My Lessons from the Uber Case
summary
Convicted on two felony counts tied to a 2016 Uber breach and now appealing, the account lays out exactly what happened: a bug bounty engagement that led to paying and contracting with two young researchers, legal and communications loops that followed written playbooks, an FBI/Federal Trade Commission probe alleging obstruction and misprision of a felony, and a courtroom finding that spared prison this time but warns future executives won’t get the same mercy. Concrete takeaways: build a documented personal incident response plan, assign clear disclosure duties, and prepare crisis teams and D&O readiness.
AI-written summary · about
chapters (18)
- 0:00Intro
- 8:20My Background
- 15:50Regulation by Rulemaking
- 20:20What do I say to get the job
- 24:45How I got fired
- 26:20My arrest
- 29:20How to get to trial
- 32:10How I found the vulnerability
- 36:00The team
- 37:50The NDA
- 39:50The Reveal Email
- 46:30My Appeal
- 49:10Sentencing
- 53:55Crypto and AI
- 55:15Personal Incident Response Plan
- 55:55Hiring a PR Firm
- 57:15Being a Public Figure
- 57:40Preparing for a Crisis
related talks
17mYour security is arriving Uber and data
01h 00mFrom the Fry Pan to the Fire—Personal Liability for CISOs and InfoSec Pros
52mCISO Legal Risks and Liabilities
31mHear no Evil, See no Evil, Code no Evil ();
01h 00mWhat Was I Thinking?: Bungled Breach Responses
51mBug Bounty: Keeping Hacks Ethical in 2022
01mCISO Legal Risks And Liabilities
21mOn Trust: Stories from the Front Lines