Uber Paid Hackers to Delete Stolen Data on 57M People

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by tmh79 on Tuesday November 21, 2017 @06:03PM (#15752481)

uber engineer here, we have 2fa set up for everything. Starting my day takes about 5 different 2fa checks (ssh access, aws, phabricator, team chat, etc)

[ Parent | on HN ]

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by claudiulodro on Tuesday November 21, 2017 @06:23PM (#15752662)

I know Uber has a strong engineering culture, which is why I was so surprised. I think philsnow's assessment that organization-wide required 2FA wasn't available for GitHub Enterprise at the time of the hack is probably correct.

[ Parent | on HN ]

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by HaoZeke on Wednesday November 22, 2017 @01:02AM (#15754636)

That sounds really inefficient

[ Parent | on HN ]

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by giosch on Wednesday November 22, 2017 @02:15AM (#15754951)

That sounds reasonably secure and quite common for a big tech company.

[ Parent | on HN ]

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by davb on Wednesday November 22, 2017 @08:26AM (#15756564)

Although more and more applications support SAML for SSO, much of the SaaS world is disparate and siloed. There's definitely something to be said for centralised user management on a homogeneous system. User leaves your organisation? Just retire them in LDAP.

[ Parent | on HN ]