Earlier quoted context omitted.
Actually, it depends on a country. For example, EU laws override ToS.
Only for companies under EU jurisdiction.
[deleted]
Uber employees used the platform to stalk celebrities and their exes
131–140 of 250 posts
Re: Uber employees used the platform to stalk celebrities and their exes
#132Earlier quoted context omitted.
I'll agree with your point as soon as Uber signs up to the same level of regulatory restrictions as every phone carrier enjoys. The fact is that there are laws that strictly prohibit my phone carrier doing certain things with data about my usage. Case in point, the stalking that the article mentions - I don't think employees of my phone carrier can do the same thing. Technically they could because they have the neces…
Uber has demonstrated that they can't be trusted with personal data And the telecom carriers haven't? Please. https://en.wikipedia.org/wiki/Room_641A
The NSA using the power of the state to persuade a telco to intercept some stuff for them is somewhat different from having random employees of a private company just deciding to arbitrarily browse through their corporate databases.
Re: Uber employees used the platform to stalk celebrities and their exes
#133Earlier quoted context omitted.
The truth, at least the part of it that you can see for yourself. You freely admit that you don't know if there even are actually audit logs, or if the measures in place are simply big warnings (that have no teeth behind them). Even if there are audit logs, they're useless if there's no system in place that flags suspicious use for a human to check up on... or lacking that, someone whose job it is to regularly read t…
> You may trust that Uber takes the security of customer info seriously, but from the outside we have no frame of reference, except for reports of past wrong-doing. A statement to the effect of "it was bad in the past but it's better now" unfortunately isn't all that reassuring, and I hope you can see it from our side of the fence and understand why. You are calling the OP out for not having hard evidence, yet you ar…
> You are calling the OP out for not having hard evidence, yet you are happily accepting the words of other folks in news reports as being true. You can't really have it both ways...you're just picking the side you want to believe is true...
You're implying every information available is to be credited with the same amount of trust. A published article from a journalist from a mainstram media outlet has track records, both on the journalist and the editor. The underlying source, is someone testifying in court, which engages more than aliased online posting, as well as cross-check performed by the journalist on other people.
Second point : the person you quote mainly questions whether the experience he described gives us information on Uber's data protection policy. I had the same feeling. This has nothing to do with the guy's integrity.
Re: Uber employees used the platform to stalk celebrities and their exes
#134Earlier quoted context omitted.
I'll agree with your point as soon as Uber signs up to the same level of regulatory restrictions as every phone carrier enjoys. The fact is that there are laws that strictly prohibit my phone carrier doing certain things with data about my usage. Case in point, the stalking that the article mentions - I don't think employees of my phone carrier can do the same thing. Technically they could because they have the neces…
Uber has demonstrated that they can't be trusted with personal data And the telecom carriers haven't? Please. https://en.wikipedia.org/wiki/Room_641A
You missed the point: the telecom carriers haven't either, however they are regulated, which is not the case for Uber.
So the point is moot for telecom carriers because the regulator already swept in. The point is still important to make concerning ongoing practices in unregulated markets, like big data in tech.
If you don't like how little is done to correct the NSA using telecom facilities however, you should see with your government, not simply the companies it coerces.
Re: Uber employees used the platform to stalk celebrities and their exes
#135Earlier quoted context omitted.
Uber has demonstrated that they can't be trusted with personal data And the telecom carriers haven't? Please. https://en.wikipedia.org/wiki/Room_641A
You missed the point: the telecom carriers haven't either, however they are regulated, which is not the case for Uber. So the point is moot for telecom carriers because the regulator already swept in. The point is still important to make concerning ongoing practices in unregulated markets, like big data in tech. If you don't like how little is done to correct the NSA using telecom facilities however, you should see w…
You missed the point:
The point, as I see it, is that your data is never really safe. I don't much care if Uber can be trusted or not, when the State can always step in and hoover up whatever data Uber has.
If you don't like how little is done to correct the NSA using telecom facilities however, you should see with your government, not simply the companies it coerces.
As long as the State can't be trusted, the rest is moot.
Re: Uber employees used the platform to stalk celebrities and their exes
#136Earlier quoted context omitted.
Uber has demonstrated that they can't be trusted with personal data And the telecom carriers haven't? Please. https://en.wikipedia.org/wiki/Room_641A
The NSA using the power of the state to persuade a telco to intercept some stuff for them is somewhat different from having random employees of a private company just deciding to arbitrarily browse through their corporate databases.
True. The State has a lot more power on its side, making the former scenario much more of a threat.
Re: Uber employees used the platform to stalk celebrities and their exes
#137Don't forget that Uber now requires you allow them to access your location, even when you aren't using their app [1]. Side note: consider the value to foreign (or domestic) intelligence agencies of this weakly-guarded pot of gold. [1] http://www.theverge.com/2016/11/30/13763714/uber-location-da...
Disclaimer: I work for Uber. However, my opinions are mine. I am also not defending nor attacking in any way Uber gathering location data. With that out of the way - you know your cell phone carrier already has this data right? They have way better data than Uber ever will about all your habits, including establishing relationships based on who you call, which sites you visit, who you are signed up on a plan with, et…
Cell tower location is far less precise than the location returned by IOS location services. They can't tell that I stopped in the coffee shop then went to the bank next door.
Re: Uber employees used the platform to stalk celebrities and their exes
#138Earlier quoted context omitted.
Disclaimer: I work for Uber. However, my opinions are mine. I am also not defending nor attacking in any way Uber gathering location data. With that out of the way - you know your cell phone carrier already has this data right? They have way better data than Uber ever will about all your habits, including establishing relationships based on who you call, which sites you visit, who you are signed up on a plan with, et…
Wow. I can't believe an Uber employee would come out and make this argument. It feels like the kool-aid is spilling over.
It feels more like someone with their head up their arse
Re: Uber employees used the platform to stalk celebrities and their exes
#139Earlier quoted context omitted.
"Uber continues to increase our security investments and many of these efforts, like our multi-factor authentication checks and bug bounty program, have been widely reported" That has absolutely nothing to do with preventing insider access. Where there's smoke screen, there's fire.
This. This bit stood out to me (emphasis mine): > Uber says employees don't receive across-the-board access to customer data and there are several controls in place to ensure that employees only access that data for work purposes. The choice of the word "control" in this context I think gives away a little bit here, it's auditor-speak. This word does not always mean to an auditor what it means to you or I. Having a w…
keeping an audit log should never satisfy an auditor. The keeping of a log is not a control, reviewing the log to detect inappropriate activity and acting upon it, thats the control.
Re: Uber employees used the platform to stalk celebrities and their exes
#140Earlier quoted context omitted.
This quote from another employee also looks naive now (and I'm not trying to offend him): https://news.ycombinator.com/item?id=13086454
No, I'm not naive, and I, proudly, stand behind everything I wrote. The person in the article was terminated before I joined, so I don't know what the systems were like back then, but every time I access production systems, I have a ton of messages telling me that our access is being completely tracked and we are prohibited from doing anything that was mentioned in the article. I haven't actually tested to see what I…
You are not the only one. There will be always somebody who is not so honest. Otherwise world would not have thieves and swindlers :)