In major goof, Uber stored sensitive database key on public GitHub page

[Victorious Secret]

 

Ride-sharing service subpoenas GitHub for IP addresses that accessed security key.

 

 

Welcome to Uber, where we store private keys on a server we don't even own, much less can control the security of. 

 

On one hand, I like what these guys have done to shake up the taxi industry and put the established players on their asses a little, but then they go on and do exceptionally silly nonsense like this. 

 

Uber. Get your shit together. For your sake as much as your consumers. 

 

 

Uber officials have yet to say precisely what information was contained in the two now-unavailable GitHub gists. But in a lawsuit filed Friday against the unknown John Doe intruders, Uber lawyers said the URLs contained a security key that allowed unauthorized access to the names and driver's license numbers of about 50,000 Uber drivers. The ride-sharing service disclosed the breach on Friday, more than two months after it was discovered.

 

"The contents of these internal database files are closely guarded by Uber," the complaint stated. "Accessing them from Uber’s protected computers requires a unique security key that is not intended to be available to anyone other than certain Uber employees, and no one outside of Uber is authorized to access the files. On or around May 12, 2014, from an IP address not associated with an Uber employee and otherwise unknown to Uber, John Doe I used the unique security key to download Uber database files containing confidential and proprietary information from Uber’s protected computers."

http://arstechnica.com/security/2015/03/in-major-goof-uber-stored-sensitive-database-key-on-public-github-page/

 

[TheSLSAMG]

Just another reason why I think Uber is shit.

[Guest Kloaked]

I wonder if Uber's IT department (if they even have an in-house one) even thought that was a bad idea to do.

[dadasmithywinkle]

Uber cheap; Uber stupid.

[Guest Kloaked]

Uber cheap; Uber stupid.

 

Uber rekt

[gilm0re3]

I have never used Uber and now I definitely want to keep it that way.

[bob345]

Its amazing how they can screw up something this simple. I mean, seriously, its 2015. You would think that the people running these companies would have at least a bit of knowledge on how to securely store data. Apparently not.

[kpreg]

Just another reason why I think Uber is shit.

I guess you could say thier.... UBER SHIT

puns aside why are they calling this a breach? It's not????