Uber 'ignored' bug in its two-factor authentication, finds Delhi-based security researcher

By IANS | Updated Jan 22 2018
Uber 'ignored' bug in its two-factor authentication, finds Delhi-based security researcher
HIGHLIGHTS

The bug can allow an attacker to hack into a user's Uber account via bypassing its two-factor authentication feature.

Nokia 6.1 Plus 6GB RAM @10,999

16MP+5MP rear |16MP front facing camera,6GB RAM | 64GB ROM with 10% Instant Discount on Debit & Credit Cards.

Click here to know more

Ride-hailing app Uber has reportedly ignored a security flaw -- discovered by a New Delhi-based security researcher -- that can allow an attacker to hack into user accounts via bypassing its two-factor authentication feature.

"Two-factor authentication is a vital part of protecting online accounts that adds a second layer of security on top of your username and password -- which can be be stolen -- by sending a code by text message to your phone which only you would have access to," tech website ZDNet reported late on Sunday.

"That two-factor code can be bypassed, making the second layer of security protection effectively useless," security researcher Karan Saini was quoted as saying by ZDNet.

The security bug works by exploiting a weakness in how the app authenticates a user when they log in to the platform, thereby letting the user log in to an account and easily defeat the two-factor prompt, without entering the correct code. 

Uber reportedly said the security bug "is not a particularly severe" issue.

"This isn't a particularly severe report and is likely expected behaviour," Rob Fletcher, Security Engineering Manager at Uber, said in his correspondence with Saini about the bug report.

Uber began testing two-factor authentication on its systems in 2015 but the company has yet to widely push the security feature to its users.

Videos

CES 2018: BYTON Concept EV
logo
IANS

Indo-Asian News Service

Digit caters to the largest community of tech buyers, users and enthusiasts in India. The all new Digit in continues the legacy of Thinkdigit.com as one of the largest portals in India committed to technology users and buyers. Digit is also one of the most trusted names when it comes to technology reviews and buying advice and is home to the Digit Test Lab, India's most proficient center for testing and reviewing technology products.

We are about leadership-the 9.9 kind! Building a leading media company out of India.And,grooming new leaders for this promising industry.