3 ms·
Have any white hats ever audited Uber's ride management protocols? One would hope Uber would combine the ride request, GPS data, etc. from both the rider and dr
by stevenh 9y ago
Have any white hats ever audited Uber's ride management protocols? One would hope Uber would combine the ride request, GPS data, etc. from both the rider and driver apps to doubly ensure that the ride really was requested and took place, but now I sense the possibility that they cut corners on development, mostly ignoring data from the rider's app and instead forwarding it directly to a driver's account which has an undocumented God mode of sorts, allowing the driver's app to handle every step of ride management from one blindly trusted data source. If so, then everything could be forged from the driver's side if the protocol were ever to be reverse engineered, and maybe the bad guys finally figured this out.
- URSpider94 9y agoI have a friend who works for Uber. They care about this DEEPLY. In emerging countries, there are large-scale fraud rings that involve driving around with dozens of phones in a car that are automated to request and complete rides. The driver just toodles around town all day. The botnet operators collect large numbers of stolen cards and cycle them through the funnel. If Uber can't find and plug the hole for fraud pathways before the criminals scale them, they will lose their shirts on chargebacks.