admission to do a background check on the landlord you’re about to sign an agreement with. [0]: https://www.google.com/search?q=Aberdeen+St%2C+Chicago%2C+IL+60607+US+site%3Amichelleslist.com https://www.google.com/search?q=Aberdeen+St%2C+Chicago%2C+IL...
- saagarjha 2y ago
  Guess what every landlord is typing into the search bar of this site
  - bsza 2y ago
    And because of that let’s expose everything to Google Search so landlords don’t even need to know about this site?
    - swores 2y ago
      That clearly wasn't the point they were making, they were just explaining why your suggestion of "only make it show to people who search for a specific address" doesn't do anything to limit the ability of landlords to look up reviews about themselves.
      - bsza 2y ago
        It does though. It eliminates the need to ever include an address in plaintext on the site, making it a lot harder for data harvesters to extract private information from it. Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them.
        baby_souffle 2y ago
        > Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them. It only takes one. And if it’s been automated, you’ve just made it plain text but with extra steps.
        bsza 2y ago
        > if it’s been automated Bcrypt has key stretching, brute-forcing every address in existence would cost a lot of CPU even for one city. How will the attacker get compensated for that?
        saagarjha 2y ago
        A landlord is just going to check their address. Why would they brute force anything?
        bsza 2y ago
        You are only assuming one kind of attack vector, which is a landlord discovering this exact site. Whereas the more impactful scenario is a web crawler discovering this site, grabbing its content and making it Googleable, so that not one but every landlord can access it. Like I already explained 4 comments ago. I honestly don’t get why I even have to explain this. The original question was how anonymous it can get. Any practice that reduces the amount of personal information, or the ease to access it, helps, period. Dismissing one because it doesn’t offer perfect protection is like not using condoms because they are ineffective against mono. There is no reason not to implement them - that is, if the maintainer actually cares about privacy.
mbg721 2y ago
Yeah, anonymity in this kind of case isn't a technical problem, it's a social problem. I would never review a workplace on something like Glassdoor for the same reason; "worked in x department and wasn't happy" is easy to narrow down.
xtiansimon 2y ago
Seems like it’s a grudge-site, if your tenancy ended badly. Regardless, if the info did get leaked or the landlord did some basic investigation, or the property was just small enough that the data pool was small, what’s to keep the tenant from litigation by the landlord? I’m thinking about all those review-sites for hospitality where a bad review starts a whole lot of grief for the reviewer.

bsza 2y ago

For starters, they could hash every address with bcrypt and only show reviews to people who search for that exact address. Then they could hide the review pages from search engines (which they are currently not [0] doing). They also have no good reason to include the exact date beyond maybe the year, and even then they should let the user change it if they want to (haven’t checked if they do). None of this would make the site lose its primary function, which is by their own admission to do a background check on the landlord you’re about to sign an agreement with. [0]: https://www.google.com/search?q=Aberdeen+St%2C+Chicago%2C+IL+60607+US+site%3Amichelleslist.com https://www.google.com/search?q=Aberdeen+St%2C+Chicago%2C+IL...

saagarjha 2y ago
Guess what every landlord is typing into the search bar of this site
- bsza 2y ago
  And because of that let’s expose everything to Google Search so landlords don’t even need to know about this site?
  - swores 2y ago
    That clearly wasn't the point they were making, they were just explaining why your suggestion of "only make it show to people who search for a specific address" doesn't do anything to limit the ability of landlords to look up reviews about themselves.
    - bsza 2y ago
      It does though. It eliminates the need to ever include an address in plaintext on the site, making it a lot harder for data harvesters to extract private information from it. Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them.
      - baby_souffle 2y ago
        > Landlords likely won’t iterate through each and every similar site to search for reviews. At least not all of them. It only takes one. And if it’s been automated, you’ve just made it plain text but with extra steps.
        bsza 2y ago
        > if it’s been automated Bcrypt has key stretching, brute-forcing every address in existence would cost a lot of CPU even for one city. How will the attacker get compensated for that?
        saagarjha 2y ago
        A landlord is just going to check their address. Why would they brute force anything?
        bsza 2y ago
        You are only assuming one kind of attack vector, which is a landlord discovering this exact site. Whereas the more impactful scenario is a web crawler discovering this site, grabbing its content and making it Googleable, so that not one but every landlord can access it. Like I already explained 4 comments ago. I honestly don’t get why I even have to explain this. The original question was how anonymous it can get. Any practice that reduces the amount of personal information, or the ease to access it, helps, period. Dismissing one because it doesn’t offer perfect protection is like not using condoms because they are ineffective against mono. There is no reason not to implement them - that is, if the maintainer actually cares about privacy.

mbg721 2y ago

Yeah, anonymity in this kind of case isn't a technical problem, it's a social problem. I would never review a workplace on something like Glassdoor for the same reason; "worked in x department and wasn't happy" is easy to narrow down.

xtiansimon 2y ago

Seems like it’s a grudge-site, if your tenancy ended badly. Regardless, if the info did get leaked or the landlord did some basic investigation, or the property was just small enough that the data pool was small, what’s to keep the tenant from litigation by the landlord? I’m thinking about all those review-sites for hospitality where a bad review starts a whole lot of grief for the reviewer.