• Nollij@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    121
    ·
    2 days ago

    At most employers, this is grounds for immediate termination, and rightfully so. Rarely are the credentials to view paystubs entirely separate from the rest.

    You’ve now given your potential landlord access to a much wider system. In many places, the potential landlords are then criminally guilty of unauthorized access to a computer system, AKA “hacking”. The potential tenant typically does not have the authority to grant the authorization.

    • NaibofTabr@infosec.pub
      link
      fedilink
      English
      arrow-up
      52
      ·
      1 day ago

      Yeah this is a massive security risk. Even if the landlord doesn’t intend anything malicious, I seriously doubt they’re putting much effort into protecting that information. Juicy target for a ransomware gang.

      • bobs_monkey@lemmy.zip
        link
        fedilink
        arrow-up
        27
        ·
        edit-2
        1 day ago

        Even if the landlord doesn’t intend anything malicious

        Except, you know, determining that you’re “eligible” and can “afford” for an 80% rent hike

      • socsa@piefed.social
        link
        fedilink
        English
        arrow-up
        21
        ·
        1 day ago

        Especially since this has been an identity theft scam for decades. People post fake, too good to be true, rental listings on Craigslist and the application asks for SSN and a “family reference” (asking for mother’s maiden name) and a weirdly small deposit paid by check. Now you’ve got all the info you need to steal someone’s identity. And I assume this kind of thing has gotten more sophisticated in the digital realm since I was last renting.