Show all trips from Ashburn
Show all trips from United States

Blablacar login

Case study: BlaBlaCar prevents account takeovers with DataDome

Automated blocking of impersonator bots

Efficient protection of data and users

Full visibility of bot traffic

Summary

The challenge:
Account takeovers

The solution:
DataDome protects websites and APIs

Goals achieved:

Automated blocking of impersonator bots
Efficient protection of data and users
Full visibility of bot traffic

With 40 million members, BlaBlaCar is currently the largest community of carpoolers in the world. The web and mobile platform connects drivers offering seats in their cars with passengers who want to make the same journey.

But this very rich database is also a prime target for players seeking to capture the users’ personal data for criminal purposes.

The problem: account takeover

After observing a number of unusual and inexplicable load spikes, the BlaBlaCar team discovered that they were due to bots which were trying to take control of user accounts on the site. They therefore began to closely observe the behavior of these bots.

Account takeover attacks, carried out by “impersonator” type bots, usually exploit login-password databases that have been stolen from other sites.

In order to try to take control of user accounts, these bots use the “brute force” technique: they access the login forms and very rapidly test all the stolen login-password combinations, which are often in the hundreds of thousands. Since many people tend to use the same login-password combination on multiple sites, the bots’ success rate can attain 8%.

But what, exactly, are they trying to achieve?

In account takeover attacks, bots have a dual objective: to collect as much personal data as possible (name, first name, postal address and mail, telephone, etc.) but also to exploit various means of payment linked to the accounts.

Carding thus consists of using stolen card numbers to make purchases via spoofed accounts. Hackers also try to retrieve coupons and credit coupons which they can use or resell.

By closely observing their behavior, BlaBlaCar discovered that certain bots had industrialized a process to modify the transfers between community members, in order to divert them for their own benefit.

Luckily, BlaBlaCar managed to foil these attacks before any harm was done to its customers. However, protection against such threats required constant monitoring and daily updates, and the BlaBlaCar team soon realized that it was more efficient to use a dedicated solution. The choice fell on DataDome.

DataDome: protection against account takeover

BlaBlaCar’s revenue comes primarily from its website. The implementation and installation of the DataDome module was therefore carefully monitored, in order to ensure that it didn’t penalize site stability or the user experience.

The main concern was performance. Since DataDome is validating incoming traffic, the module positions itself, in technical terms, at a crucial point for any website. BlaBlaCar’s question was whether DataDome’s infrastructure could handle all its traffic.

The team managed the ramp-up perfectly, especially since the chosen architecture is designed in such a way that DataDome is not a Single Point of Failure. It’s fundamental for us to be absolutely certain that an eventual DataDome failure will not block traffic to our site.

Francis Nappez, cofounder and CTO of the carpooling site

Regarding latency, a key element for the user experience, “it’s extremely well managed on the DataDome side“, Francis Nappez continues. “If there’s any degradation, it is largely within acceptable margins (a few milliseconds), especially given the value we get in return from the service.”

During the implementation process, it was also necessary to ensure that no personal information related to users was sent to DataDome as part of the information exchange on incoming BlaBlaCar traffic.

Setting up DataDome is an insurance. You can live without one, but you need to know that if you do, you are putting yourself at risk.

Francis Nappez, CTO of BlaBlaCar

Result: protection against account takeovers

Since the DataDome solution was activated, BlaBlaCar’s user accounts have been protected without any need for maintenance. DataDome’s technology, which is based on a machine learning process and pools data from all the protected sites, makes it possible to detect both known bots and new behaviors. It therefore doesn’t require any daily intervention on the part of BlaBlaCar’s technical team.

For Francis Nappez, the main challenge in a secure environment is to remain alert. In this respect, the daily report sent by the DataDome service, which presents detailed data and indicators on bot traffic to BlaBlaCar, is very useful.

“To see every day the magnitude of the threat, and to verify that it is, in this way, identified and countered, is reassuring,” Francis Nappez observes.

However, BlaBlaCar continues to closely monitor the integrity of account credentials on the site, as well as the nature of bots crawling the site, thanks to the DataDome Dashboard, which provides a real-time overview of all bot traffic with detailed identification of their operators.

With DataDome, we benefit from the collective intelligence accumulated on all the sites protected by the technology, and this delivers great value in terms of guaranteed security.

Francis Nappez, CTO of BlaBlaCar

1663

Haven't found a ride? No problem!
Find more drivers at Taxiuber7.com

This map shows real-time traffic
and vehicle speed

If any driver cancel the trip please send us ([email protected]) the phone number of that driver.

📝 Questions about trip

Coronavirus Covid-19 Online map 2023
Contact Us: [email protected]

Taxi Blablacar login carpooling login ridesharing vanpooling login 2023 Car Blablacar login carpooling login ridesharing vanpooling login 2023 taksi in Blablacar login carpooling login ridesharing vanpooling login 2023 blablacar United States. You can find bla bla car services in Ashburn - website of carpooling taxi Uber 7 seater places

order automobile avto auto at Blablacar login carpooling login ridesharing vanpooling login 2023, cheaper than a taxi and cheaper than a uber

order vehicle at Blablacar login carpooling login ridesharing vanpooling login 2023 taxi near me phone number United States. Use search button on page to find all bla bla car United States alternative trips. Bla bla car United States, Bla bla car Blablacar login carpooling login ridesharing vanpooling login you can find real drivers on our website which offered their trips in this website. The blablacar analog is blataxi.com.
Free carpooling website is blataxi.com
blataxi.com is the Ride Finder for YOUR FREE CARPOOLS in Europe, Carpools Australia and Ride Share America: Carpool United States, Carsharing Canada and Carpooling Argentina. Go Free Carpooling Array in Europe, from lift Array car share in Uk to rides 'Array passaggi ' Italy, Array Covoiturage Libre to 'Mitfahr', 'Array Besser Mitfahrzentrale' Germany, 'Compartir Coche Array para Viajar' Spain to 'Array Przejazdi' Poland. 'Prevoz Array', 'Prijevozi' From Slovenia To Croatia. ' Spolujízda autem Array' from Czech Republic to Hungary 'Array telekocsi'. Find co-seats that share your ride by free Array hitch hike carpooling. Catch a lift Array or pop a ride to find a ride sharing buzz. Open rideshare Array with blataxi.com now, find cars Array and new carpool friends in. This is the Zero Commission Carpooling Alternative to Array bla bla car . Ride Share Redlands compartir coche Hemet Carpooling Mitfahrgelegenheit Redlands Array bla bla car Hemet From To Redlands. share the car Redlands share car Hemet Free Site with Travel Information Service. Попутчики из Ashburn в United States. covoiturage Ashburn covoiturage United States blablacar connexion blabla United States blablacar covoiturage réservation mitfahrgelegenheit blablacar United States fahrgemeinschaft Ashburn amovens blablacar украина.