Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Uber Paid Hackers to Delete Stolen Data on 57M People

bloomberg.com

Post reply on HN
Print view View original

211–220 of 606 posts

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#211

Post by dgacmu »

bdamm wrote: post #165
foxhop wrote: post #158

Earlier quoted context omitted.

The way you fix this is by making each 5m late cost 2 gallon of milk. If you are late for 15m that's 6 gallons of milk, an operational burden has been passed to the late parent. It's embarrassing to bring in 6 gallons of milk, an inconvenience to buy and deliver it, and an effective deterrent.

You're kidding, right?

It's actually kind of brilliant -- you're fining them in time instead of money. They've already demonstrated that they value being able to use money to buy time flexibility, so this is a fine that hurts.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#212

Post by xkcd-sucks »

claudiulodro wrote: post #31
rickcnagy wrote: post #16

> Here’s how the hack went down: Two attackers accessed a private GitHub coding site used by Uber software engineers and then used login credentials they obtained there to access data stored on an Amazon Web Services account that handled computing tasks for the company. From there, the hackers discovered an archive of rider and driver information. Later, they emailed Uber asking for money, according to the company. D…

I'm surprised Uber doesn't have their engineers set up 2FA for GitHub. Super simple to implement and require organization-wide[1] and would have prevented this. Then again, not storing credentials in GitHub would also have prevented this . . . [1] https://help.github.com/articles/requiring-two-factor-authen...

2FA doesn't help if they used SSH access

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#213

Post by kbenson »

tedunangst wrote: post #59
gr3yh47 wrote: post #46

Earlier quoted context omitted.

>Just pay the toll especially when the cost of doing the right thing is higher. i mean look at HSBC - laundered trillions of dollars of mega-organized-crime money. for a decade. 400m dollar fine probably isnt even .01% of what they made off that endeavor

If HSBC was making profits of $4 trillion, they were also lying on their financial statements.

If ever you need evidence that people see really large numbers and lose perspective, look to this conversation and how many people completely glossed over the use of trillions instead of billions, a mistake so small it puts HSBC revenue in the realm of well developed nation states...

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#214

Post by colejohnson66 »

kelnos wrote: post #142
saganus wrote: post #119

Earlier quoted context omitted.

Edit: Thanks for the corrections. I definitely messed up the magnitudes here. Was doing some other calculation on another topic and somehow I mixed them both. Sorry about that. Please disregard this comment as it it way off :( While "trillions" is definitely inflated and hyperbole, I don't think it's THAT far off. According to this The Guardian article [0] "At least $881m in drug trafficking money was laundered throu…

> So 0.88 Tn. You mean 0.00088 Tn.

Well, it’s 0.88 percent of a trillion...

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#215

Post by foxhop »

jogjayr wrote: post #187
foxhop wrote: post #175

Earlier quoted context omitted.

That amount of milk would last a couple days if snack is included in tuition. 20-40 glasses of milk, twice a day. If for some reason you have too many gallons of milk, you can also use toilet paper, 10 rolls per 5 minutes. You can never have too much toilet paper, some late parents even buy the soft stuff too! lol A huge fine isn't always the best deterrent and it makes people generally mad at your child care center.…

It's not so great for the staff either. Instead of waiting an extra 10 minutes for a parent that's 10 minutes late, they now have to wait 30 minutes because the parent had to make a 20 minute detour to the grocery store to buy milk. > A huge fine isn't always the best deterrent and it makes people generally mad at your child care center. EDIT: You can make this revenue neutral. Give parents a discount at the end of e…

The milk is payable the next day during drop off. The point is to discourage parents to _never_ be late. It often ruins the staff's plans.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#216

Post by dsacco »

gr3yh47 wrote: post #46
untog wrote: post #40

Earlier quoted context omitted.

I recall a story (that I'll probably recount incorrectly) about a daycare business deciding that too many parents were arriving late to pick up their children (meaning that staff had to stay late with the kids), so they instituted a fine for late pickups. The result was that more parents were late. The reason being that the parents effectively considered the fine a "late pickup fee", and one they were more than willi…

>Just pay the toll especially when the cost of doing the right thing is higher. i mean look at HSBC - laundered trillions of dollars of mega-organized-crime money. for a decade. 400m dollar fine probably isnt even .01% of what they made off that endeavor

> laundered trillions of dollars

> 400m dollar fine

> isnt even .01% of what they made

...why even use numbers, a concept literally defined to quantify things, if you're just going to use utterly incorrect ones?

HSBC did not launder trillions of dollars over a decade, that figure is three orders of magnitude too high. HSBC is being fined $1.9B, not $400M.[1] HSBC also did not earn 19 trillion dollars over the course of a decade, which is what would make $1.9B your 0.01% figure. Even a $400M fine would still constitute earnings of $4 trillion.

Not only are your numbers incorrect factually speaking, their relationships with each other are entirely out of whack for measuring HSBC's profit, even in an absurd hypothetical scenario in which HSBC did launder trillions of dollars.

_________________________________________

1. https://www.bloomberg.com/news/articles/2013-07-02/hsbc-judg...

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#217

Post by colejohnson66 »

Spivak wrote: post #191
panarky wrote: post #134

Earlier quoted context omitted.

Some drivers don't stop at stop signs. Let's remove the stop signs so all drivers can be as cavalier. It'd save a lot of drivers the headaches that go along with traffic laws.

Better example. Almost everyone performs rolling stops at stop signs. Even when people are ticketed they just pay it don't change their behavior. Why have the fine at all?

Because it’s basically free money for the departments the ticket money goes to

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#218

Post by kbenson »

Swizec wrote: post #49
untog wrote: post #40

Earlier quoted context omitted.

I recall a story (that I'll probably recount incorrectly) about a daycare business deciding that too many parents were arriving late to pick up their children (meaning that staff had to stay late with the kids), so they instituted a fine for late pickups. The result was that more parents were late. The reason being that the parents effectively considered the fine a "late pickup fee", and one they were more than willi…

> The reason being that the parents effectively considered the fine a "late pickup fee", and one they were more than willing to pay. The real question in this story is this: If you find that you have customers who are willing to pay you more for providing more service ... why not provide that service? You get more money, your staff gets paid overtime, parents get peace of mind, everyone's happy.

I suspect the real reason in most cases is because daycare providers are often small companies, sometimes 1-2 people. At the pickup time you've been working 9-10 hours, and there's often cleaning to do afterwards. Making more money is nice, but committing to working 12 hours days five or more days a week in perpetuity is a tall order.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#219

Post by seanmccann »

In about 2014 I noticed that the logged in API request, on Uber's website, included full driver info nested under the ride JSON object. It included the drivers full address, license, phone numbers, etc. They patched it a few months later, but it was the worst data leak I've seen.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#220

Post by tostitos1979 »

sbuttgereit wrote: post #207
untog wrote: post #40

Earlier quoted context omitted.

I recall a story (that I'll probably recount incorrectly) about a daycare business deciding that too many parents were arriving late to pick up their children (meaning that staff had to stay late with the kids), so they instituted a fine for late pickups. The result was that more parents were late. The reason being that the parents effectively considered the fine a "late pickup fee", and one they were more than willi…

Well, day care operators have since learned... ... as I sit in my home office, just over an hour away from day care closing time I assure you I'm watching the clock like a hungry hawk watching a mouse. See, my kid's day care charges a mere $600 per hour late (billed in 1 minute increments). I don't see kids parents late that often :-) and we've come close to missing it, but haven't in two years.

Surely you are joking?? Why would you agree to such a thing?
Post reply on HN