« Dispute over analysis of school quality and home prices shows social science is hard | Main | Ramp metering magic »

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Adam Schwartz

Regarding the "persistent identity" I suspect this is done using something about the device that is persistent beyond the erasure of software. For example, the MAC address (it's similar to the IP address) of the network card is persistent and I believe unique. The operating system allows a developer to query that number for a variety of reasons. Obviously it also has the effect of uniquely identifying the device, even if wiped of software.

It may be that Uber isn't so much writing software that persists beyond wiping the device as it is possible for them to associate a certain device with having previously had an Uber account. When the device is wiped and the Uber app reinstalled, they can still query the hardware for that number and then re-associate that phone with a prior Uber account because of that persistent number.

Cody L. Custis

As other posters have pointed out, Uber did not all unique code to the device that is persistent when erased, instead, it accessed a unique device ID (such as the IMEI) in violation of Apple's Terms of Service.

Richard Penny

From experience I have found that I have to do some work to find out what is meant by "anonymized". For many it's "We deleted anything that directly identifies you e.g. names, address, SSN and phone number". Of course, as you explained above, it doesn't take much data to identify you. I prefer "confidentialised" myself.

Kaiser

AS, CC: Thanks for clarifying. Then, they probably had the ID saved in their databases which they could reference later, as opposed to having some persistent "code" (something like a cookie) installed on the phone itself.

RP: Yes, anonymized typically means no PII, which has a legal definition. However, the reporters clearly stated that Slice uses anonymized to mean no customer names. And yes, users can take actions themselves.

Ken

I expect the reason they didn't work something with credit cards is that it would break the card companies terms which would be even more fatal. It is possible that they don't even see the card details or are required not to record them in certain forms. I do have a little bit of sympathy for Uber, it is going to be difficult for any company running this type of business if once they detect a phone being used in a fraudulent way there is nothing they can do because the phone is simply rebirthed.On the other hand anyone who has done software development on Apple computers knows that their rules are not allowed to be broken whether or not there is a good reason.

Kaiser

Ken: Given that most second users of an iphone will be legitimate people and not scammers, how does this fraud detection method work?

Ken

Kaiser: I don't think the aim of Uber was to block every rebirth iPhone. The method would be simple. Extract the phone identifier using a method that wasn't officially allowed and associate that with the customer details. Then if the customer is blocked also block their phone which prevents them repeating the scam at least with that phone. It tends to make it poorer value for the driver to cheat. The problem is that Apple check for this type of unofficial access so Uber turned off the checks whenever the IP address was within the blocks allocated to Apple. Apple have realised that this might happen and will have just rerouted blocks of IP addresses from elsewhere.

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been posted. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Your Information

(Name is required. Email address will not be displayed with the comment.)

NEW BOOTCAMP



Link to Principal Analytics Prep

See our curriculum, instructors. Apply.
Business analytics and data visualization expert. Author and Speaker. Founder of Principal Analytics Prep, MS Applied Analytics at Columbia. See my full bio.

Next Events

Sep: 23-4 NBA Hackathon (judge), NYC

Oct: 4 Data Visualization Seminar w/ JMP, NYC

Oct: 11 Principal Analytics Prep Info Session, online

Oct: 12 NYPL Analytics Careers Talk, NYC

Past Events

See here

Future Courses (New York)

Summer: Statistical Reasoning & Numbersense, Principal Analytics Prep (4 weeks)

Summer: Applied Analytics Frameworks & Methods, Columbia (6 weeks)

Junk Charts Blog



Link to junkcharts

Graphics design by Amanda Lee

Search3

  • only in Big Data

Community