I just spent an hour as a passenger in an UberX driven by someone completely anonymous (with potentially no security screening/background check). They somehow managed to upload a stock photo of a generic hand instead of a profile of their face. This is non-trivial breach of Uber's system because it meant it was impossible for me to know if the person driving the car was the same as the person who applied for this Uber Driver account. This is not supposed to happen!

Checkout a photo from my Uber App: http://imgur.com/XTINSpD.png and compare to this stock-photo: http://www.shutterstock.com/pic-201949108/stock-photo.html

There is a vulnerability (or at the very least, lax policies/insufficient redundant checks in place) in Uber's profile pic screening system that allows unscreened drivers to potentially pickup passengers. I hope they get to the bottom of this soon.

I've been in touch with Uber's security team who did take the issue seriously and they agreed with my basic conclusion (and confirmed that humans normally screen all profile pics) so I hope there isn't a technical vulnerability enabling a photo to be swapped after the manual-check has been done.