GitHub ordered to hand over access logs to Uber

[InfoSec News <alerts () infosecnews org>]

http://www.theregister.co.uk/2015/03/25/github_ordered_to_hand_over_user_data_to_uber/

By Kieren McCarthy
The Register
25 Mar 2015

GitHub has been ordered to hand over records on some of its users to 
taxi-booking app Uber after unsuccessfully challenging a subpoena.

Last month, Uber announced its driver database had been hacked in May 
2014, but it had only noticed in September of that year. Uber discovered 
that a supposedly secret database access key had somehow ended up in a 
couple of Gists in a public area of GitHub. It's alleged this key was 
spotted by miscreants who used the key to delve into Uber's internal 
database of driver names and license plates.

Uber asked GitHub to hand over the web access logs for the two Gist pages 
for the May-September period.

GitHub refused, and so on 27 February this year, Uber created a John Doe 
lawsuit in order to subpoena GitHub to hand over the logs. Earlier this 
month, GitHub challenged the subpoena in a San Francisco court but lost, 
with the judge late last week giving GitHub 30 days to comply.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/