4 ms·

I don't see how it's Uber's fault if someone finds out your password. I think it's nice of Uber that they refunded OP's trips even though it wasn't their fault

I don't see how it's Uber's fault if someone finds out your password. I think it's nice of Uber that they refunded OP's trips even though it wasn't their fault that OP's account was compromised. And it makes sense that they just suggested using a strong password. What else could they do?

deleted 9y ago
[deleted]
Bartweiss 9y ago
> even though it wasn't their fault that OP's account was compromised The article strongly suggests this isn't the case, though. OP had TFA active, but Uber allowed access to his account without without requiring the passcode they texted him. We don't know exactly what happened, because the support rep dodged the TFA question every time, but it doesn't appear to be a proper outcome.
deckar01 9y ago
They could fix the security vulnerability that allowed authentication of a new device without the 2nd factor of authentication.