Live data from Hacker News

Ask HN: Have you taken action regarding the Uber hack?

news.ycombinator.com

61–69 of 69 posts

Re: Ask HN: Have you taken action regarding the Uber hack?

#61

Earlier quoted context omitted.

Pretty weird since in the original language it just means Struggle. Cleaner connotation than the western equivalent 'Crusade' which is used secularly all the time tbh.

It's simply a matter of how many people are affected by jihad vs crusade in the last few decades. This is the first time I'm seeing jihad used in something not associated with terrorism.

A drink called the Irish car bomb can be readily ordered anywhere in the US, despite brutal killings in the 80s-90s. Use of a term is oft separated from the historical connotations of it.

Re: Ask HN: Have you taken action regarding the Uber hack?

#62

What harm can be done to me, as an uber user that has their cc data in the uber system by this? Is my credit card information compromised in a way that allows attackers stealing my money?

Potentially yes, very likely yes it seems.

How so? Any more details you can provide about how CC data might be compromised in this case?

Re: Ask HN: Have you taken action regarding the Uber hack?

#63
post #55
post #50

Earlier quoted context omitted.

That's true. But like the parent poster, I'm likewise glad I had avoided using them. What I hated about Uber and why I never ended up using it was that their app wanted so much info from my phone for no discernibly good reason. And Lyft didn't seem to be much better. I just wanted a ride man, I didn't want a 500 MB app that sucked all the data out of my phone and sent it to god knows where. So I've just ended up call…

500MB? On what platform?

In the play store it says 67.65MB "Download Size".

And in the apple appstore it says 363MB size.

I don't know if apple calculates the unpacked and installed size or if it is the "download size" too.

Re: Ask HN: Have you taken action regarding the Uber hack?

#64

Earlier quoted context omitted.

I did too, don't they also have a picture of your ID they took when you signed up, for "verification purposes"?

Yes they have a picture of my ID. They have quite a big of info about me since did a background check

This is why you should watermark any ID images with something like "FOR UBER USE ONLY SEPTEMBER 2022" in a wavy distorted font.

Re: Ask HN: Have you taken action regarding the Uber hack?

#65
post #52
post #42

> [From the end of the article] Lawyers for Mr. Sullivan have argued that other employees were responsible for regulatory disclosures and said the company had scapegoated Mr. Sullivan. Unless and until CEOs are held personally responsible for such security breaches there will be no solution to the problem. A Chief Security Officer job looks more and more as a designated scape-goat for hire.

It is an idea I hear often, but I don't think it will solve anything. The CEO will be the scapegoat, and may get paid better for the risk taken. So having a CEO scapegoat or a CSO scapegoat, same thing. You have to realize that a CEO is just an employee. An important employee, but like any other employee, he is paid to do a job, and can be fired if his employers are not satisfied with his work. If we want to punish t…

It's interesting that if you commit crimes or harm, whether intentional or not, but in the aggregate, at scale, etc. that you can get away with it or just be fined. Be a single employee that accidentally or intentionally leaks information, particularly company or government information, and you'll be sued to oblivion. Or imagine being a lower or middle class person charged with a crime or have a civil suit brought against you and all you get is a like $20 fine.

Re: Ask HN: Have you taken action regarding the Uber hack?

#66

What harm can be done to me, as an uber user that has their cc data in the uber system by this? Is my credit card information compromised in a way that allows attackers stealing my money?

Steal your money? No. Steal the banks money, using your account details to defraud a bank, possibly createing a headache for you? Maybe.

Re: Ask HN: Have you taken action regarding the Uber hack?

#67
post #64

Earlier quoted context omitted.

Yes they have a picture of my ID. They have quite a big of info about me since did a background check

This is why you should watermark any ID images with something like "FOR UBER USE ONLY SEPTEMBER 2022" in a wavy distorted font.

I'm setting up a savings account that they can't get at online

Re: Ask HN: Have you taken action regarding the Uber hack?

#68
post #58
post #51

Earlier quoted context omitted.

Slack had it already in 2015...

No, I meant that the systematic elimination of the use of Slack is my next holy war/crusade/jihad objective after coming solving the mfa problem. (Team communications should be e2ee, with no external party having access; for group chats up 10-20 that's viable; beyond that, company-encrypted to keys held by the company only.)

Slack has Bring Your Own Keys[1], however they're a bit light on details.

1 - https://slack.com/help/articles/360019110974-Slack-Enterpris...

Post reply on HN