Uber Investigating Breach of Its Computer Systems

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • Appwrite - The Open Source Firebase alternative introduces iOS support
  • SonarQube - Static code analysis for 29 languages.
  • InfluxDB - Access the most powerful time series database as a service
  • tpm-fido

    A WebAuthn/U2F token protected by a TPM (Go/Linux)

    If you have a Linux PC with a TPM, you can use https://github.com/psanford/tpm-fido to create and "plug in" a virtual USB WebAuthn key whose secret is irretrievably stored in the machine's TPM. This effectively asserts that your specific machine is being used to enter a given site. However, it's important to remember it doesn't necessarily verify that *you're* present, or even if *anyone* is present at all, since the presence check is done via a software dialog and can be pwned along with the rest of the system.

  • santa

    A binary authorization system for macOS

    > Infostealers for Mac are a thing (Uber is a mac heavy shop I hear)

    Block unknown executables on company machines. Google developed Santa to protect themselves: https://github.com/google/santa

    > and that's all it takes to steal cookies and tokens post-mfa,

    Make post-MFA cookies and tokens short-lived. Require MFA re-authentication at least daily.

    > or why even bother with that, if you're running code just make it a reverse shell.

    All outbound connections should be strictly monitored, especially from production servers, which should have no ability to make outbound connections. With modern dependency management, that's harder for build servers, but still doable.

  • Appwrite

    Appwrite - The Open Source Firebase alternative introduces iOS support. Appwrite is an open source backend server that helps you build native iOS applications much faster with realtime APIs for authentication, databases, files storage, cloud functions and much more!

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts