Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Uber Paid Hackers to Delete Stolen Data on 57M People

bloomberg.com

Post reply on HN
Print view View original

571–580 of 606 posts

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#571

Post by asabjorn »

kenbaylor wrote: post #289
asabjorn wrote: post #113

Earlier quoted context omitted.

The article states that this disclosure came out of an board commissioned investigation into the activities of Sullivan’s security team. Do you think that other more serious breaches discovered by this investigation is hidden, or is this more of a general sentiment around how you perceive Uber?

Oh there's more. Much more.

I don’t think these kind of comments adds much to the discourse, and we on HN try to not comment when we don’t have anything to add.

Do you have any evidence that the action here by the new leadership to disclose all breaches was disingenuous?

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#572

Post by BinaryIdiot »

Whoa, Uber even had the hackers sign an NDA? Like, what were they going to do if the hackers broke the NDA? That's just...insanity. The fact that Travis knew about it as well smells like he could face charges.

https://www.nytimes.com/2017/11/21/technology/uber-hack.html

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#573

Post by pimmen »

diebir wrote: post #441
pimmen wrote: post #387

Earlier quoted context omitted.

And testing their self driving cars without getting the proper permits. And hiding shit like this from investors so they’ll lose a lot of money later. I would never work as an engineer for a company like that. How can I trust that it will honor any deal I make and not screw me? I have to think about that with every company but this one in particular can’t even spell ”integrity”.

That's silly. Uber has a revolving door with Google and Facebook. Nobody is getting screwed, or it would not work to hire people away.

Nobody's getting screwed yet. Nobody had their data stolen then covered up either, until they did. No investors were lied right into their face about this either, until they were. No women were harassed and had the events covered up either, until they were.

If the company views engineers as better than other people and someone they wouldn't want to screw with, I'm not working there either on principle.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#574

Post by odammit »

sillysaurus3 wrote: post #544
odammit wrote: post #542

Private repo or not, checking your credentials into git is amateur. I’d normally say eventually it’d bite you if you fall into the habit and do it on a public repo by accident but it looks like it can bite you on a private one too. Manage your secrets. Use something like Vault[1] or Pass[2] they’re free and awesome projects. I keep all of my secrets even non-prod ones in one of these two because if you think about it…

It may be amateur, but it's one of the most common mistakes. Even at top companies.

Amateur may not have been the best word. Maybe easy or lazy or debt. Ive seen it a lot where it was something that was inherited and the current team knows its a problem, but they have a 1000 features to build and never get around to fixing that debt.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#575

Post by igorgue »

lhorie wrote: post #138
claudiulodro wrote: post #31

Earlier quoted context omitted.

I'm surprised Uber doesn't have their engineers set up 2FA for GitHub. Super simple to implement and require organization-wide[1] and would have prevented this. Then again, not storing credentials in GitHub would also have prevented this . . . [1] https://help.github.com/articles/requiring-two-factor-authen...

Github 2FA has been part of the first-day training/laptop setup for a while now (I joined in may) and there's security-related training in place as well. I was told there are also scanners in place now that check repos, gists, etc for secrets for exactly this type of mistake. One snippet of the email the article didn't mention was that Sullivan's firing happened pretty much right after Dara learned of the breach and…

Hah, setting the example himself I remember him yelling / and cursing at an Uber driver in NYC, very ethical.

Good luck and I hope you're doing it for the money, cause nobody should buy the "Uber is an ethical company" bs.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#576

Post by philip7899 »

I lost my job few months back before i notice my wife started acting up, she changed passwords to every account that she has, put a pin lock on her phone which she has never done before, i have been searching for ways to retrieve her text messages without installing any software on her phone or having access to it, I was introduced to this wonderful hacker and he hacked into my partner mobile with just her phone number only. i get to know she was cheating and all.i felt very sad about this,but it over now.all thanks to murphy.c8990@gmail.com if you need help regarding to issues like this contact him.let him know philip referred you in.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#577

Post by lhorie »

igorgue wrote: post #575
lhorie wrote: post #138

Earlier quoted context omitted.

Github 2FA has been part of the first-day training/laptop setup for a while now (I joined in may) and there's security-related training in place as well. I was told there are also scanners in place now that check repos, gists, etc for secrets for exactly this type of mistake. One snippet of the email the article didn't mention was that Sullivan's firing happened pretty much right after Dara learned of the breach and…

Hah, setting the example himself I remember him yelling / and cursing at an Uber driver in NYC, very ethical. Good luck and I hope you're doing it for the money, cause nobody should buy the "Uber is an ethical company" bs.

Dara Khosrowshahi is the CEO now, not Travis Kalanick... Maybe catch up on the facts before reaching for the pitchforks? :)

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#578

Post by drawnwren »

lhorie wrote: post #556
msh wrote: post #396

Earlier quoted context omitted.

Uber will not tolerate unethical behavior, you got to be joking!?!?

I think many people don't realize this, but the majority of the leadership team from like a year or two ago is now gone, including Travis. Also, Uber has been hiring a lot of new people - the ratio of new people vs old timers is really high. I'm obviously just one anecdata point, but I believe new hires (and a lot of old timers) want Uber to be an ethical company, and many have joined the company specifically to tack…

This is good for Uber and their employees in the short term, but I can't help but think it's bad for their ideals in the long run. There are a lot of scenarios that look very bad for Uber economically and it would be a shame for a culture shift to coincide with the realization of one of them.

Re: Uber Paid Hackers to Delete Stolen Data on 57M People

#579

Post by nemothekid »

katastic wrote: post #569
pc86 wrote: post #540

Earlier quoted context omitted.

The downvotes are likely because you're taking an Uber thread veering it off to GM's management and your children, neither of which have any relevance here.

Except for the CEO being changed and having a toxic corporate culture that didn't change and produced the same deadly car across CEO's after promising change but did nothing different--including not stopping production of a deadly vehicle. I probably should have spoonfed the readers more. They grew up in a world that doesn't need critical thinking anymore so it's probably too much to ask for their brains to activate…

Still not making the connection from Uber to GM that you are trying to make. Because the GM CEO could not prevent teens across America from joyriding, the new CEO is going to be unable to reign in the behavior of his own supports?

Either make a valid point or let your comments stand. Leave the /r/iamverysmart tandems at the door

Post reply on HN