4 ms·

They stored AWS storage credentials in clear, in a (private) Github repo... This is so baffling coming from one of the largest tech companies in the world. Am

They stored AWS storage credentials in clear, in a (private) Github repo... This is so baffling coming from one of the largest tech companies in the world. Among other things, this shows that they do not have proper access policies to user data (e.g anybody working at Uber can get access to any user's data), which in my opinion is a larger issue than this individual hacking case.

the_cat_kittles 9y ago
as the size of the company grows past a certain size, especially these "move fast and break things" idiots, i feel like the likelihood of this goes up. there are more and more people, someone is bound to do something stupid.
- halflings 9y ago
  The fact that this is a big company is exactly why strict access policies are necessary! I might trust a handful of administrators, or a limited set of engineers whose data access is audited, but I sure as hell would not trust thousands of engineers with my private data. Other tech companies (e.g Google) safely silo PII data, and any access has to be audited. I cannot wait before GDPR is implemented in Europe... at least companies will be seriously fined if they want to cut corners on privacy and data protection.
x0x0 9y ago
We already knew that -- viz Uber showing off their ability to track famous users at a party. see https://www.forbes.com/sites/kashmirhill/2014/10/03/god-view-uber-allegedly-stalked-users-for-party-goers-viewing-pleasure/ https://www.forbes.com/sites/kashmirhill/2014/10/03/god-view... https://www.cnet.com/news/god-view-under-spotlight-as-uber-investigation-intensifies/ https://www.cnet.com/news/god-view-under-spotlight-as-uber-i... and https://www.cnet.com/news/uber-lawsuit-alleges-startup-tracked-celebs-politicians/ https://www.cnet.com/news/uber-lawsuit-alleges-startup-track...
- halflings 9y ago
  Yes, and this is from 2014! They really did not learn anything, and Kalanick's apologies and statements about "becoming more mature" were all just bullshit.

the_cat_kittles 9y ago

as the size of the company grows past a certain size, especially these "move fast and break things" idiots, i feel like the likelihood of this goes up. there are more and more people, someone is bound to do something stupid.

halflings 9y ago
The fact that this is a big company is exactly why strict access policies are necessary! I might trust a handful of administrators, or a limited set of engineers whose data access is audited, but I sure as hell would not trust thousands of engineers with my private data. Other tech companies (e.g Google) safely silo PII data, and any access has to be audited. I cannot wait before GDPR is implemented in Europe... at least companies will be seriously fined if they want to cut corners on privacy and data protection.

x0x0 9y ago

We already knew that -- viz Uber showing off their ability to track famous users at a party. see https://www.forbes.com/sites/kashmirhill/2014/10/03/god-view-uber-allegedly-stalked-users-for-party-goers-viewing-pleasure/ https://www.forbes.com/sites/kashmirhill/2014/10/03/god-view... https://www.cnet.com/news/god-view-under-spotlight-as-uber-investigation-intensifies/ https://www.cnet.com/news/god-view-under-spotlight-as-uber-i... and https://www.cnet.com/news/uber-lawsuit-alleges-startup-tracked-celebs-politicians/ https://www.cnet.com/news/uber-lawsuit-alleges-startup-track...

halflings 9y ago
Yes, and this is from 2014! They really did not learn anything, and Kalanick's apologies and statements about "becoming more mature" were all just bullshit.