Maybe Uber should implement the necessary rate limiting.
They did. Since it was a non public API he was abusing they just rate limited him to zero.
I feel that I should keep it up just for reference and educational purposes. This was in no way an attack, but a mere hack that was created in 24 hours. It was not intended to be damaging to the service, although I do take responsibility that it was.