Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
1–10 of 167 posts
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#2Data accessed on 5/13/2014, uber noticed on 9/17/2014, and then notifies affected on 2/27/2015. Thankfully it was only names and plate numbers, but still...
All I see from uber is bad publicity and poor management decisions. I wonder what it's like to work there from an insiders perspective, cause from the outside it doesn't look good.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#3Data accessed on 5/13/2014, uber noticed on 9/17/2014, and then notifies affected on 2/27/2015. Thankfully it was only names and plate numbers, but still... All I see from uber is bad publicity and poor management decisions. I wonder what it's like to work there from an insiders perspective, cause from the outside it doesn't look good.
the spotlight is magnified
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#4Data accessed on 5/13/2014, uber noticed on 9/17/2014, and then notifies affected on 2/27/2015. Thankfully it was only names and plate numbers, but still... All I see from uber is bad publicity and poor management decisions. I wonder what it's like to work there from an insiders perspective, cause from the outside it doesn't look good.
> [From Uber's blog post] On September 17, 2014, we discovered that one of our databases could potentially have been accessed by a third party.
A charitable interpretation might be that they discovered a vulnerability in September, but didn't find the May breach until recently.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#5No info as to how this was exposed. Were they storing data as plain text?
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#6Data accessed on 5/13/2014, uber noticed on 9/17/2014, and then notifies affected on 2/27/2015. Thankfully it was only names and plate numbers, but still... All I see from uber is bad publicity and poor management decisions. I wonder what it's like to work there from an insiders perspective, cause from the outside it doesn't look good.
I'm not defending them on this because that does seem to be a long enough time to be more proactive about it. You did bring up an interesting point though, Uber is facing opposition from almost every city they are in. Whether it's small town South Carolina where I'm from and even in some of the largest cities in the world. It would be interesting to see how people deal with this on the inside and how it affects the culture.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#7I find it unlikely they have a database explicitly for driver names/license plates. Unless it was some flat-file dump compromised. I'm curious how much data was really obtained. If only 50k were truly stolen, it could be a shard too. The lack of technical details is sketchy to me
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#8Uber really needs to have a public data retention policy stating that they anonymize or delete all data older than a couple weeks. I'm just waiting for them to be hacked and have to reveal that people's trip data for years has been released.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#9I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#10I find it unlikely they have a database explicitly for driver names/license plates. Unless it was some flat-file dump compromised. I'm curious how much data was really obtained. If only 50k were truly stolen, it could be a shard too. The lack of technical details is sketchy to me
Maybe they have query logging turned on and saw what queries the attacker ran?