3 ms·
How is this in any way better or more excusable? Calling it a 'minor oversight' could also apply to the DB being in plaintext. Storing passwords in a plaintext
by zrobotics 8y ago
How is this in any way better or more excusable? Calling it a 'minor oversight' could also apply to the DB being in plaintext.
Storing passwords in a plaintext DB heppes in the same manner-a dev is lazy or ignorant of the security reprocussions. Which is what happened here; barring evidence this was done maliciously we can assume that this was accidental. But that doesn't make it any more excusable, since it should be clear that logs can also contain sensitive data that needs to be protected/anonymized.
Considering how selective FB is for hiring, I would hope we could expect a higher standard.
- glenneroo 8y agoNot to mention 200-600 million users had their passwords exposed for many years. That must be a massive trove of log files.