Uber sends hacking victim new password in plain text email
Hacked Uber user highlights taxi firm's security response issues
Uber's security policy has come under scrutiny after another user had her account hacked.
The taxi app company reportedly took more than 24 hours to respond to the New York-based user, who found calls and charges from the UK had appeared on their account, according to Motherboard.
Hackers have targeted Uber accounts before, but the latest incident not only resulted in a delay, but with Uber sending the victim her new password in a plain text email.
When Uber eventually responded to complaints about the incident, it was with an email informing the user that they had changed their password, writing it in a plaintext email.
This is a well-known security misstep, lacking the basic encryption preventing hackers from finding the password in such an email.
George Rosamond, a system administrator specialising in privacy and security, told Motherboard: "These companies act like innovators, but in reality they really are reusing old infrastructures and practices. A little time and energy spent approaching the old security questions could go a long way."
Whether this was the fault of one Uber employee or something indicative of Uber's general security policies is currently unclear, but the experience did lead the user in question to request Uber delete their account and all information associated with it.
The news comes a week after Uber reportedly put together a $3 billion bid for Nokia's mapping service, known as Here.
Uber currently relies on Google Maps, but wants to own its own technology as Google works on developing driverless cars.
While Google Maps is by far the most popular mapping tool, Nokia's Here dominates the automobile space.
Four strategies for building a hybrid workplace that works
All indications are that the future of work is hybrid, if it's not here already
Free webinarThe digital marketer’s guide to contextual insights and trends
How to use contextual intelligence to uncover new insights and inform strategies
Free DownloadRansomware and Microsoft 365 for business
What you need to know about reducing ransomware risk
Free DownloadBuilding a modern strategy for analytics and machine learning success
Turning into business value
Free Download
