Uber’s Claim That Hackers Have Fully Deleted Stolen Data Is “Nonsensical”

Uber's been sued at least 11 times in just 1 week, faces new scrutiny from Senate.

It’s now been a full week since the jaw-dropping revelations that Uber sustained a massive data breach in 2016, which affected over 57 million people.

Since November 21, the company has been hit with 10 federal lawsuits (including the two Ars reported on last week). On Monday, the City of Chicago and Cook County also sued Uber in Illinois state court, while numerous senators are now demanding answers as well.

The cases allege substantial negligence on Uber’s part: plaintiffs say the company failed to keep safe the data of the affected 50 million customers and 7 million drivers.

Uber reportedly paid $100,000 to delete the stolen data and tried to keep news of the breach quiet by having the hackers sign non-disclosure agreements.

In the case of City of Chicago v. Uber, city and Cook County lawyers wrote that in October 2016, then-CEO Travis Kalanick was contacted by two hackers who claimed to have millions of individual Uber customers’ records.

"In striking resemblance to the 2014 breach, the hackers had accessed a private GitHub repository and found database login credentials," Chicago's attorneys argued.

"While the repository was password-protected, hackers were still able to breach it—indicating either a very weak password or the fact that the user credentials for the repository were found in a previous unrelated data breach. And even though Uber specifically promised regulators that it would use two-factor authentication on services like GitHub, it clearly failed to implement that promise. Once inside the GitHub repository, the attackers once again found AWS login credentials, which the attackers then used to access and extract the personal information of over 50 million people, including Chicago and Illinois residents."

Last Tuesday, CEO Dara Khosrowshahi wrote: "None of this should have happened, and I will not make excuses for it."

According to the Wall Street Journal, Khosrowshahi learned of the breach two weeks after he took over the company’s top job on September 6, and yet he kept quiet for over two months.

Chicago attorneys also wrote that the company’s claims that the stolen data has been fully expunged is "nonsensical."

"It has not demonstrated, in any way, how or why it knows the data was actually deleted," they wrote. "No matter what documents the hackers signed, or representations they made, Uber is saying little more than that they trust the word of criminals."

"Integrity"

The broadly-similar proposed 10 class-action suits were filed in several federal courts across the country: in San Francisco; Los Angeles; Allentown, Pennsylvania; Portland, Chicago; and even Huntsville, Alabama.

On Monday, a group of senators, lead by Sen. John Thune (R-South Dakota) and Sen. Orrin Hatch (R-Utah), specifically asked for a "detailed timeline" of the incident, among other demands due by December 11.

Similarly, Sen. Mark Warner (D-Virginia) also had an even more damning question.

"To the extent Uber had lawfully acquired information enabling it to identify the hackers who had compromised its systems, ensure they would abide by agreements to delete the data and not to disclose the breach, and transfer them $100,000, it conceivably had enough information at hand to assist law enforcement in the apprehension of these criminals," he wrote.

"Why did Uber choose not to provide relevant forensic information to law enforcement and has this information been provided to law enforcement in the last week?"

Uber spokeswoman Molly Spaeth sent a statement to other media, including the Chicago Tribune, which read: "We are committed to changing the way we do business, putting integrity at the core of every decision we make, and working hard to regain the trust of consumers."

Uber has not responded to Ars’ multiple requests for comment.

Source : ars technica 

from Taxi Leaks http://ift.tt/2ieiXlD
via IFTTT

TfL...Architects Of Their Own Demise : None So Blind As Those Who Will Not See.

There's and old saying, which has never been truer than today.....none so blind as those who will not see!

Instead of looking closer to home, as passengers choose Uber over buses and trains, TfL has put the blame of an unexpected fall in passenger numbers on .... Brexit. 

TfL said:

We have seen lower growth in demand for our services than previously forecast for this year, largely owing to economic factors affecting the whole of the UK, including the uncertainty of Brexit.

Lower consumer confidence, GDP growth stagnating, real wage growth and a softening housing market are all affecting services and retail in London, leading to lower than forecast passenger numbers.

Current patterns in rail journeys show a year-on-year reduction in trips within Zone 1, which TfL said was reflected in its lower passenger income, and that the economic headaches had also buffeted its commercial revenue.

Operation Horizon back on the table.....

With Uber allegedly expanding its fleet of minicabs to over 40,000,  plus private hire licenses dished out like sweets to all comers, TfL expect negative pressure on demand for London's public transport to continue for the first half of its five-year business plan. 

The transport body's overall income for 2016/17 was £6.8bn, and for 2017/18 it is expected to drop to £6.5bn, while passenger income is expected to dip from £4.7bn for 2016/17 to £4.6bn for 2017/18.

TfL is also having to contend with the grant cut from central government. Its grant funding from the Department for Transport has been reduced by £2.8bn from 2015/16 to 2020/21.

