4 ms·
The CSO was able to arrange for $100K to be paid out without any oversight of what that money was for? If it was paid to hackers it's unlikely that finance cut
by bogomipz 9y ago
The CSO was able to arrange for $100K to be paid out without any oversight of what that money was for?
If it was paid to hackers it's unlikely that finance cut a check. I'm imagining this was paid in bitcoin or similar. How was this able to be approved?
I'm guessing someone created a fake invoice? Wouldn't that constitute fraud?
- tedunangst 9y agoWho needs to approve it? How would you know they didn't?
- bogomipz 9y agoGenerally your finance department needs approve purchases beyond a certain dollar amount. This is pretty standard stuff. If they got it approved as such don't you think the CEO would have been informed that there was line item from Security for ransom? The article states the CEO didn't find out about the hack until a month after.
- tedunangst 9y agoI doubt the CEO of Uber is informed of every $100K transaction.
- xyzzy_plugh 9y agoIIRC Uber has had a very large bug bounty program with substantial payouts. It seems possible this was billed under the guise of a bounty.
- dantiberian 9y agoYes, this is spot-on, the just published New York Times article details this: https://www.nytimes.com/2017/11/21/technology/uber-hack.html https://www.nytimes.com/2017/11/21/technology/uber-hack.html
- quickthrower2 9y agoMaybe it's personal cash. 100k is barely a weekend in Vegas for these people.