News for hackers. Stuff that matters.
Re:Former employees say Lyft staffers spied on passengers by jonknee on Thursday January 25, 2018 @05:25PM (#16235299)
Obviously when you make a support request your record should be displayed for the customer service agent, but this is the other way around where they can seek out people. I don't think that's a valid use case and there's the obvious abuse case.
Re:Former employees say Lyft staffers spied on passengers by joshuamorton on Thursday January 25, 2018 @05:33PM (#16235349)
Right, but the solution to that isn't 'encrypt everything', its 'define reasonable (and this definition may vary, but its certainly not "none") access controls for user data and pii'.