3 ms·

I've also worked with Joe. Great guy and one of the pioneers that implemented bounty programs at massive scale. Puzzling case, as the hackers apparently moved

I've also worked with Joe. Great guy and one of the pioneers that implemented bounty programs at massive scale. Puzzling case, as the hackers apparently moved on from Uber to hack other companies. Not something within Uber's control.

tptacek 6y ago
The hackers first broke into Lynda.com, using the same techniques, and emailed a ransom demand; Lynda responded by immediately disclosing the breach. Uber moved the conversation to HackerOne, and then made two $50,000 bitcoin payments to the still-pseudonymous hackers. What appears to be making this a big deal is that Uber had been hacked several years prior, and was negotiating with the FTC over the breach; the 2016 breach was not timely disclosed to the FTC, despite formal statements being provided after the breach occurred. Misleading the FTC is pretty clearly something that was under Uber's control.