Re:FTC says Uber took a wrong turn with misleading privacy, ...
by hkothari on Tuesday August 15, 2017 @04:23PM
(#15022052)
The craziest part to me:
"As a result of the failures described in Paragraph 18, on or about May 12, 2014, an intruder
was able to access consumers’ personal information in plain text in Respondent’s Amazon S3
Datastore using an access key that one of Respondent’s engineers had publicly posted to
GitHub, a code-sharing website used by software developers. The publicly posted key
granted full administrative privileges to all data and documents stored within Respondent’s
Amazon S3 Datastore."
"As a result of the failures described in Paragraph 18, on or about May 12, 2014, an intruder was able to access consumers’ personal information in plain text in Respondent’s Amazon S3 Datastore using an access key that one of Respondent’s engineers had publicly posted to GitHub, a code-sharing website used by software developers. The publicly posted key granted full administrative privileges to all data and documents stored within Respondent’s Amazon S3 Datastore."
https://www.ftc.gov/system/files/documents/cases/1523054_ube... Page 5