Live data from Hacker News

DoorDash confirms data breach affected 4.9M customers, workers and merchants

techcrunch.com

191–200 of 224 posts

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#192
post #173

I'd like to point out, it's not "DoorDash" that has done anything wrong, it's these people : - Andy Fang - Evan Moore - Stanley Tang - Tony Xu They decided our security and privacy wasn't worth as much as hur hur hur growth hacking startup hur hur next uber, and couldn't be arsed to even give us a proper apology. Look at their blog post: not one mention of the words "we sorry, we fucked up". It's all about the other…

sorry, who are these people you've just graciously named??

The founders (and current CEO and CTO) of DoorDash.

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#194
post #72

Earlier quoted context omitted.

Nah, you'll be offered 25-50$ but then they'll swap it out for 25-50$ in credit monitoring and/or applebee's coupons at the last minute.

I think I take the credit monitoring in this instance?

I'll throw it on the pile of all the other credit monitoring I've gotten from other breaches.

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#195

Earlier quoted context omitted.

The problem with what you're proposing is that, as far as I understand, the real "consequences" for things like identity theft end up being intangibles like "time" and "annoyance" or "credit score". I don't think you'll actually be out $1000, the bank will just reverse it or it will be covered under some sort of insurance or something. Many times its just people taking out fraudulent loans under your name (vs. direct…

Bullshit. I had a fraudulent charge on my bank account via a “demand draft” (essentially a check without my signature). Yes, I had to spend significant time resolving the issue: going to the bank, having them insist they needed to close my account and reopen a new one, plus changing all my ACH drafts. But, I was very angry with the bank, because their proposed solution caused me hassle and doesn’t protect me from wha…

I think there might have been some sort of misunderstanding in my post. I’m explaining a phenomenon I see: people aren’t generally angry with their bank over identity fraud, and that makes holding them accountable difficult. I don’t disagree they share much of the blame, just trying to point out how non-HN people see things. While you may very well be pissed with your bank, I think the general response to your story is “relief” at getting the money back and “anger” at the criminal. Again, I am not implying this is who they should be angry at, just who I see them get angry at. So, step one is convincing others to have the same response as you if the goal is to hold them responsible.

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#196
post #173

I'd like to point out, it's not "DoorDash" that has done anything wrong, it's these people : - Andy Fang - Evan Moore - Stanley Tang - Tony Xu They decided our security and privacy wasn't worth as much as hur hur hur growth hacking startup hur hur next uber, and couldn't be arsed to even give us a proper apology. Look at their blog post: not one mention of the words "we sorry, we fucked up". It's all about the other…

The founders are very busy devising wage theft schemes. How can they possibly spend time on security or apologies?

> devising wage theft schemes

Expand?

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#197

Earlier quoted context omitted.

I know you're joking, but I have a relative like this. Owns a huge swath of land someplace remote. Only deals in cash. (His special skills are such that his employer gladly pays him in cash.) Doesn't trust cars with electronics, so he builds his own motorcycles to get around. As far as I know, the only record of him existing is property tax and income tax. I went to visit once, and he doesn't even have a mailbox. I a…

Imagine being afraid of car electronics and choosing a motorcycle as your safe method of transport.

I asked my wife about it, and she remembers him saying something about in his state that if a vehicle is a certain percent cobbled together, it doesn't have to be registered. I wonder if that's his motivation.

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#198

Earlier quoted context omitted.

The founders are very busy devising wage theft schemes. How can they possibly spend time on security or apologies?

> devising wage theft schemes Expand?

Basically if you "tip" a driver through DoorDash, the tip doesn't really end up going to them.

https://qz.com/1659475/the-merits-of-tipping-your-doordash-d...

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#199
post #182
post #173

I'd like to point out, it's not "DoorDash" that has done anything wrong, it's these people : - Andy Fang - Evan Moore - Stanley Tang - Tony Xu They decided our security and privacy wasn't worth as much as hur hur hur growth hacking startup hur hur next uber, and couldn't be arsed to even give us a proper apology. Look at their blog post: not one mention of the words "we sorry, we fucked up". It's all about the other…

I agree there should be real people (founders, c-levels, engineering managers, etc) taking responsibility for things like this. Another place to look at is the insurance companies who sell cyber liability policies to basically all (even small) tech companies. Those policies provide near full coverage for the most expensive parts of breaches like these (including a set dollar value, often $100-200k in policies I've se…

Really interesting. Do you know who the biggest insurers are?

Re: DoorDash confirms data breach affected 4.9M customers, workers and merchants

#200

Earlier quoted context omitted.

The founders are very busy devising wage theft schemes. How can they possibly spend time on security or apologies?

> devising wage theft schemes Expand?

There was recently a controversy over how Doordash implemented its tipping policy. Drivers get paid a wage to deliver food to you, and you would expect that if you specify a tip through the application, that tip goes to the driver and their compensation is increased by N, where N is the amount of the tip you specified.

It turned out that until recently, that was not the case; drivers would get a wage to deliver food to you, and if you specified a tip through the application, then the driver would have money deducted from their wage equal to the amount of the tip up until tips made up one hundred percent of their wages, at which point tips would increase their take-home.

So in effect, Doordash was using tips to subsidize worker pay as opposed to augmenting worker pay, and this was in no way communicated to customers who reasonably expected that a tip would increase the worker's compensation.

Post reply on HN