Mayor Sadiq Khan said in the plan: "Our spending decisions become even more important in today's economic climate. While all other major transport operators in the world receive some form of central government subsidy, the government has taken £2.8bn away from TfL's operational funding."

TfL announced last month that upgrades for the Jubilee Line and Northern Line have been shelved after a surprise dip in passenger numbers on the Tube.

Out of desperation, TfL have flooded central London with an excess of buses, many remain empty most of the time, with the Tube the only part of the network still making a small profit. The transport body has been left facing an "investment prioritisation process".

The Mayor's fare freeze has had a major impact.

Critics have pointed their finger at mayor Sadiq Khan's fare freeze, with London Assembly Conservative member, Keith Prince, saying earlier this month: “In just 12 months, Sadiq Khan’s con of a ‘fares freeze’ has eluded millions of travelcard users and cost TfL hundreds of millions of pounds."

But in its business plan, TfL said early indications were that the fare freeze "has helped to dampen the effect of these negative economic factors". Putting up fares will encourage more people to Use cheaper services such as Uber.  

Where fares have been increased on the National Rail network, this has led to "much sharper reductions in passenger numbers for those operators", TfL added.

TfL are hoping people will turn away from cars and Taxis. They are hoping to bring new passengers from outside London in on the Tube.

In their planned fight back, TfL have fully backed plans to disrupt surface transport with pedestrianisation of major streets in WI, unreasonably quick green light phasing, segregated cycle lane's congestion, numerous unmanned road works...etc, banking on the Elizabeth Line to bring a considerable much needed boost to their economy. 

TfL also plan to ramp up income from commercial activities such as interactive advertising at bus stops as well as Tube and Coach Stations. 

from Taxi Leaks http://ift.tt/2zLdjPA
via IFTTT

#UberRape, Driver Sentencing Is Just The Latest Controversy For Company

Alejandro Done will serve up to 12 years in prison for raping a young female passenger.

Sebastian Murdock

A former Massachusetts Uber driver has been sentenced to 10 to 12 years in prison after raping a female passenger, adding to a growing list of Uber drivers accused of sexual assault.

Boston native Alejandro Done, 47, who pleaded guilty, was sentenced last Friday on charges including kidnapping, assault and battery, and aggravated rape, according to USA Today.

Ex-Uber driver Alejandro Done was sentenced to at least 10 years in prison for raping a female passenger.

On Dec. 6, 2014, Done picked up a woman heading to her home in Cambridge. Done told the woman that she would have to pay him in cash. The two went to an ATM to withdraw money, then Done drove her to a secluded location, reported the Star Tribune.

Done kept the victim trapped in the car as he strangled and sexually assaulted her. 

The felon has previously been charged with five other unsolved sexual assaults that happened in the Boston area between 2006 and 2010. That case is still pending. Uber told USA Today that Done had passed a background check, and had no prior criminal record.

“The defendant preyed upon a young woman who trusted that he was who he portrayed himself to be,” District Attorney Marian Ryan said in a statement. “I encourage the public to take precautions when using any ride-sharing service.”

In another recent case, in South Carolina, a sixth-grade teacher, who was moonlighting as an Uber driver was arrested on charges of kidnapping and forcible rape. Patrick Aiello, 39, was accused of assaulting a 23-year-old woman in August. The woman managed to escape from the car and was struck by another one in the process. Aiello later pleaded guilty to misdemeanor charges, and authorities dropped felony charges of kidnapping and criminal sexual assault against him, according to the Post and Courier.

A former Uber driver in India, Shiv Kumar Yadav, was convicted of raping a female passenger Tuesday. 

Many states in the U.S. are demanding that Uber ensure its background checks are more thorough. Last year, prosecutors in California filed a complaint against the ride-hailing service for failing to adequately vet drivers, some of whom have been convicted sex offenders, kidnappers and murderers.

Last April, Massachusetts Gov. Charlie Baker proposed a bill giving his state oversight in background checks. Uber has backed the legislation proposal, and hosts a petition on its website in favor of the governor’s plan, which has more than 30,000 signatures.

Uber faces a litany of other problems. Last weekend, drivers called for a strike and demanded better pay and higher fares. The service has been suspended in Spain for creating unfair competition and it is banned in Italy for not adhering to licensing rules. French taxi drivers, who were upset by having to compete with Uber, took to the streets last summer, smashing cars and setting tires on fire.

from Taxi Leaks http://ift.tt/2n7NMdo
via IFTTT

Mexican Authorities Seek Information From Uber About Massive Data Breach.

UberPool Car Sharing Banned From Operating In Israel From 10am Tomorrow

Uber will have to stop providing its car-sharing service in Israel as of 10 AM Wednesday, after the courts ruled in favor of competing companies. A Tel Aviv judge issued an injunction to that effect on Monday.

