Reseller News
  • News
    • All News
    • Government
    • Products
    • Round Table
  • Advance
  • Tech

    Technologies

    • 3D Printing
    • Apps
    • Cloud Computing
    • Datacentre
    • Mobile Solutions
    • MSP
    • Networking
    • PC and Components
    • Products/Reviews
    • Security
    • Social Networking
    • Storage
    • Software
    • Tech Hive
    • Telecommunications
    • Unified Communications
    • Virtualisation
    • Windows 8 Central

    Markets

    • Green Channel
    • Market Watch
    • Retail
    • Services
    • SMB Market
  • Events
    View all events
  • Resources

    Resources

    • Reseller News Library
    • Microsites
    • Webinars
    • Podcasts
    • Videos
    • Contacts
    • Brand Posts
    • Hall of Fame Mentorship Series
    • Email the Editor
    • Media Releases
    • Slideshows
    • Subscribe online
  • Directories

    Distributor Directory

    Find distributors by name | vendor | location

    Vendor Directory

    Find vendors by name | category
  • Contact
  • Sign In

    Existing Member

    Forgot password?

    Join Reseller News

    Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

    Sign up now
  • Covid-19 Central
Menu ARN
Uber links to sensitive ride data now expire after 48 hours

Uber links to sensitive ride data now expire after 48 hours

Some of the links, which contain exact addresses for rides, are accessible through search engines

Zach Miners (IDG News Service) 04 September, 2015 21:54
  • share
  • print
  • email
Comments
Uber's logo

Uber's logo

When an Uber rider reaches his or her destination, the ride may be over, but information about it could live on through Google.

On Thursday, a site-specific search on Google for trip.uber.com produced dozens of links to Uber rides that have been completed and cancelled, in countries around the world including the U.S., England, Russia, France and Mexico.

Each link leads to a Web site with a map showing the ride's route, with the pickup and destination tagged with markers. A card on the page also shows the first name of the rider and driver, along with the driver's photo, make and model of car, and license plate number.

The map appears just as it might during the actual ride for the driver and rider on their smartphones.

If that wasn't troubling enough, the source code for each of these web sites, which is publicly accessible, reveals even more.

In the code, exact addresses for the pick-up spot and destination can be found. So can the car's license plate and the exact date and time of the ride.

By combining the information displayed on the map with data gleaned from the source code, people could learn an awful lot about these riders and drivers through other Google searches.

Tech news site ZDNet reported on the finding earlier on Thursday.

uber trips shared eta

Links to Uber rides and associated data, viewable after a site search of trip.uber.com on Google.

In a statement, an Uber spokeswoman said, "This is not a data leak. We have found that all these links have been deliberately shared publicly by riders. Protection of user data is critically important to us and we are always looking for ways to make it even more secure."

In 2013, Uber added a feature to its app to let riders share their ETA with friends and family during the ride. With the feature, riders can send a link, via SMS, to a live map that shows when they'll arrive at their destination.

The links appearing in the Google results containing the ride data were links that had been shared also on social media sites, and were thus cached by Google, an Uber spokeswoman said Thursday.

Google includes tweets in its search results.

Mikko Hypponen, chief research officer at IT security company F-Secure, previously called attention to the matter on Twitter, with pictures of the Uber links and maps he had found on Google.

John Flynn, Uber's chief information security officer, in response, said the links were shared deliberately by users.

But even though the links may have been deliberately shared online, users likely were not aware that they would contain sensitive data in the source code, or that anyone could find them through Google.

Those revelations might raise new privacy concerns among some Uber users. Some users might decide to stop using the share ETA feature, while others who are sent the links might now opt not to post them online.

Uber has previously faced controversy over its data policies, and the level of access company employees have to individual riders' trip data.

Late last year, Uber brought in a Washington, D.C., law firm to review its data policies, after attention had been brought to a so-called "god view" tool that let employees view rider logs and trip histories.

But this time, in the case of ride links shared online by users, it might be Uber customers who find themselves having to perform a privacy check of their own.

(Correction: An earlier version of the story misidentified the Uber official who responded to Hypponen's tweet; it was John Flynn, Uber's chief information security officer.)


Are MSPs Ready for the Future of IT?
More from LogicMonitor

Follow Us

  • Twitter
  • LinkedIn

Join the newsletter!

Or
  • Sign in with LinkedIn
  • Sign in with Facebook

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Uber

Read next

  • iMac redesign in the works, half-height Apple silicon Mac Pro coming this ...

  • JB Hi-Fi half year sales reach almost $5B after ‘extraordinary period’

  • The Kiwi channel gathers for the 2020 Reseller News Women in ICT ...

Follow us

  • Twitter
  • Facebook
  • LinkedIn
  • RSS

Brand Post

Grow your business with Edge Computing: How APC by Schneider Electric ensures success

Sponsored By APC by Schneider Electric

Distributor Directory

Your essential guide to New Zealand Distributors

Find distributors by name - vendor - location

Vendor Directory

Your essential guide to New Zealand Vendors

Find vendors by name - category

Microsites

  • From desktop to web and everything in between, Microsoft Office delivers the help you need to work anytime, anywhere. Pick the Office that's right for you.

Featured

Slideshows

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards

Hundreds of leaders from the New Zealand IT industry gathered at the Hilton in Auckland on 17 November to celebrate the finest female talent in the Kiwi channel and recognise the winners of the Reseller News Women in ICT Awards (WIICTA) 2020.

The Kiwi channel gathers for the 2020 Reseller News Women in ICT Awards
Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards

The leading female front runners of the New Zealand ICT industry joined together for the annual Reseller News Women in ICT Awards event at the Hilton in Auckland, during which hundreds of guests celebrated 13 outstanding individuals who won awards, chosen from more than 50 finalists representing over 30 organisations.

Leading female front runners honoured at the 2020 Reseller News Women in ICT Awards
Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Related Whitepapers

Show Comments
DDoS attack: NZX accepts need to invest in systems and skills
 

Copyright 2021 IDG Communications. ABN 14 001 592 650. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of IDG Communications is prohibited.

ABA Audited Website

IDG Sites: PC World New Zealand | CIO New Zealand | Computerworld New Zealand

Links: Privacy Policy [Updated 13 Sep 19] | Advertising | Books | Downloads

Latest News

11:49AM
Proofpoint's A/NZ channel chief tackles new APJ leadership role
04:30AM
Wait, did Nvidia just say it could make graphics cards for crypto-currency miner...
Jan 14
Google’s Go language could add generics later this year
10:09AM
Infosys granted Google Cloud partner data and analytics specialisation
More News
  • Chillisoft CEO bullish after LogRhythm buys MistNet

  • Pandemic rebound? PC shipments post biggest upswing in a decade

View all events

Featured

  • Reseller News Innovation Awards

    Reseller News Innovation Awards

    Reseller News Innovation Awards

  • EDGE 2020

    EDGE 2020

    EDGE 2020

  • Reseller News WIICTA 2020

    Reseller News Women in ICT Awards

    Reseller News WIICTA 2020

  • RN Emerging Leaders 2020

    RN Emerging Leaders 2020

    RN Emerging Leaders 2020