Headline is burying the lede (not blaming you OP, but Techcrunch); it's not just free rides, but rather, taking over any account they want and purchasing rides

Headline is burying the lede (not blaming you OP, but Techcrunch); it's not just free rides, but rather, taking over any account they want and purchasing rides on other's behalf, or stealing their information. Likely the app was sending a user ID to the backend, with no other authentication, in order to be "logged in." Not great, especially for a startup that Intel had owned for over two years at that point.