News for hackers. Stuff that matters.

A comment on Uber paid 20-year-old Florida man to keep data breach secret. Parent comment

Re:Uber paid 20-year-old Florida man to keep data breach secret by deedubaya on Wednesday December 06, 2017 @08:30PM (#15866837)
But if he found them, then someone else could have _already_ found them and downloaded the data.

The problem isn't that Uber paid him for finding the vulnerability, but that Uber kept it secret for so long.

[ Parent | on HN ]
Re:Uber paid 20-year-old Florida man to keep data breach secret by tptacek on Wednesday December 06, 2017 @10:41PM (#15867454)
That doesn't make sense. Serverside RCEs get disclosed all the time. If you take the median large SFBA tech company and stipulate serverside RCE, you're almost 100% of the time going to be an hour or two away from breach-disclosure-law event. But that never happens. What was different in this case?
[ Parent | on HN ]