Monday January 20, 2020
Home India Indian Techie...

Indian Techie Discovers a Bug in Uber, Bags Rs 4.6 Lakh Reward

He has also participated in bug bounties for GitHub, Nokia, Soundcloud, Dropbox and PayPal in the past

0
//
Uber, bengaluru
Photo shows an exterior view of the headquarters of Uber in San Francisco. (VOA)

Ride-hailing giant Uber that recently fixed a hacking bug found by Bengaluru-based cybersecurity researcher Anand Prakash which allowed hackers to log into anyone’s Uber account, and paid him $6,500 (nearly Rs 4.6 lakh) as reward.

The bug was an account-takeover-vulnerability on Uber that allowed attackers to take over any other user’s Uber account, including those of partners and Uber Eats users, inc42 reported.

As per media report, the bug was present in the API request function of the Uber app.

According to Uber, the bug was immediately fixed through the company’s bug bounty programme. It also said that over $2 million was paid to more than 600 researchers around the world, including Indian researchers.

Prakash had earlier removed a bug in Uber, by taking advantage of which anyone could travel for free for a lifetime in an Uber cab.

He started his career as a security engineer in Flipkart in 2014.

Uber app.

In 2016, he founded AppSecure, a cyber security startup.

Prakash has been featured in the Forbes’ “30 under 30 Asia” list.

In 2015, Facebook awarded him $15,000 as bounty for logging in without an account.

A graduate in computer science from Vellore Institute of Technology, Chennai, he also received $5,000 from Uber for booking a free ride and $4,700 from Tinder.

Also Read: ‘Made In Senegal’ Drones Made With Broken Refrigerators, With Blacksmith’s Help

Prakash has worked with the Bengaluru-based foodtech startup Freshmenu to make their platform secure.

He has also participated in bug bounties for GitHub, Nokia, Soundcloud, Dropbox and PayPal in the past. (IANS)

Next Story

Microsoft Works To Fix Security Bug Issue in Internet Explorer

The vulnerability was found in how Internet Explorer handles memory

0
Microsoft
Overall, Microsoft said all supported versions of Windows are affected by the flaw, including Windows 7, which after this week will no longer receive security updates. Pixabay

 Microsoft has confirmed a security flaw affecting Internet Explorer is currently being used by hackers and it is working on a fix, to be released at a later date.

The vulnerability was first reported by US Homeland Security on Friday evening, although the issue is not limited to American devices. Overall, Microsoft said all supported versions of Windows are affected by the flaw, including Windows 7, which after this week will no longer receive security updates.

The vulnerability was found in how Internet Explorer handles memory. An attacker could use the flaw to remotely run malicious code on an affected computer, such as tricking a user into opening a malicious website from a search query or a link sent by email, TechCrunch reported recently.

“The company is only aware of limited targeted attacks for which it is already working on a fix,” the report quoted a Microsoft spokesperson. The tech giant assigned the bug with a common vulnerability identifier, CVE-2020-0674, but specific details of the bug have yet to be released.

Qihoo 360, a China-based security research team helped Microsoft in finding this flaw and it is believed to be a similar vulnerability as one disclosed by Mozilla, the maker of the Firefox browser.

As per report, neither Qihoo, Microsoft, nor Mozilla said how attackers were exploiting the bug, who the attackers were, or who was being targeted. Microsoft assigned the bug with a common vulnerability identifier, CVE-2020-0674, but specific details of the bug have yet to be released.

Microsoft
Microsoft has confirmed a security flaw affecting Internet Explorer is currently being used by hackers and it is working on a fix, to be released at a later date. Pixabay

Additionally, according to information gathered by PreciseSecurity.com, Microsoft Office products were the most commonly exploited by cybercriminals around the world and nearly 73 per cent of cyber exploits were performed in MS Office products in the third quarter of 2019.

ALSO READ: Tesla Owners Unintentionally Buy Software Updates, Face Troubles in Getting Refunds

MS Office products were followed by Browsers with 13.47 per cent of the total number of exploits by cybercriminals, Android with 9.09 per cent, Java with 2.36 per cent, Adobe Flash with 1.57 per cent and PDF with 0.66 per cent. (IANS)