Uber · Report #125488
Estimation of a Lower Bound on Number of Uber Drivers via Enumeration
Validstatus
$500bounty
2upvotes
24 Aug 2016disclosed
Summary
@ddworken discovered a way to estimate a lower bound on the number of Uber drivers via an endpoint with low entropy. Thanks for the report @ddworken!
Good summary from @Uber, just wanted to clarify that we are sticking to limited disclosure since this issue was only patched moving forward so not disclosing the exact details.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.