Cloudflare security breach exposes data from Uber, Fitbit, OKCupid among 3,400 websites; password changes recommended

User data from 3,400 websites has been leaked and cached by search engines as a result of a bug in Cloudflare, a content delivery network. Sites affected over the course of several months include major ones like Uber, Fitbit and dating site OKCupid. 1Password also uses Cloudflare, but says that end-to-end encryption means that no customer data was exposed.

ArsTechnica reports that the leaks were spotted by Google security researcher Tavis Ormandy.

We observed encryption keys, cookies, passwords, chunks of POST data and even HTTPS requests for other major cloudflare-hosted sites from other users. Once we understood what we were seeing and the implications, we immediately stopped and contacted cloudflare security.

Cloudflare has admitted that the breach occurred, but Ormandy and other security researchers believe the company is underplaying the severity of the incident …

more…

Uber is now available for Android Wear 2.0 with full standalone capabilities

When it comes to smartwatches, apps either make total sense on the wrist, or they don’t. Uber and Lyft are apps that make tons of sense since they can provide useful information at a glance, like smartwatches are designed to do. Now, nearly two years after it was first promised, Uber has finally delivered with an official app for Android Wear 2.0.

more…

Report: Google plans to take on Uber w/ Waze-powered ride sharing service to launch this fall

According to a report this afternoon from The Wall Street Journal, Google is planning to launch a ride sharing service in San Francisco, California later this year to take on rivals Uber and Lyft. The new service is said to bring much cheaper rates in a market that is already intensely competitive. The move also has long-term implications for Google’s self-driving car project…

more…

Uber unsurprisingly denies Waymo claim that it stole self-driving technology

Yesterday, we told you that Alphabet’s Waymo filed a lawsuit against ride hailing service Uber over the theft of key self-driving vehicle technology. Unsurprisingly, Uber has now come out with a statement (via Business Insider) denying that Waymo’s claims have any basis in reality… Here’s the statement, in which Uber says Waymo’s lawsuit is simply “a baseless […]

Uber now allows you to save custom locations other than home and work

Rolling out today, Uber is making it easier for you to remember destinations other than your home and work addresses with Saved Places. Whether you visit a particular friend or relative’s house, restaurant, or even a park fairly often, it can get annoying trying to remember the exact address when hailing an Uber. Now, these saved locations can be saved as a shortcut…

more…

Thousands of employees still able to stalk Uber customers, say former security staff

Thousands of Uber employees are said to be still able to use ‘God view’ to track customers of the ride service in real time almost two years after the company claimed to have restricted access to the data. Employees of the company are said to be tracking both public figures and exes.

more…

Uber allowed to depose Alphabet CEO Larry Page as part of ongoing Waymo suit

This past Friday saw a flurry of developments in Waymo’s case against Uber, including the Alphabet company toning down its patent infringement claims to focus on trade secret theft. As part of the upcoming October trial, a magistrate judge has granted Uber the ability to depose Larry Page.

more…

Alphabet’s Waymo is pushing for its lawsuit against Uber to be played out publicly

A little over a month ago, Google‘s parent company Alphabet — or, more specifically, its Waymo subsidiary — filed a lawsuit against Uber, which allegedly stole key information with regard to its self-driving technology.

Given that, beyond the lawsuit itself, Uber’s reputation is at stake, the ride-hailing company has tried to deny the accusations and kept things as quiet as possible ever since, but the Mountain View giant doesn’t seem to be exactly on the same page…

more…

Uber Android app adding credit card profiles, allowing you to separate business & personal rides

If you use Uber for both business and work, it can be a pain handling the accounting, having to remember to claim the business rides back on expenses. But the service will soon allow you to register a second credit card for business use, and then simply tap your Personal or Business profile in the app to charge the appropriate card.

Look out for an update shortly, when you’ll find Profile in Settings.

Uber added AMBER alerts to its drivers’ app last month.

Via TNW

Uber is testing ‘Family Profiles’ feature for shared payment methods

Uber is beginning to test a new feature that will make it easier for family and other close-knit groups to share an Uber account. That means that your family could use a single credit card for Uber across several devices, making it easy for parents to pay for their kids or other family members, for example.

more…