Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Legitimately curious, what’s the worst they could do with this data?


The most common scams around home buying are wire fraud - contact the buyer pretending to be the title company and steal their money. The data in a mortgage is exactly what you need to enable these scams and you're getting people to hand it to you and at the same time tell you they are about to wire money.


Yep. When we closed on our house we got a whole lecture from the title company about how frequently data breaches lead to wire fraud and to not trust anyone. Mortgage originators are constantly under attack to try to get at the information that OP is asking people to just casually upload.

Their aggressive dismissal of the concern is not a good look.


I am not dismissing the concern, I was stating the tool solves an even larger concern. I'm doing everything I can to setup it up to be secure, private, and worthy of trust and addressing the feedback points.

If you have suggestions more than "don't trust this random internet tool even if it gives you free advice, regardless of the value it offers", please let me know [thanks emoji]


With all due respect, that is the fundamental problem here. Your tool may provide value to your users but uploading mortgage documents to random third parties is de facto dangerous and encouraging users to act irresponsibly.

A great analogy would be a website that asks users to provide their usernames and passwords for sites to see if it’s a strong password or if it’s been compromised. “Sorry, the credentials stouset / hunter2 were found in our database for Hacker News.”

Sure maybe you’re a saint and don’t store or misuse this data. But such a site would in the best case be training users to do a very wrong and dangerous thing. In the worst case you get breached by attackers who do use the collected data to do evil.


> A great analogy would be a website that asks users to provide their usernames and passwords for sites to see if it’s a strong password or if it’s been compromised. “Sorry, the credentials stouset / hunter2 were found in our database for Hacker News.”

This is actually a really good analogy because it does illustrate that it's not a completely crazy ask—people do trust Troy Hunt to run such a site. But OP should be much more understanding of how dangerous the concept is and offer options to resolve concerns (Troy allows downloading the passwords list to check locally), especially while they're not Troy Hunt-level famous and still are trying to build up trust.


Troy's site isn't actually handling the user's real password to check, its doing a lookup of hashes to see if a similar hash is there. The password and final hash checks never leave the client side. Still a lot of trust involved in a site like that, and yeah he encourages you use the API to do the comparisons yourself.

This is actually uploading all the information to the backend and storing it in a database. Like a page that is asking for a service URL, a username, a password, a TOTP secret, sending it all to the server, and having the server check if the credentials have been pwned and saving it all.


On a per individual basis, I think most individuals would prefer to overpay mortgage fees slightly rather than lose the entirety of the money they wire.


Wire Transfers are not undoable and instant, much like Zelle. So I always recommend people send $10 first, and confirm everything works, before sending real money. When doing the confirmation, try using a different channel of communication, to ensure you are getting the right person. i.e. call them directly from known good phone numbers or something.

Yes many banks charge $30 or more for a wire transfer, but I'd rather just pay the $60 than have a large sum wire transfer lost, stolen, etc.

Some banks/Brokerages are sane and do not charge extra for wire transfers. Fidelity is one such. BOA also(if you have enough assets there, $100k will do it).


Is it too paranoid that even for first time Zelle (with people I know in real life) I send a $ and ask them to see if they received it, before sending anything else?


100% not paranoid. I do this for basically all payments.


I do / did this between my own bank accounts when entering details the first time.


I have never done a wire transfer at a residential closing. I come to the closing at the title company office with a cashier's check from my bank for the amount they told me to bring.


Did you bought enough houses to assume that's always the case?

My experience was that I was told to send the cashier's check using overnight FedEx because they did not have office in my area.


No, fair enough. I would not close anywhere other than a local title company though. I've had a few odd things surface at the last minute that were resolvable because everyone was sitting around the same table.


Cashier's check was only accepted for amounts less than $10k at our closing by our title company. This seems common to require wire. The title company contracted with a 3rd party escrow service so the money was required into the title company's account at the escrow service. I assume a cashier's check would need to be mailed to the escrow company


3rd party. ROFLMAO.


The only method available to me at closing was a wire transfer. It is dumb.


Aside from the personal details (name, address, etc), they can collect pricing info on houses, run analytics, and swoop the deal with a slightly better offer or better yet, sell it to wholesale buyers, reits, and whoever is interested in stealing the deal.


>they can collect pricing info on houses, run analytics

AFAIK house sale prices (ie. property transactions) are open in many (most?) jurisdictions.

>and swoop the deal with a slightly better offer

How does that even work? The winning bidder is presumably someone who gave the highest offer. Why would another company pay above and beyond that, considering that there's probably several other serious buyers who aren't willing to pay more?


The terms are not public until the house is sold. In the contract pending state you don’t know how much it is going to sell for. Theoretically if they saw a buyer accepting a crazy low offer they could alert the troops.

But it doesn’t need a lot of the data in that document, so really they need a way to redact all the unnecessary data to require less trust.

Edit: words.


The deal isn’t always about the price. For example, a $1M house bought with $100K down and $900K mortgage is a worse deal for the seller as compared to $500K down and $500K financed. Assumption here is that it is more likely to get a $500K loan irrespective of the appraised value of the house.

A lower all cash offer (say $975K) is likely a better offer for the seller because it reduces the risk for them and closes the transaction much quicker than a mortgage transaction.

I have been a buyer in two transactions where my offer was slightly lower than the highest bidder, but with better terms.


As a home buyer, I've been beaten many times by an all-cash offer that was significantly lower than my financed offer. For example, a $450K all-cash offer where they'd close in 7 days beat my $525K 80/20 offer where it would have taken me 25+ days to close.


This makes sense for the seller depending on how often a financed offer falls through. Our agent mentioned that in Amsterdam for example over 1/3rd of the offers with a financing condition fall through. And they do so weeks after the signing of the agreement so it costs the seller significant time and money.

With such a high chance of not actually getting the sale done, sellers are motivated to take 475 immediate cash instead of 525 with a 1/3rd risk of having to do it all over. Especially if they need the cash to buy their next home.


> I've been beaten many times by an all-cash offer that was significantly lower than my financed offer

Note that all cash commonly means no financing contingency. I put in an all-cash offer and financed it. I just didn’t have an out if I couldn’t find financing I liked. (Legally.)


> a $1M house bought with $100K down and $900K mortgage is a worse deal for the seller as compared to $500K down and $500K financed.

Do sellers in the US know how large your down payment is? AFAIK that's not a thing in Canada. Offers either have a financing condition, or don't. If the offer doesn't have a financing condition, the buyer might be paying cash. But they could just be trying to present an offer with better terms, gambling that they'll definitely find financing somewhere or the other.


Yup, the seller is (at least should be) made aware of the financing structure, as it’s part of the offer.

Every time I’ve sold a house it’s been a factor in deciding which offer(s) to pick or counter.


That's interesting. My last house was $$$ and I had no RE agent. Negotiated with the seller's agent myself. Never once disclosed financing info.


> name, address, etc

In my country all that plus your social security number and tax declarations etc are public information. What's your opinion on that?


That...is not how mortgage servicing companies operate.


People aren't concerned about giving their details to a mortgage servicing company, they're concerned about giving their details to a random website called "closing.wtf", which promises to provide mortgage advice for free with no other obvious revenue source.


Lol no revenue source and a promise to never sell or share their data.

Gotta figure this one out...


At least put a patron link on there or something, so people can have a legitimate way to pay for the cost associated with running the website. Perhaps make a suggested amount of 10% of the savings.

This gives you a obvious profit motive, and makes you seem more sketchy because you now have more skin in the game to keep it operating as a valid and useful business service




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: