Congress needs to stop pissing in the wind and make a federal law on breach disclosure. Self evidently companies won't universally do this on their own, and state specific law makes compliance more difficult and expensive.
Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
11–20 of 167 posts
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#12The TechCrunch article says "license plate numbers" but the Uber post[0] says "driver’s license number".
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#13Data accessed on 5/13/2014, uber noticed on 9/17/2014, and then notifies affected on 2/27/2015. Thankfully it was only names and plate numbers, but still... All I see from uber is bad publicity and poor management decisions. I wonder what it's like to work there from an insiders perspective, cause from the outside it doesn't look good.
I'm not defending them on this because that does seem to be a long enough time to be more proactive about it. You did bring up an interesting point though, Uber is facing opposition from almost every city they are in. Whether it's small town South Carolina where I'm from and even in some of the largest cities in the world. It would be interesting to see how people deal with this on the inside and how it affects the c…
Uber's in a position where they get flak for breaking the rules while also being painfully aware that following the rules is worse for them. They face opposition, but every time they play nice it doesn't go well for them.
The lesson here is that sometimes, you do much better by breaking all the rules.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#14I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
How in the world did you only get 8 points for that? I've upvoted yours. That seems almost as bad as the incident reported in this thread.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#15I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
Wow, that is a reckless implementation.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#16Uber really needs to have a public data retention policy stating that they anonymize or delete all data older than a couple weeks. I'm just waiting for them to be hacked and have to reveal that people's trip data for years has been released.
Not just Uber.
Obama's proposing data privacy regulations. I think it's worth considering what you'd like to see involved in same.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#17I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
How in the world did you only get 8 points for that? I've upvoted yours. That seems almost as bad as the incident reported in this thread.
Because it's just the UI, you can't actually use it without an admin account. It's really not an issue at all.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#18No info as to how this was exposed. Were they storing data as plain text?
probably, yes. storing data in plain text is common practice and not really a problem.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#19I accidentally stumbled upon employee admin screens, all by changing a key, isAdmin = true. https://news.ycombinator.com/item?id=9121004
That is by definition not accidental.
Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms
#20Earlier quoted context omitted.
How in the world did you only get 8 points for that? I've upvoted yours. That seems almost as bad as the incident reported in this thread.
Because it's just the UI, you can't actually use it without an admin account. It's really not an issue at all.
Aha! Good point!
Interesting nevertheless, but ultimately not more than a slight reveal of how things look on the inside.