Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

Post by ForHackernews » Sat, Feb 28, 2015, 5:38 AM UTC

Kalium wrote: post #13

joshmlewis wrote: post #6

Earlier quoted context omitted.

I'm not defending them on this because that does seem to be a long enough time to be more proactive about it. You did bring up an interesting point though, Uber is facing opposition from almost every city they are in. Whether it's small town South Carolina where I'm from and even in some of the largest cities in the world. It would be interesting to see how people deal with this on the inside and how it affects the c…

Uber's in a position where they get flak for breaking the rules while also being painfully aware that following the rules is worse for them. They face opposition, but every time they play nice it doesn't go well for them. The lesson here is that sometimes, you do much better by breaking all the rules.

Post by jjoonathan » Sat, Feb 28, 2015, 5:57 AM UTC

2arrs2ells wrote: post #68

jjoonathan wrote: post #54

Earlier quoted context omitted.

> It's not okay to have a breach. It's not. It doesn't matter how much money you saved... If only this were true, they would be hiring security people. Nothing is going to change until companies are held accountable for the damages caused by negligence. If someone in the infosec field wants to make a difference, I'd reckon their best bet is lobbying to make this happen.

We're hiring security engineers at Clever: https://clever.com/about/jobs#engineer-full-stack-security

Post by Kalium » Sat, Feb 28, 2015, 6:02 AM UTC

skuhn wrote: post #33

toomuchtodo wrote: post #32

Earlier quoted context omitted.

> The lesson here is that sometimes, you do much better by breaking all the rules. I guess we'll find out after Uber has exhausted its VC money, if Google doesn't replace them with self-driving cars first.

Uber is already hamstrung by their inexperienced drivers's reliance on Google Maps for navigation. It is in no way equivalent to actually knowing your way around. The difficulty of making an urban self-driving car aside, Google would have to achieve a quantum leap forward in the quality of their navigation platform. Otherwise every auto-taxi in San Francisco will proceed single file down Van Ness, with turns onto Mar…

Post by walterbell » Sat, Feb 28, 2015, 6:08 AM UTC

imnewhere wrote: post #59

forrestthewoods wrote: post #55

Earlier quoted context omitted.

"Stop fucking ruining people's lives" Serious, legit question here. How many lives will be ruined by this breach of 50k? How many lives were ruined when 40 million CCs and 70 million accounts (address, phone number , etc) were stolen in the Target breach? Ruin seems like an awfully strong word here. I hesitate to say that because I don't want to downplay the importance of security. But to take security seriously I th…

I think you're going to need to define what a ruined life is. I doubt getting a replacement credit card in the mail will ruin someone's life under most definitions.

Post by tlrobinson » Sat, Feb 28, 2015, 6:12 AM UTC

cmurf wrote: post #11

Congress needs to stop pissing in the wind and make a federal law on breach disclosure. Self evidently companies won't universally do this on their own, and state specific law makes compliance more difficult and expensive.