This is really inexcusable, but so much of what facebook has done or does is at this point I'm not surprised. I blocked all their IPs and do not have an account

This is really inexcusable, but so much of what facebook has done or does is at this point I'm not surprised. I blocked all their IPs and do not have an account. If i had to guess, it was probably legacy code that causes this. Mark Z. started this with raw PHP, if he had access to or had use an framework, they would have provided salted passwords for free. (it is basically impossible to do this in django, rails, etc). That does not make it Ok since they have 1000s of engineers are qualified to fix it, but they probably have/had higher priorities, clearly security is not one of them