4 ms·
Taking over Uber accounts through voicemail
- mechboy 5y agoUber will never know the severity of this bug until several user accounts got compromised by someone
- fzionism 5y agoVery interesting,
- zealsham 5y agoI’ll say Uber rejected this due to highly unlikely user interaction required .
- infosecau 5y agoThere's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.
- dns 5y agoI know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!