掩盖个资外泄事件 Uber前安全长遭判2项罪名成立
文章来源: 中时电子报 于
- 新闻取自各大新闻媒体,新闻内容并不代表本网立场!
美国叫车服务业者优步(Uber)2016年间遭骇客窃取大量用户和驾驶个资。加州北区联邦地区法院陪审团今天裁定,Uber前安全长苏利文的妨碍司法和隐匿重罪两项罪名成立。
综合法新社和路透社报导,苏利文(Joseph
Sullivan)遭控在2016年Uber遭骇时选择隐瞒,不仅未向联邦贸易委员会(Federal Trade
Commission)通报非法入侵事件,还涉嫌以加密货币比特币支付骇客10万美元,要求对方销毁个资,并签下保密协议,承诺对此事三缄其口。
这起事件造成5700万名乘客及司机个资外泄,且在发生1年后,Uber才揭露自己遇骇。
根据刑事诉状,苏利文试图透过“安全漏洞回报奖励计划”(Bug Bounty
Program),汇款给骇客。这项计划旨在奖励开发人员,在不造成任何伤害的情况下,找出安全漏洞。
苏利文也遭控向Uber主管隐瞒讯息,这些主管原本可向联邦贸易委员会披露遭骇事件。接下来他可能遭判刑入狱。
苏利文于2015年4月至2017年11月担任Uber安全长。他曾是美国司法部电脑入侵及知识产权部门(Computer Hacking
and IP Unit)的助理检察官,也曾受雇于脸书(Facebook Inc.)、电子海湾公司(eBay
Inc.)和线上交易支付平台PayPal。
他也是前总统奥巴马任内联邦国家网络安全促进委员会(Commission on Enhancing National
Cybersecurity)的成员。
Uber在2014年发生类似的骇客入侵事件后,联邦贸易委员会一直在评估这家总部位于旧金山公司的资料安全性。
-->
`,
"script":[{"type":"text/javascript","src":"//widgets.outbrain.com/outbrain.js","async":"async"}]
}
, "gg_rightside": {
"html":`
`,
"script":[{"type":"text/javascript","src":"//widgets.outbrain.com/outbrain.js","async":"async"}]
}
, "gg_duturandom": {
"html":`
`,
"script":[]
}
, "gg_square": {
"html":`
`,
"script":[]
}
, "gg_topbanner": {
"html":`
`,
"script":[]
}
, "gg_middlesquare": {
"html":`
`,
"script":[]
}
, "gg_dutu": {
"html":`
`,
"script":[]
}
, "gg_botline": {
"html":``,
"script":[]
}
, "gg_dututop": {
"html":`
`,
"script":[]
}
, "gg_shipintop": {
"html":`
`,
"script":[]
}
, "gg_inContent": {
"html":`
`,
"script":[]
}
, "gg_shipinrandom": {
"html":``,
"script":[]
}
, "gg_sideSticky": {
"html":`
`,
"script":[]
}
, "gg_bottombanner": {
"html":`
`,
"script":[{"type":"text/javascript","src":"//widgets.outbrain.com/outbrain.js","async":"async"}]
}
, "gg_marquee": {
"html":`
`,
"script":[]
}
}
const adEnv={
"gg_header": {
"html":``,
"script":[{"type":"text/javascript","exec":` var googletag = googletag || {}; googletag.cmd = googletag.cmd || []; var pbjs = pbjs || {}; pbjs.que = pbjs.que || []; `},{"type":"text/javascript","src":"https://adncdnend.azureedge.net/adn-hb/adn.wnx2.js","async":""},{"type":"text/javascript","src":"https://adncdnend.azureedge.net/adn-video/WenxuecityPlayer.js","async":"async"}]
}
}
const wxcEnv = {
"base":{
"exe":[],
"src":[
{"src": "/news/js/recommendednews.js","defer":"true"},
{"src":"/js/wxcFunc.js","defer":"true"}
]
},
"func":{
"exe":[
//展示评论
'function showMoreComments(){let n = 1;for(let i=0;i
2){dom.hide();}}$("#showallcomment").show();$("#showlesscomment").hide();};',
],
"src":[
//图片,搜索,QR code
{"src": "/news/js/view.js?v=05132024"},
//计数器
{"src":"//count.wenxuecity.com/service/count/script/do.php?type=news&id=11878134&n=0&out=jsval","defer":"true"},
]
}
}
function wxcCode(){
wxcEnv.base.exe.forEach(x=>{
let tag = buildAdcode(x);
document.head.append(tag);
})
wxcEnv.base.src.forEach(src => {
let tag = buildSrc(src)
document.head.append(tag);
});
wxcEnv.func.exe.forEach(x=>{
let tag = buildAdcode(x);
document.body.append(tag);
})
wxcEnv.func.src.forEach(src => {
let tag = buildSrc(src)
document.body.append(tag);
});
}
function adcode(){
let adkey = Object.keys(ads);
adkey.forEach(x=>{
let code = ads[x].html;
let div = document.getElementById(x);
if(div)div.innerHTML = code;
ads[x].script.forEach(s=>{
if(Object.keys(s).indexOf('src')===-1){
let tag = buildAdcode(s.exec);
document.body.append(tag);
}else{
let tag = buildSrc(s);
document.body.append(tag);
}
})
})
}
function baseCode(){
let baseKeys = Object.keys(adEnv);
baseKeys.forEach(x=>{
adEnv[x].script.forEach(s=>{
if(Object.keys(s).indexOf('src')===-1){
let tag = buildAdcode(s.exec);
document.head.append(tag);
}else{
let tag = buildSrc(s);
document.head.append(tag);
}
})
})
}
function buildAdcode(script){
let tag = document.createElement('script');
tag.innerHTML = script;
return tag;
}
function buildSrc(obj){
let keys = Object.keys(obj);
let tag = document.createElement("script");
keys.forEach(key=>{
tag.setAttribute(key, obj[key]);
})
return tag ;
}