Uber Blames Lyft For Hack, Forgetting They Published Key on GitHub


Susanne.Posel-Headline.News.Official- uber.lyft.bithub.security.key.data.breach_occupycorporatismSusanne Posel ,Chief Editor Occupy Corporatism | Co-Founder, Legacy Bio-Naturals
October 9, 2015

 

Uber Technologies is focusing their investigation into a data breach of driver information on an executive at Lyft Inc, the ride-sharing service’s direct competitor.

During the inquiry, Uber investigators became interested in a Comcast IP address that could lead to the identity of the hacker. The reason this IP address is important is because it can be traced back to Chris Lambert, chief of technology at Lyft.

Earlier this year, an estimated 50,000 driver’s names and license numbers were syphoned from the company’s computers.

According to court documents, Uber contended that “an unidentified person using a Comcast IP address had access to a security key used in the breach”; however the court filings do not directly connect the IP address and the hacker.

The complaint states that the hacker “violated civil provisions of the federal Computer Fraud and Abuse Act”.

Another point of confusion is that the IP address does not match the IP address from the data breach.

Interestingly, the security key was published on GitHub for anyone to see back in March of this year.

At the time, Uber “stored a secure database key, intended for use only be elect employees, on a publicly accessible GitHub page. Once the company realized its database had been breached in May of last year, it changed the key and took the GitHub page offline.”

To figure this out, the judge ruled that Uber’s subpoena of Comcast records was “reasonably likely” to assist in the revelation of the identity of the hacker.

Brandon McCorrmick, spokesperson for Lyft, stated that an internal investigation into the hack was conducted and “there is no evidence that any Lyft employee, including Chris, downloaded the Uber driver information or database, or had anything to do with Uber’s May 2014 data breach.”

McCormick omitted details about the scope of Lyft’s internal investigation and would not discuss whether the Comcast IP address belonged to Lambert.





Source Article from http://feedproxy.google.com/~r/OccupyCorporatism/~3/92S5o72W7zk/

You can leave a response, or trackback from your own site.

Leave a Reply

Powered by WordPress | Designed by: Premium WordPress Themes | Thanks to Themes Gallery, Bromoney and Wordpress Themes