giftedviz.com
giftedviz.com July 23, 2018


Uber used bug bounty program to launder blackmail payment to hacker

08 December 2017, 12:57 | Megan Pierce

Hush Uber Paid Hacker $100K to Keep Quiet About Breach REUTERS Simon Dawson

Uber app on a mobile telephone as it is held up for a posed

Then-chief executive Travis Kalanick and chief security officer Joe Sullivan made the decision to pay the hackers and keep the breach a secret from its customers and drivers.

A 20-year-old Florida man was responsible for the data breach at Uber last year, and was paid $100,000 to destroy the information, Reuters reported Wednesday.

Uber was able to determine the hacker's identity by directing him through the bug bounty program, which is hosted by a company called HackerOne. Uber announced on November 21 that the personal data of 57 million users, including 600,000 drivers in the United States, were stolen in a breach that occurred in October 2016.

HackerOne's public statistics on the Uber bounty program show that Uber has paid out $1,289,595 in bounties over the life of the program so far, including one for the $10,000 maximum specified by Uber to a UK-based researcher for critical bugs. The program is usually used to reward those who find system vulnerabilities, and experts told Reuters that rewarding a thief was extremely unusual.

KitGuru Says: The Uber hack was clearly handled poorly, particularly since paying off data thieves encourages others to attempt the same thing.

If the payment was actually made via HackerOne bug bounty program, it was an unusual incident as it involved a hacker who stole data.

North American Climate Summit
Obama ratified the Paris agreement in 2015, and President Trump said in June that the US would pull out of it. Mayor Emanuel has continued to push his way forward in city sustainability and environmental protections.


Border arrests fall, deportations soar in Trump's first year
Those arrests have sparked fear and anger in immigrant communities, where many worry the government is now targeting them. The drop brings arrests along the US-Mexico border to the lowest level since 1971, according to immigration officials.


Whistleblower: Flynn told ex-partner Russian Federation sanctions would be ripped up
The letter tells Gowdy it is hard to discern what happened because he would not subpoena Flynn, the White House, or Copson. The memo was intended for Trump to sign, though there's no indication the President saw it, the Journal reported.


CEO of HackerOne Marten Mickos commented that he could not talk about the programs of individual customers.

The second person was paid by the Florida-based hacker to, among other services, access Github, a site used by programmers to store code, in order to gain credentials to access Uber data, it added.

Dara Khosrowshahi, Uber's CEO, announced the breach last month and terminated two top security officials.

Khosrowshahi was hired amid concerns about the practices and ethics of previous members of the senior management team.

Furthermore, Reuters reports that "Uber made the payment to confirm the hacker's identity and have him sign a nondisclosure agreement to deter further wrongdoing".

At that time, Uber chief executive Data Khosrowshahi said: "None of this should have happened, and I will not make excuses for it".



Other News

Trending Now

Plane's Unusual Emergency: Fliers Had to Go to Bathroom
Cabin crew were unable to fix the problem and the smell became unbearable for passengers seated nearby, forcing the plane to turn around near Brussels and land at Heathrow Airport.

McDonald's Unveils $1 $2 $3 Dollar Menu
The idea is to shore up a comeback built on the success of all-day breakfast and more targeted discounts like McPick 2 for $5. McDonald's is reviving the name of the once-popular value menu next month, but this time the items will cost $1, $2 or $3.

Everton's incredible team news for Apollon Limassol clash
Fraser Hornby - Strong in the air and with a keen eye for goal, Hornby was a star performer for the Blues' Under-18s last season. Everton have had a very poor season and it seems like they are now in a relegation battle in the English Premier League.

Yemen war: Former president Ali Abdullah Saleh 'killed'
In a televised speech, Yemeni President Abd-Rabbu Mansour Hadi called on Yemenis to rise up against the Iran-aligned Houthis. A video circulating on social media showed fully-veiled women chanting "The people want the martyr's body".

Beyonce Presents Legacy Award to Colin Kaepernick, Thanks Him for His Sacrifice
Colin took action with no fear of consequences or repercussions, only hope to change the world for the better'. The Formation singer was brought out as a surprise presenter by Daily Show host and comedian Trevor Noah .

No December wedding plans for Anushka-Virat
However, it seems that the reports are false as Anushka's spokesperson has denied the news and has termed it false and baseless. However, much to everyone's disappointment, the reports of Virat and Anushka's wedding turned out to be mere rumors.

Aiyar's 'neech' remark reeks of feudal arrogance, says BJP
I am a freelance Congressi, I hold no post in the party, so I can reply to PM in his language. The Congress has a different culture and heritage.

Nintendo Games Coming To The Nvidia Shield (In China)
China's edition of Nvidia Shield , which costs 1,499 yuan (US$226), is a completely localised device, according to Nvidia . Historically, Nintendo has rarely licensed its original games and characters to rival consolemakers.

Was It 'Illegal' For Trump To Shrink Utah's Monuments? The Battle Begins
Zinke accompanied President Trump aboard Air Force One, as did Utah's Republican U.S. senators, Orrin Hatch and Mike Lee. Trump said his decision was made to "reverse federal overreach and restore the rights of this land to your citizens".

World's Biggest Starbucks Shanghai Roastery is a 'Coffee Wonderland'
More than 80 items are baked fresh onsite daily at the Princi bakery , the exclusive food pairing partner at Starbucks Roasteries. This coffee-lovers' paradise is almost 30,000 square feet and is the first Starbucks Reserve Roastery to open outside of the US.