https://www.nytimes.com/2017/03/03/technology/uber-greyball-program-evade-authorities.html
Uber has for years engaged in a worldwide program to deceive authorities in markets where its low-cost ride-hailing service was being resisted by law enforcement, or in some instances, had been outright banned.
The program, which involves a tool called Greyball, uses data collected from Ubers app and other techniques to identify and circumvent officials. Uber used these to evade authorities in cities such as Paris, Boston and Las Vegas, and in countries including Australia, China, South Korea and Italy.
Ubers use of Greyball was recorded on video in late 2014, when Erich England, a code enforcement inspector for Portland, Ore., tried to catch an Uber car downtown as part of a sting operation against the company.
At the time, Uber had just started its ride-hailing service in Portland without seeking permission from the city, which later declared the service illegal. To build a case against the company, officers like Mr. England posed as riders, opening the Uber app to hail a car and watching as the miniature vehicles on the screen wound their way toward him.
But unknown to Mr. England and other authorities, some of the digital cars they saw in their Uber apps were never there at all. The Uber drivers they were able to hail also quickly canceled. That was because Uber had tagged Mr. England and his colleagues essentially Greyballing them as city officials based on data collected from its app and through other techniques. Uber then served up a fake version of its app that was populated with ghost cars, to evade capture.
When Uber moved into a new city, it appointed a general manager to lead the charge. The manager would try to spot enforcement officers using a set of technologies and techniques.
One method involved drawing a digital perimeter, or geofence, around authorities offices on a digital map of the city that Uber monitored. The company watched which people frequently opened and closed the app a process internally called eyeballing around that location, which signified that the user might be associated with city agencies.
Other techniques included looking at the users credit card information and whether that card was tied directly to an institution like a police credit union.
Enforcement officials involved in large-scale sting operations to catch Uber drivers also sometimes bought dozens of cellphones to create different accounts. To circumvent that tactic, Uber employees went to that citys local electronics stores to look up device numbers of the cheapest mobile phones on sale, which were often the ones bought by city officials, whose budgets were not sizable.
In all, there were at least a dozen or so signifiers in the VTOS program that Uber employees could use to assess whether users were new riders or very likely city officials.