This has got to be illegal.
This has got to be illegal.
>At least 50 to 60 people inside Uber knew about Greyball, and some had qualms about whether it was ethical or legal. Greyball was approved by Uber’s legal team, headed by Salle Yoo, the general counsel.
I (though not a lawyer) assume their reasoning was: "It's legal to use public sources to identify possible law enforcement agents, it's legal to deny services to them. Seems legit."
(Uber's real argument seems to be "it violates our terms of service for a government official to try to figure out if we're following the law")
a) exempting themselves from specific laws by EULA generally doesn't work,
b) you can block specific people from a service and even police have to leave when told (barring further e.g. probable cause), but police are under no obligation to honor a general "no police" policy.
It's legal, though, to kick someone off a service because you think they're a cop. (e.g. biker bars that kick people out on that basis)
It doesn't seem that different from Cloudflare et al throwing up CAPTCHAs and blocks when I browse through Tor. Uber was trying to prevent abuse. Until someone identifies themselves as a city official or Uber is put on notice that it is under investigation, I think they are well within their rights to do this.
A government official (or anyone, actually) trying to check for compliance with the law isn't doing anything illegal.
Uber may be within their rights because companies usually have wide latitude to refuse doing business with someone, although that will ultimately depend on what kind of violations they were trying to hide, how invasive their stalking of customers was etc.
Morally, though, this is just more of the shady shit that's been coming out day after day. How any investor would be willing to trust them with their money is beyond me. Considering how intransparent their financials are, I wouldn't be surprised if this ends in an Enron-style meltdown.
I don't think we can say "most" Tor traffic "is illegal" [1]. At the very least, we agree that some of it is legal. That means Cloudflare, a private company, is treating users differently based on its interests and its interpretation of the law.
> A government official (or anyone, actually) trying to check for compliance with the law isn't doing anything illegal
They probably aren't. Neither is Uber. They're just treating their users differently based on their interests and interpretation of the law.
Law enforcement has tough-as-nails methods at its disposal. It could subpoena, audit, intercept, sue, et cetera. The downside is those methods come with oversight and transparency requirements.
As Volkswagen discovered, in the United States this is called "criminal conspiracy" and "obstruction of justice."
Night and day. Volkswagen was falsifying data provided to the government at an identified testing facility. Uber is fuzzing data and refusing to provide services to certain customers who have not identified themselves as police, though may be*.
A city official cannot demand entry to private property without a warrant. Furthermore, one can eject someone from your place of business--again, provided they don't have a warrant. To get a warrant, investigators need probable cause. There are good reasons we limit the power of those seeking probable cause.
They also presumably did this not just in the US. Other countries have different interpretations of the extend of sovereignty over property, and maybe if an Uber is considered "private". I know, for example, that the police in Germany can demand entry to night clubs during public events without cause or warrant.
Usually. But I don't believe that is the case here. Uber was public about the fact that they were breaking Portland's taxi rules--they blogged to that extent. Prosecutors had enough evidence to get a subpoena and demand what they wanted. But the cops didn't do that. They chose to collect $5,000 fines from the drivers. That's their prerogative, but that upside comes with a cost.
> Other countries have different interpretations
That might be the case. I am only commenting with reference to American laws and customs.
Is there a legal requirement to make it easy for cops to use your service? Are they a protected class?
If I didn't want to sell donuts to the cops, I sure wouldn't tell them it's because they are cops. I would just be mysteriously out of donuts every time they come in.
As they are entitled to do. Uber saw damaging activity coming from burner phones. They blocked and/or modified the related services.
If the investigators had identified themselves to Uber and then Uber did this, that might be different (though law enforcement is not, for good reasons, a protected class). The investigators chose a quieter path and Uber reacted accordingly.
https://github.com/gtank/captcha-draft/blob/master/captcha-p...