[liberationtech] Allout.org requires email address in "anonymous" LGBT survey

[Uncle Zzzen]

The latest news at https://aopriv.jottit.com/ is that allout.org have
deleted the problematic survey.
The interesting thing is that Andre Banks from AllOut says:
> I just heard about the potential security issue you wrote about below through an advisor who is on the LibTech list

So thanks to whoever it was for explaining to AllOut how serious the
problem was.

This is a fine example of the importance of this list.

Cheers,
The Dod.

On Tue, Mar 19, 2013 at 12:33 AM, Uncle Zzzen <unclezzzen at gmail.com> wrote:
> AllOut.org, a large LGBT org, are asking their members to join an
> "anonymous survey" that asks for sensitive information, and an email
> address is one of the required fields.
>
> One of the members wrote them an email about it, got an unsatisfactory
> reply, mailed them again, no reply since.
>
> I've advised this person to put the whole email exchange etc. on a
> jottit page so that it's easier to spread via social media etc.
>
> It's at https://aopriv.jottit.com/
>
> Any idea how to proceed from here?
>
> Thanks,
> The Dod