> Security people see shit like this all the time At incompetent startups with no expertise in security > found a raw request log, which inevitably contained.

> Security people see shit like this all the time At incompetent startups with no expertise in security > found a raw request log, which inevitably contained... But the existence of the log is not inevitable! Is it so inreasonable to hold Facebook to a professional standard? > they disclosed the log in a way They snuck in an amendment to a previously posted press release while the press was in an uproar about the Mueller report! They handled this in about as clumsy and dishonest a way as possible. Knowing the executive team, I dare say that -is- as good as we can expect.