Here’s How Hackers Used Airbnb To Rob Hosts’ Homes

Nurphoto / Getty Images

Airbnb says that its rating and review system builds trust between people and accomplishes the impossible — convincing people to let complete strangers sleep in their homes.

Well, some scammers found a way to use Airbnb’s ratings system to rob people. Airbnb calls the problem “account takeovers,” which, it said in a blog post published Thursday, has been “receiving increased attention” lately. But the company said it has been working for months on new security solutions.

Basically, account takeovers are when people hack into the profiles of guests who have built up good ratings and reviews on Airbnb, and use those accounts — with some minor tweaks to the personal details — to book stays in the homes of hosts that they then burglarize. The BBC spoke to at least three people who said they’ve been robbed this way.

Takeovers can also work in the reverse — hackers take over host profiles, and try to get unwitting guests to send them money.

“Our model is effective at stopping most account takeovers, but unfortunately there have been some incidents where hosts and guests have suffered. This is not acceptable to us, therefore we’re working around the clock to do everything we can to improve our detection and prevention method,” Airbnb CTO Nathan Blecharczyk wrote in the blog post.

Blecharczyk said the top three ways accounts get hacked is through malware, phishing, and password dumps. Going forward, users will get text-message notifications if details on their profile are changed, and they will be required to use two-factor authentication when logging in to Airbnb on a device that hasn’t previously been used to access their account.

Airbnb offers hosts a $1 million insurance policy, and a spokesperson said hosts whose homes are burgled via account takeovers are reimbursed by the company.

Quelle: <a href="Here’s How Hackers Used Airbnb To Rob Hosts’ Homes“>BuzzFeed

Blue Apron Has Been Fined For Safety Violations. Again.

Bree Fowler / AP

A little over a year after being cited for a “serious” safety violation, the $3 billion meal-kit delivery startup Blue Apron again failed to comply with regulations.

The first “serious” violation for Blue Apron’s Richmond, California facility came after an August 2015 inspection; per California Division of Occupational Safety and Health (CalOSHA) standards, a “serious” violation means the inspector thought “death or serious physical harm” was a “realistic possibility.” For that violation alone, Blue Apron was levied a proposed penalty of $9,000, which it contested.

That citation was surfaced in an October 2016 BuzzFeed News investigation into the history of health and safety violations at the Richmond facility. At the time, the company said it was committed to “creating the best possible workplace experience for all of our employees” and had “learned from the operational challenges during its early days in Richmond.”

But BuzzFeed News has learned that in September 2016, a little more than a year after the 2015 inspection, following an anonymous complaint, CalOSHA inspected Blue Apron’s facility again, and the company was once again cited for a “serious” violation. Inspectors found that Blue Apron had violated the same exact statute for which it was previously cited — a failure to install emergency shower stations near forklift battery charging stations — and proposed a penalty of $3,825. (The findings of the inspection were not made public until February 2017.)

In addition to the “serious” violation, Blue Apron’s California facility was also cited for an additional five safety violations; the total proposed penalty is $6,580.

In a statement emailed to BuzzFeed News on Wednesday, Blue Apron said it “promptly addressed” the initial 2015 citation, and that the new citation is in regards to a new forklift battery charging station that was constructed during an expansion of the facility. When CalOSHA inspected the Blue Apron facility post-expansion in September 2016, inspectors found that while Blue Apron had installed an eyewash station near the new charging station, they had not installed an emergency shower.

“We promptly installed a shower at this location as well to address their concern,” said a Blue Apron spokesperson via email. “However, we believe both citations were issued in error, and Cal/OSHA is currently reviewing them.” Specifically, Blue Apron is arguing that, because the company doesn’t change out forklift batteries at the charging stations in question, per CalOSHA’s standards, the emergency showers were not necessary.

The appeal for the 2016 citation is set for July 2017; the appeal for the 2015 citation is currently scheduled for May.

Blue Apron has also recently run into trouble with health and safety regulators outside California. According to a public OSHA database, Blue Apron’s Jersey City, New Jersey facility — which has been plagued by some of the same internal violence among employees as its California counterpart — was most recently inspected in December 2016, following an anonymous complaint. According to its website, OSHA found one violation at that time, and issued a proposed penalty of $2,000. Blue Apron says it’s not contesting the citation in New Jersey, but added that it was actually fined $1,000; the higher fine listed online, it says, reflects a paperwork error.

Blue Apron is reportedly hiring bankers in preparation to go public, despite reports in December that its IPO would be delayed. The company also recently acquired an organic cattle ranch in California, in hopes of owning and controlling more aspects its meal-kit production system.

Quelle: <a href="Blue Apron Has Been Fined For Safety Violations. Again.“>BuzzFeed