Today I was sent an article from several of my real estate pals about an unfortunate incident involving an email scam. From what I can find in the news articles, a buyer received an email from her agent saying that $10,000 was needed for title insurance. The problem was, it wasn’t the realtor who sent the message, and now this buyer is out $10,000.

Realtor’s security breach costs young home buyer $10K

All around this has been a really unfortunate story. What’s killing me though is the response. By now you’d expect I’d have learned to not read the comments that come with these articles, but it’s tech and real estate and apparently I’m some kind of masochist, so I dove in.

My first issue is with the buyer’s lawyer’s statement:

“But the brokerage says “when used properly” Gmail can be a safe means for business email.
Lawyer Samantha Keser, who represents DiMarco, disagrees.
She calls the agent and the brokerage “negligent” for not using email servers with firewalls and encryption software to handle sensitive, personal information.”

Now, the article itself is lacking some information, so this is going to be speculation on my part based off of my personal experience as an IT person and having worked with Realtors for the past 3 years. I don’t think this was some master hacker running a man in the middle attack on the Realtor’s network, cracking her passwords, or any super spy stuff you see in the movies. I can almost guarantee that the vulnerability in the agent’s email account came from one of the following:

1. A phishing scam to get the agent’s login info, much like the scam that took the money from the buyer
2. An insecure password recovery question like “What’s my dog’s name” where the answer is easily found online
3. She left her account logged in somewhere publicly accessible

Email spoofing is also insanely easy to do and make it seem like the email came from the Realtor’s account, but assuming the reporters got their terminology correct, it seems like they’re implying that the account was hacked and the person was able to send emails as the Realtor from within the account.

The lawyer mentioned gmail being an insecure platform. Except that it’s been widely recognized that Google Apps for Business is a solid choice for small businesses. Now as for the claims that she should have been using a firewall and encryption? If this was someone using a brute force password attack after managing to break their way onto her network, then maybe that would have helped. But regardless on if it was the Realtor’s account that was compromised, or an email spoofing scam that the buyer responded to, the fact remains that the security is only as strong as the person who holds the keys.

All the encryption in the world isn’t going to save her if she was caught in a scam and gave the information they needed to get in. Demanding that the agent should have had encrypted her email is like a child demanding a nightlight to keep them safe. It’ll make them feel better, but if they left the door unlocked the monsters can still get in.

In the mix among all the comments are everything from victim shaming to a witch hunt against the Realtor. The way I see it, both got duped. It’s unfortunate, police should be involved, but a lawsuit based on the claim that the Realtor should have encrypted her email is ridiculous.

I’ll be curious to see the outcome of this if it goes to court. I imagine the fact that as Realtors our clients are owed fiduciary duty by us that there is more liability and higher standard of care expected of the realtor than if it was just a friend who’s email was hacked. Requiring all realtors to use encryption and two step authentication though? The Ottawa Real Estate Board, up until last month, still required me to tell them my MLX password verbally over the phone to verify me. Seeing them implement encryption would be possibly the funniest and most painful thing I’ve ever seen.

This past weekend I joined a big group of my friends to go and see Avengers: Age of Ultron as a birthday event. IMAX 3D in my area is reserved seating when you buy your ticket. My friends mentioned which seats they had and we’re a pretty big group so everyone buys their own tickets. We’re booking in advance, so it should be pretty easy right?

Here’s the issue: When reserving tickets online, Cineplex will not allow you to reserve a seat if you’d be leaving a single seat in the row. So if B17 is taken, seat B18 and B19 are free, and B20 is taken as well, you cannot book just B18. I could generally understand this policy, but as a single person, this blows. If I want to go and see movies with my friends who are a couple (which is pretty damned common when you’re 28), you either have to either:

A) Have them pay for your ticket and you pay them back
B) You buy all 3 and have them pay you back
C) Have your friends pick a spot in the theater that has loads of space beside them and pray that another couple doesn’t pick a spot too close to them before you’re able to buy your ticket.

So my group books their tickets and there are 3 spots left in the row next to them. My friend goes to book two of them, but is rejected because that would leave 1 seat on it’s own. So she ends up having to book in a different row away from my friends. Unaware of her booking issues, I go to book next. Two spots remaining next to my group. I’m single, just booking for myself, but want to be near my friends. Nope, can’t leave a single seat available. Well, damn it. I end up having to book a seat down the row from them, completely separated. I checked shortly before the movie and the two seats next to my friends are still free, so before the movie starts I sit next to my friends praying no one actually booked those spots. Turns out I am not that lucky, as the usher comes over with two gentlemen who had bought those tickets. I’m not a jerk (or at least like to think I’m not), apologize, and move to the spot I’d reserved, between a bunch of random strangers.

Well, that sucked. If I’m seeing a movie on my own I don’t mind sitting next to random people, but being separated from a group I’d gone with suddenly feels pretty lonely. But the kindness of strangers keeps surprising me.

The two gentlemen who sat next to my group were very apologetic, even though they’d done nothing wrong. I was in their seat. Upon realizing what had happened when they saw I was separated from my group, they asked the people between them and me if they’d consider moving into my spot, so everyone could slide down one seat so that I could sit next to my friends. The folks in between us were really hesitant, but they argued my case for me without my having said a word.

I know being moved away from my friends isn’t the end of the world, but those two guys really made my day.

So I guess the moral of the story is this: Cineplex, your IMAX seating policy blows for single people, and people are awesome.