←Back
Uber and Lyft unintentionally sent gig workers’ SSN numbers to Meta and
TikTok, new research uncovers
https://news.northeastern.edu/2024/11/15/uber-privacy-social-security...
########################################################################

|u/Is12345aweakpassword - 1 day
|
|Incoming $25 fine   That’ll teach em!


  |u/TheRageDragon - 1 day
  |
  |No that's your cut of the class action settlement if you're lucky.


    |u/diablosinmusica - 1 day
    |
    |That will take 8 years in court.


    |u/joseph4th - 1 day
    |
    |More like a dollar and 25 cents.  Oh, and a coupon.


  |u/Sprinkle_Puff - 1 day
  |
  |I can’t wait for my payout of .07 cents!!


|u/throw-away_867-5309 - 1 day
|
|"unintentionally" probably means "sold and then got caught"


  |u/muchaschicas - 1 day
  |
  |Unintentionally is certainly doing Olympic level heavy lifting.


  |u/zaphodp3 - 1 day
  |
  |Did you read the article? Apparently Meta’s tracking pixels collect
  |form data on any website that adds their tracking (almost everyone
  |adds them btw). In this case it turned out a private form wasn’t
  |configured correctly by Uber to be private and so the Meta pixels read
  |those forms too. Seems more like human error than malice to me because
  |bugs like that are incredibly common


    |u/ScreamoPhilips - 1 day
    |
    |The more important questions are - what have Meta and TikTok done
    |with this data, and what other sites are vulnerable to this mistake?


      |u/Alan_Shutko - 1 day
      |
      |Honestly, probably nothing. So many websites use their tracking
      |systems and there's such a volume of data coming in they probably
      |didn't even notice it was there.   As for what other sites are
      |vulnerable to this mistake? Seems like I hear about one big site
      |doing this a month or so, and probably thousands we don't hear
      |about.


        |u/ScreamoPhilips - 1 day
        |
        |>they probably didn't even notice it was there    Do we know
        |that? Did anyone else have access to the data?


          |u/zaphodp3 - 1 day
          |
          |I really don’t know how useful Uber driver ssns are to meta.
          |It’s what a few hundred thousand people? Compared to the
          |billions of users they have. If it was the SSNs of a more
          |affluent group of people, maybe.


    |u/_CMDR_ - 1 day
    |
    |There is a browser extension that nullifies Facebook’s tracking
    |pixels, highly recommend.


      |u/ScreamoPhilips - 1 day
      |
      |>There is a browser extension that    What is it called? What
      |browser?


        |u/helalla - 1 day
        |
        |Could be 'facebook container' cus thats the one i know


        |u/_CMDR_ - 1 day
        |
        |Facebook container. In Firefox. Highly recommend getting away
        |from Chrome due to it being basically a data mine for
        |Alphabet/Google.


          |u/VoilaVoilaWashington - 1 day
          |
          |I use Chrome for one thing only - Facebook. With a fake name.
          |Mostly for Marketplace and such.   I figure they can both have
          |all the data from there.


        |u/oeynhausener - 44 minutes
        |
        |Pretty sure you can use Ublock Origin to achieve that on most
        |browsers (mobile included), but it may require checking some
        |boxes in the settings


    |u/Vabla - 1 day
    |
    |> collect form data on any website  That is a lot of focused effort
    |for a "bug".


    |u/Mawngee - 1 day
    |
    |Error by Uber/Lyft, malice by meta. 


  |u/AModeratelyFunnyGuy - 1 day
  |
  |Nope, but nice guess!


|u/4-Vektor - 1 day
|
|This is one of the reasons why I find the 800 million Euro fine for Meta
|by the EU is totally appropriate. Otherwise these data hoarders won’t
|ever start to comply with privacy related laws.