Judge Eitan Orenstein explained that because the drivers in question lacked appropriate insurance for passengers, he could not allow Uber to continue to operate run Uber Day and Uber Night ride-sharing services using private household cars in Israel. 

The Uber taxi service, however, may continue, the judge ruled.  

Uber had been successfully sued by an Isreally Taxi drivers association.  Separately, the Transportation Ministry sued Uber in May, on the grounds that Israeli regulation forbids taking passengers for money unless one has a taxi license. That case is still pending. 

The ministry claims that not only the driver, but even passnengers are in violation of the law. In the suit they name Uber's local manager, Yoni Greifman, and six drivers as those who are accused of taking passengers for pay.

Uber began operating in Israel in late 2016, on a small pilot basis. It expanded its carpooling operations over a month ago despite objections from the government.

A source at the Transportation Ministry speaking on condition of anonymity told TheMarker, "Someone boarding an Uber car is a criminal - both driver and passenger."

"The ministry is conducting a legal petition against the company, and there is the possibilty of filing of an interim injunction against its activities and the opening of a full criminal proceeding.  A criminal proceeding will be conducted against anyone who provides the service or is a passenger and against the company itself. The legal counsel of the transportation ministry is working with all the relevant parties to find the most appropriate path forward." the source said. 

from Taxi Leaks http://ift.tt/2zuTqrJ
via IFTTT

Addison Lee Plying a For Hire At Evolution, While Taxis Are Turned Away By Parks Police.

Last Saturday night, we saw licensed Taxis without the Gett app being turned away from Battersea Park venue Evolution. 

I had a booking to pick up a young lady at 01:00. 

I got there a little early but my approach to the venue was blocked by a parks police officer, who told me that only Taxis with the Gett app on their phone....(notice he didn't say booking, just needed the app on their phone)...were being allowed to approach the entrance and form a rank outside the venue. 

I had to park in the riverside car park some distance away. 

While I waited there, I was approached by a number of people leaving the venue asking if I was for hire.

I decided to walk up and have a word with the Gett Marshal. He agreed that I could come in and pick up my booked job and spoke to the police on my behalf to let me through there picket. 

This behaviour has upset many Taxi drivers who feel that Gett are stealing our work and then selling it back to drivers and have made their feelings clear, widely reporting on social media platforms.

In replies to complaints from drivers about the exclusion, it seems everyone has passed the buck.

The parks police said no cabs were turned away, the event management company said the exclusion was nothing to do with them and Gett said all the jobs were pre booked. This definitely was not the situation that I witnessed. 

Well 'I was there' and I saw Taxis turned away, plus there appeared to be no advice about a Taxi rank in the other car park. 

Gett also released this statement :

Now this week, the same is to happen again, this time using Addison Lee, who have made a statement that all jobs at Evolution will be pre-booked. 

A friend of mine went there last night and spoke to the parks police who tried to get him to turn away by saying all the work was booked. Apparently they were being given a token which they could take to the car outside where they could take anyone of the cars who were ranking there, clearly plying for hire.

The constable said he could drive up and see, but he would be there a long time before he got a job. 

This was not the case. He pulled up outside with his light on and within minutes got a £50 job to North Finchley. 

So if you are passing Battersea Park tonight and fancy taking you chances at Evolution, don't let the park police turn you away as we've been told that the Taxi trade are not excluded from waiting outside for work. 

from Taxi Leaks http://ift.tt/2i2AzB3
via IFTTT

BBC London News Broadcast Another Slur On London's Iconic Taxi Trade.

Again we see more anti Taxi bias from a BBC London News reporter, in a broadcast made just yards away from the BBC In Portland Place, referring to the mysteriously hushed up Uber Attack on Exhibition Road, a Taxi incident.

2 minutes 10 seconds into the BBC broadcast below "Exhibition Road, where a TAXI mounted the pavement".

This is extreme bias and a slur on our iconic trade from the BBC, who refuse to accept there is a difference between Taxis and Private Hire.

    

This is completely unacceptable and complaints should be made on behalf of ever London Taxi drivers who feels slated by this unnecessary attack on our good name. 

Coming just days after the media announcements that although serious sexual assault complaints in private hire vehicles had gone through the roof with the fact that last year, not one attack was reported to have taken place in a Licensed Taxi.

They keep getting away with this (even though our name is protected under government legislation), because it appears our representative orgs in the New United Trade group (LTDA, UCG, Unite and RMT) are weak and seem to have no plan, no idea what to do next.

So the ball is now in your court, and it's all up to you.

Get in contact with BBC London News and make it clear that you are not happy with the lazy journalism, resulting in constant slurs on our trades reputation.

Use the link below to contact BBC London News.

http://ift.tt/2zD1BXn

Also, still no word from the NUT group over the announcement of a major road closure in the Bank Junction vicinity, other than to announce the closure....value for money???

from Taxi Leaks http://ift.tt/2BnwBb9
via IFTTT