Uber has pulled down the searchable database people found at “trip.uber.com,” which contained details of trips people unknowingly made public by using the “Share your ETA” feature. That’s one of the app’s functions that sends a link with all pertinent details to chosen contacts. Since it could very useful, especially for those who need to travel alone through shady locations or at night, the company isn’t yanking it from the app. Instead, Uber has decided to tweak the system so that all links get expired after 48 hours.
ZDNet recently discovered the “Share your ETA” flaw, which exposed users from various countries due to trips they’ve taken from as far back as 2013. That’s why the searchable database included the passengers’ names and exact work/home addresses, as well as the driver’s name and other data. Credit card numbers were thankfully not found in the mix, but it was still a privacy issue all the same. Uber’s solution, however, isn’t bulletproof — anybody with a link can still access it within two days, after all — so make sure you only choose contacts you trust implicitly.
Riders can continue to share their trip links publicly, but now they expire after 48 hours. h/t @mikko
— four (@four) September 4, 2015
Filed under:
Transportation
Comments
Source:
Business Insider
Tags: eta, ridesharing, uber