Security researchers find major vulnerabilities in Uber

A group of hackers from a security company in Portugal managed to hack into Uber and get their hands on a bunch of data that should remain hidden. The team of three experts, Vitor Oliveira, Fábio Pires and Filipe Reis from Integrity, found a total of six flaws: they managed to use promotion codes, found private emails using UUID, found users’ phone numbers, created driver accounts, validated them, found where you went, who your driver was, and who you are and, ultimately, date of the trip, driver name and picture, the ID and the cost of the trip. The route map… [Continue Reading]