Tuesday, November 21, 2017

Naturally

Hackers stole the personal data of 57 million customers and drivers from Uber Technologies Inc., a massive breach that the company concealed for more than a year. This week, the ride-hailing company ousted Joe Sullivan, chief security officer, and one of his deputies for their roles in keeping the hack under wraps.
Uber was passing around customer data and doing searches on the stuff, and never guaranteed the critical numbers were protected. 

Big point

Uber did not need those critical numbers,  addresses, driver ID, financials, or any of the rest, for drivers or customers. Drivers never needed to give that information.  That info could have been passed without delivering the critical numbers.

Since this has been an open issue, on his blog, for over a year, I can see why we would fire the entire dumbshit staff at that company. This is something even dumbshit credit card managers figured out, Walmart made them mistake when they started, then Yahoo.  The whole system is inverted, no one needs to see the critical info, all we need is verification and validation.  This applies across the board, otherwise, forget money, the web till turn it onto a random number.

No comments: