Uber hauls GitHub into court to find who hacked database of 50,000 drivers
1–10 of 47 posts
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#2Uber publishes secret key.
Uber ignores security breach for half a year.
Uber sues third party while trying to repair damage caused by their own failings.
At this point the identity of the hacker is irrelevant. The data is in the wild, Uber is exposed as incompetent (again). But hey, anyone want to invest another billion at a 40 billion valuation? This company is going places.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#3Does Github have any obligation to share this data with Uber?
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#4Uber publishes secret key. Uber ignores security breach for half a year. Uber sues third party while trying to repair damage caused by their own failings. At this point the identity of the hacker is irrelevant. The data is in the wild, Uber is exposed as incompetent (again). But hey, anyone want to invest another billion at a 40 billion valuation? This company is going places.
At this point the identity of the hacker is irrelevant
No. Even if I leave my door unlocked, someone who comes in and steals my stereo should still be punished.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#5> In keeping with its image as a gas tank of ethics running on empty (...)
This is the best one-sentence summary of Uber I've ever seen.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#6Does Github have any obligation to share this data with Uber?
Presumably that's what the court will have to decide, if it gets that far.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#7Does Github have any obligation to share this data with Uber?
A judge will determine that. Generally you do have to cough up information for criminal activity, but a judge determines what and if.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#8Uber publishes secret key. Uber ignores security breach for half a year. Uber sues third party while trying to repair damage caused by their own failings. At this point the identity of the hacker is irrelevant. The data is in the wild, Uber is exposed as incompetent (again). But hey, anyone want to invest another billion at a 40 billion valuation? This company is going places.
At this point the identity of the hacker is irrelevant No. Even if I leave my door unlocked, someone who comes in and steals my stereo should still be punished.
The entity responsible is being punished. They're paying for identity protection for a year and taking yet another public image hit. The hacker? Whoever it was did society a favor by exposing yet another careless company giving away your data because they don't value security.
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#9So let me get this straight - They're publishing a secret key on a Gist, and then getting whiny when it somehow gets leaked.
Github very clearly states that "secret" gists are NOT private: https://help.github.com/articles/about-gists/
Re: Uber hauls GitHub into court to find who hacked database of 50,000 drivers
#10Asking for every IP address that accessed a public gist seems like a bit of an overreach to me. Github should also have the responsibility to protect its lawful users' data.
It seems reasonable though to request some user data for a specific IP address that Uber suspects as being the invader (depending on how strong the evidence is).