Uber Paid Hackers to Delete Stolen Data on 57M People

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by 21 on Tuesday November 21, 2017 @06:26PM (#15752690)

The hackers wanted access to the code to look for Amazon keys. For them it doesn't matter if they get the code from the internal GitHub or from a developer machine.

If you have an ultra-secure door, the thiefs will just enter through your regular window.

[ Parent | on HN ]

Re:Uber Paid Hackers to Delete Stolen Data on 57M People by IncRnd on Wednesday November 22, 2017 @12:33AM (#15754497)

How do you know they "wanted" access to look for Amazon keys? Do you know it wasn't from a blanket scan of github?

Sure, there are only 13 projects on https://uber.github.io/, but there are 169 on https://github.com/uber, and it only takes a short while to scan for access keys. There are plenty of open tools that will scan github for keys.

This may not have been targeted at Uber but a net for all of github with Uber being just one company that was hit up for cash. Unless you're saying that you know the motivations of the attackers.

[ Parent | on HN ]