Delhi-based researcher discovers bug in Uber’s two-step authentication feature | HT Tech

Delhi-based researcher discovers bug in Uber’s two-step authentication feature

Uber reportedly said that the bug “is not a particularly severe issue”.

By: INDO ASIAN NEWS SERVICE
| Updated on: Jan 22 2018, 15:08 IST
The security bug allows attackers to bypass the two-factor authentication
The security bug allows attackers to bypass the two-factor authentication (AFP)

Ride-hailing app Uber has reportedly ignored a security flaw -- discovered by a New Delhi-based security researcher -- that can allow an attacker to hack into user accounts via bypassing its two-factor authentication feature.

"Two-factor authentication is a vital part of protecting online accounts that adds a second layer of security on top of your username and password -- which can be be stolen -- by sending a code by text message to your phone which only you would have access to," tech website ZDNet reported late on Sunday.

You may be interested in

MobilesTablets Laptops
7% OFF
Apple iPhone 15 Pro Max
  • Black Titanium
  • 8 GB RAM
  • 256 GB Storage
28% OFF
Samsung Galaxy S23 Ultra 5G
  • Green
  • 12 GB RAM
  • 256 GB Storage
Google Pixel 8 Pro
  • Obsidian
  • 12 GB RAM
  • 128 GB Storage
Apple iPhone 15 Plus
  • Black
  • 6 GB RAM
  • 128 GB Storage

"That two-factor code can be bypassed, making the second layer of security protection effectively useless," security researcher Karan Saini was quoted as saying by ZDNet.

Also read
Looking for a smartphone? To check mobile finder click here.

The security bug works by exploiting a weakness in how the app authenticates a user when they log in to the platform, thereby letting the user log in to an account and easily defeat the two-factor prompt, without entering the correct code.

Uber reportedly said the security bug "is not a particularly severe" issue.

"This isn't a particularly severe report and is likely expected behaviour," Rob Fletcher, Security Engineering Manager at Uber, said in his correspondence with Saini about the bug report.

Uber began testing two-factor authentication on its systems in 2015 but the company has yet to widely push the security feature to its users.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

First Published Date: 22 Jan, 15:08 IST
NEXT ARTICLE BEGINS