It’s no secret that ride-sharing companies Uber and Lyft have enjoyed a spirited rivalry in recent years. Over the weekend, a security researcher inserted himself into the crosshairs of the two ride-hailing services by exploiting a vulnerability in Uber’s petition website that allowed him to showcase and redirect visitors to Lyft’s homepage, while also changing the content of some petitions. Now he’s warning the company – and others like it – to take precautions when using petition and contest websites, as they might prove to be a welcome mat for malevolent hackers. [More]
