News for hackers. Stuff that matters.
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by euyyn on Tuesday November 21, 2017 @06:10PM (#15752548)
Why bother? I just deleted the app and forgot about it. Is there something I should know?
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by kelnos on Tuesday November 21, 2017 @06:52PM (#15752873)
IIRC you can't remove all payment methods from the app, so just deleting the app will leave your credit card information in their hands. Also all your previous ride data will still be on their servers. Both of these things could be lost in a data breach, and presumably account deletion deletes this data.
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by nikcub on Tuesday November 21, 2017 @07:12PM (#15752988)
Deleting your account at Uber doesn't delete ride info[0]

In a lot of cases companies still leave behind an email stub to prevent users signing up over and over again for signup deals

The only way to ensure your data is safe is to never hand it over in the first place - signup with a fake name, prepaid card, etc.

[0] https://help.uber.com/h/24010fe7-7a67-4ee5-9938-c734000b144a

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by londons_explore on Tuesday November 21, 2017 @08:39PM (#15753480)
In the EU, data protection rules mean they must delete all user data on request.

That means every day I'm a new customer and get $20 off my first ride of $22. One day, they'll wise up and stop making such silly deals.

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by alsetmusic on Tuesday November 21, 2017 @10:59PM (#15754118)
> In the EU, data protection rules mean they must delete all user data on request. That means every day I'm a new customer and get $20 off my first ride of $22. One day, they'll wise up and stop making such silly deals.

The behavior described here is extremely selfish and amoral. It amounts to gaming the system. Additionally, the cost of exploiting a loophole such as this will be passed on to other customers before the company stops offering a losing deal. Those customers will not be reimbursed when the offer is rescinded.

The antisocial behavior of the company would not excuse the antisocial behavior of a user acting in this way.

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by linkregister on Tuesday November 21, 2017 @08:04PM (#15753302)
I didn't see any mention of ride info in that link, maybe the text has changed since you posted it.

It is frustrating that the page doesn't enumerate what information is deleted and what's retained.

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by LethargicStud on Tuesday November 21, 2017 @07:13PM (#15752997)
I _really_ hope they let braintree handle that and don't touch PANs. If they do store PANs, presumably they'd be audited and hopefully would store them more securely. But hey, I guess you never know and less exposure is always better.
Re:Uber Paid Hackers to Delete Stolen Data on 57M People by linkregister on Tuesday November 21, 2017 @10:31PM (#15754019)
You may or may not want to remove your information, especially if you change phones. Someone getting your phone number could charge rides to your account if you don't unlink your credit card information.

It's also good hygiene to delete accounts. I don't typically do it, but when a company offers an easy delete button, I won't refuse.