3 ms·

You can never ensure anything completely in engineering. Perfection is never the goal, but you can do a much better job than FB has here. You're talking in hyp

You can never ensure anything completely in engineering. Perfection is never the goal, but you can do a much better job than FB has here. You're talking in hypotheticals. Nowhere did I say "nothing ever goes wrong if you know what you're doing". What about the issue at hand? What's your opinion on passwords being logged on every request for years?

viraptor 8y ago
> This stuff is security 101. If you're logging requests then you need to ensure they don't contain sensitive info. If what you meant by that is "best effort" then sure. The issue at hand is only obvious now that we're reading about it. It could easily be missed depending on how their infrastructure works.
- EpicEng 8y ago
  >The issue at hand is only obvious now that we're reading about it No, it's not. It's completely obvious to anyone who has ever worked on a system which deals with sensitive information. It can only "easily be missed" if you're not auditing your code and logs. This stuff is basic to anyone who works in industries where the data is a liability.