Look at hash_password() at client.py :)
That's so... what? Is the API not https? If they wanted to avoid even knowing the password, then why not use something standard like SRP (https://en.wikipedia.org/wiki/Secure_Remote_Password_protoco...)?
That animated GIF with the CLI session is very cool, by the way.
Re:How to find your Uber passenger rating
by skeletonjelly on Monday July 28, 2014 @01:30AM
(#8095341)
Permalink: https://github.com/tals/uber.py/blob/fee0ede7b0168200faa218f... (press 'y' while on a page to get the permalink)
Addendum: This is awful! (Uber's hashing, not the github code in question)
Relevant: https://news.ycombinator.com/item?id=8046710
(Well, it's not really relevant but you reminded me of it ^_^)
Re:How to find your Uber passenger rating
by skeletonjelly on Monday July 28, 2014 @10:45PM
(#8100459)
Ah awesome thanks! Didn't cross my mind to link to the commit's line number. Still, have to agree with some commenters about having the link go to it by default.
This has so many MD5s, it must be ultra secure!
Re:How to find your Uber passenger rating
by madeofpalk on Sunday July 27, 2014 @11:48PM
(#8095068)
Oh that's fantastic! I'm definitely very interested in giving that a try!
Some of this is remainders from when they just had consultants working on this. Look at hash_password() at client.py :)