> we found that some user passwords were being stored in a readable format within our internal data storage systems. Truly astounding to see this from a big te

> we found that some user passwords were being stored in a readable format within our internal data storage systems. Truly astounding to see this from a big tech company in 2019! > This caught our attention because our login systems are designed to mask passwords using techniques that make them unreadable. We have fixed these issues and as a precaution we will be notifying everyone whose passwords we have found were stored in this way. Why not reset their passwords and force them to change it? > To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them. That’s way too confident to state like that. Depending on how long this system was in place, there may not even be logs to query and verify if any kind of unauthorized access happened. > We estimate that we will notify hundreds of millions of Facebook Lite users, tens of millions of other Facebook users, and tens of thousands of Instagram users. Facebook Lite is a version of Facebook predominantly used by people in regions with lower connectivity. Hundreds of millions? More number of poorer people usually live in regions with lower connectivity. Why is that, coincidentally, poorer people always have to live with poorer security, poorer privacy protections, etc.? The difference in these numbers seems appalling...as if someone in FB decided that this segment doesn’t bring in enough ad money and so solutions for it could be developed with lesser effort and no oversight or reviews. There is no talk about security as a process in this post. Considering that Facebook hasn’t had a CISO for quite sometime, this is a damning finding.