Hacker News new | ask | show | jobs
Taking over Uber accounts through voicemail (blog.assetnote.io)
15 points by infosecau 1854 days ago
4 comments
dns 1852 days ago
I know as shubs, this post interesting and good writeup. thanks! I follow you on twitter!
link
mechboy 1854 days ago
Uber will never know the severity of this bug until several user accounts got compromised by someone
link
zealsham 1854 days ago
I’ll say Uber rejected this due to highly unlikely user interaction required .
link
infosecau 1852 days ago
There's not really much user interaction required. You just have to engage the victims cell phone when sending the OTP. The voicemail hack doesn't require any user interaction.
link
fzionism 1854 days ago
Very interesting,
link