Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

techcrunch.com

Post reply on HN
Print view View original

151–160 of 167 posts

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#151

Post by bobofettfett »

freehunter wrote: post #42

I work in info sec, and in one of the "Who's Hiring" posts a few months ago (do we still do those? I haven't seen one in a while) I asked "why are startups never hiring security guys?", because I never see a security engineer position open in those topics. I never got a response. To me that indicates the response is "we don't". Listen, guys. I don't care how small you are. If you are handling PII or credit card data…

Totally wrong assessment. Everyone has security guys.

Why does sec get breached? Marketing wants easy access to all data, deep learning wants easy access, lots of data is in transit.

Security is not convenient for operations, therefor companies have sec on paper and audits and stuff but no real sec.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#152

Post by bobofettfett »

Why does sec get breached? Marketing wants easy access to all data, that's it. Big Data / deep learning wants easy access, lots of data is in transit. Security is not convenient for operations, therefor companies have sec on paper and audits and stuff but no real sec.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#154

Post by philrapo »

dmak wrote: post #134
TeMPOraL wrote: post #126

Earlier quoted context omitted.

Well, if the only way you can make business is to break laws and be total assholes to everyone, then it kind of strongly suggests you shouldn't be in business in the first place.

I am not suggesting that they should be assholes, but do you think Napster won the war by playing by the rules?

what war did napster win?

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#155

Post by Karunamon »

logn wrote: post #122

> Uber says it will offer a free one-year membership of Experian’s ProtectMyID Alert My ID has been breached twice in other, unrelated incidents. Each time these ID protection companies want to know my SS# and all sorts of other stuff. My heart skips a beat imagining them scraping the web for my SS# and CC# in an otherwise well intentioned effort. I've refused their services and insist they only provide the insurance…

It's pretty hard (actually impossible) to pull the information necessary to do credit monitoring without your PII.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#156

Post by logicallee »

q3k wrote: post #113
logicallee wrote: post #102

Earlier quoted context omitted.

No, with all due respect, you're bullshit. Hacking my app is illegal. You're saying I shouldn't write a web app in the first place, just because I'm some guy and barely know the framework I'm using. Well, maybe you should go live in Somalia if you don't like a code of laws. I can't do security right. I can do a web app poorly, or nothing at all. You're saying, give the world nothing. I'm saying, sod off. I've had eno…

Using this train of thought, you probably don't even have a lock in your door - burglary is illegal!

where did I say they shouldn't use accounts or passwords?

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#157

Post by Kalium »

vertex-four wrote: post #105
Kalium wrote: post #75

Earlier quoted context omitted.

> Uber is already hamstrung by their inexperienced drivers's reliance on Google Maps for navigation. It is in no way equivalent to actually knowing your way around. I don't know about you, but my experience is that Google Maps is far more reliable than a cabbie who purports to know their way around.

My experience is the exact opposite in most cities in the UK - Google Maps regularly gets me going insanely stupid routes, while the cabbies always seem to know every street and the best way to get to it. Perhaps the US has a different culture for its cab drivers? I can't imagine why, though. We have all the taxi licensing schemes and whatnot that the US does, so it can't be a case of "there's more competition so the…

In the US, cabbies are often relatively recent immigrants. They may know parts of the city OK, but they can't be relied upon to have the city memorized.

There's licensing, but it's a far cry from the Knowledge of London.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#158

Post by WorldWideWayne »

rietta wrote: post #47
lawnchair_larry wrote: post #19

Earlier quoted context omitted.

That is by definition not accidental.

Yeah, I definitely would not do that to a 3rd party system without a specific letter of engagement for penetration test or security review. Now, that being said, it's the first thing I would tell every single developer about as a senior developer and I would insist that test cases be written to verify that no such 'feature' was permitted into the application.

Should I consult with my lawyer before manually entering an address into a browser? I could easily make a mistake that would allow me to access the wrong page.

Heck, if we're being that careful maybe I should just throw my computers out the window. A Google search result or a forum post could link me to the wrong page and I could get sued.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#159

Post by jeffwass »

vertex-four wrote: post #105
Kalium wrote: post #75

Earlier quoted context omitted.

> Uber is already hamstrung by their inexperienced drivers's reliance on Google Maps for navigation. It is in no way equivalent to actually knowing your way around. I don't know about you, but my experience is that Google Maps is far more reliable than a cabbie who purports to know their way around.

My experience is the exact opposite in most cities in the UK - Google Maps regularly gets me going insanely stupid routes, while the cabbies always seem to know every street and the best way to get to it. Perhaps the US has a different culture for its cab drivers? I can't imagine why, though. We have all the taxi licensing schemes and whatnot that the US does, so it can't be a case of "there's more competition so the…

Not sure how it works elsewhere in the UK, but in London the cab drivers have to take an in-depth course called 'The Knowledge' which covers street routes, alternate routes during street closures, commercial destinations, etc. See some sample questions : http://www.taxiknowledge.co.uk/mock.html

This is majorly helpful beyond usual satnav use case. Eg, to get dropped off during high-traffic area, the cabbies will know well the surrounding streets and at your request can drop you off in a reasonable place 1-2 blocks away, for much less time and expense.

Re: Uber Database Breach Exposed Information of 50,000 Drivers, Company Confirms

#160

Post by prawn »

barking wrote: post #101
bhauer wrote: post #14

Earlier quoted context omitted.

How in the world did you only get 8 points for that? I've upvoted yours. That seems almost as bad as the incident reported in this thread.

How do you know that he got 8 points?

He's had a few more since, but it is a story submission not a comment, so the vote numbers are public:

"90 points by nathanmock"

Post reply on HN