  |u/Spydartalkstocat - 1 day
  |
  |Fines should start at 10% of gross revenue. Otherwise it's just a cost
  |of doing business. 800 million is less than 1%.  For comparison it
  |would be someone making $100,000 a year being fined $590. It's
  |miniscule and pointless. It's a rounding error for a company that
  |generate $134 billion in 2023


    |u/DarkMarxSoul - 1 day
    |
    |100% agree. Flat fines are ridiculous.


    |u/VoilaVoilaWashington - 1 day
    |
    |> Fines should start at 10% of gross revenue.   It depends on what
    |it is. If a company is caught defrauding consumers of a few pennies
    |on a transaction here and there via a glitch, it should be a
    |multiple of the profit from that. If it was a $10 000 glitch, it
    |should be $100 000 (plus legal costs).   If it's a major and
    |deliberate breach across the whole organization, then it should be a
    |fine like you said plus mandatory termination of the seniormost
    |employees who knew about it.   "Facebook must terminate its CEO to
    |continue operating in the EU."


    |u/axonxorz - 1 day
    |
    |>Fines should start at 10% of gross revenue.  GDPR violations can be
    |as high as 4% of _global_ revenue. There's teeth there.


|u/ChuckyRocketson - 1 day
|
|And nobody questions why an employer is sending employee data to TikTok
|and Facebook?


  |u/2_short_2_shy - 1 day
  |
  |It's 2024.  Do you really question it?


  |u/DutchMuffin - 1 day
  |
  |you have to give Uber/Lyft your SSN when you sign up to drive. they
  |mistakenly didn't mark the SSN field as private, so it ended up in
  |Meta/TikTok's trackers. you'd know this if you read even half of the
  |article


|u/vm_linuz - 1 day
|
|"They're not our workers but we have their SSNs"


  |u/lllllllll0llllllllll - 1 day
  |
  |That’s how it works with independent contractors to get their 10-99s
  |if they don’t have an EIN.


|u/blueblurspeedspin - 1 day
|
|Nah it's a function of the system so it's intentional. You gotta save
|face with a half truth. Makes it easier to lie.


|u/batkave - 1 day
|
|"unintentionally" sure sure


|u/Herebec - 1 day
|
|Meta and Tiktok: Stop sending us these.. we already have them!


|u/BokehDude - 1 day
|
|Isn’t TikTok owned by a Chinese Company, that’s fucked up. 


|u/Monarc73 - 1 day
|
|"Unintentionally" seems a bit of a stretch.


|u/AutoModerator - 1 day
|
|Welcome to r/science! This is a heavily moderated subreddit in order to
|keep the discussion on science. However, we recognize that many people
|want to discuss how they feel the research relates to their own personal
|lives, so to give people a space to do that, **personal anecdotes are
|allowed as responses to this comment**. Any anecdotal comments elsewhere
|in the discussion will be removed and our [normal comment rules](
|https://www.reddit.com/r/science/wiki/rules#wiki_comment_rules) apply to
|all other comments.  ---  **Do you have an academic degree?** We can
|verify your credentials in order to assign user flair indicating your
|area of expertise. [Click here to
|apply](https://www.reddit.com/r/science/wiki/flair/).  ---  User:
|u/ChallengeAdept8759   Permalink:
|https://news.northeastern.edu/2024/11/15/uber-privacy-social-security-
|leak/  ---  *I am a bot, and this action was performed automatically.
|Please [contact the moderators of this
|subreddit](/message/compose/?to=/r/science) if you have any questions or
|concerns.*


|u/iusedtohavepowers - 1 day
|
|I wouldn't even be surprised if they sent blood samples, loose hairs and
|finger prints at this point.


|u/Humans_Suck- - 1 day
|
|So put their ceos in jail then


|u/MithandirsGhost - 1 day
|
|I sure wish all businesses were held to the standards and penalties as
|healthcare when it came to these kind of lapses.


|u/Various_Alfalfa_1078 - 1 day
|
|SSN Numbers! Same dickheads who probably write ATM Machine's. Numbers is
|redundant, it's SSN's! Don't get me started on people who think the past
|tense of text is texted! It's text.