Hacker News new | ask | show | jobs
Taking over Uber accounts through voicemail (blog.assetnote.io)
15 points by infosecau 1807 days ago
4 comments
dns 1805 days ago
I know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!
link
mechboy 1807 days ago
Uber will never know the severity of this bug until several user accounts got compromised by someone
link
zealsham 1807 days ago
I’ll say Uber rejected this due to highly unlikely user interaction required .
link
infosecau 1805 days ago
There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.
link
fzionism 1807 days ago
Very interesting,
link