HexBrain

Uber · Report #125488

Estimation of a Lower Bound on Number of Uber Drivers via Enumeration

Validstatus
$500bounty
2upvotes
24 Aug 2016disclosed

Summary

@ddworken discovered a way to estimate a lower bound on the number of Uber drivers via an endpoint with low entropy. Thanks for the report @ddworken!

Good summary from @Uber, just wanted to clarify that we are sticking to limited disclosure since this issue was only patched moving forward so not disclosing the exact details.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original