3 ms·
If these principles are followed throughout the engineering org, can you explain how the recent reports of password and other information being stored in plaint
by talonx 7y ago
If these principles are followed throughout the engineering org, can you explain how the recent reports of password and other information being stored in plaintext happened? That is Security 101.
Genuinely curious.
- jeremyjh 7y agoI don't work at Facebook but my understanding is passwords were not stored in a database in plaintext, but there was verbose logging of web requests that were not sanitized. Sanitizing logs is definitely common sense and a basic security practice, but it can be difficult to be sure you are doing it adequately without good tooling to monitor it.
- a13n 7y agoNo idea haven't worked at Facebook for over four years