In major goof, Uber stored sensitive database key on public GitHub page

Ride-sharing service subpoenas GitHub for IP addresses that accessed security key.

Read the whole story

 

[Drakkenmensch]

 

[Drakkenmensch]

theSeb[/url]":2xs1ak9p]

MoonUnit[/url]":2xs1ak9p]I was going to make a comment that security is hard, but this goes way deeper than that.

Yes, we must never forget that common sense is important.

It's especially precious because it's so rare.

 

[Drakkenmensch]

Findecanor[/url]":2ezih3xa]Am I the only one who finds that the biggest wrong-doing by Uber in this story is that they are requesting that Github should yield their user-access records to Uber instead of to law-enforcement?
Or is there something that I missed in this story?

Uber just wants to make sure that the evidence of their own wrongdoing is handled...

... properly.

 

[Drakkenmensch]

SPCagigas[/url]":2l5618kw]
But this is Uber! If they aren't being disruptive, they're not creating shareholder value!

Or some stupid shit about how "the rules" don't apply to them . . .

Pets.com and all the other internet bubble startups also believed that rules of business and reality did not apply to them "because internet."

I wonder how that worked out for them.

 

[Drakkenmensch]

Shavano[/url]":3alqyn98]
Who put the data out there, Uber?

The answer is also in the question, so Uber may struggle with the sheer mental strain your question will undoubtedly cause them.

But I'm confident they can connect the dots, given a couple of days.