4 ms·

These are often found in log files when people get a bit to log happy. I've seen many smart developers accidentally log a request in an API that also happens t

• jacquesm 7y ago
  Even Google fell for that one recently.
  • NullPrefix 7y ago
    Didn't Facebook fell for it too?
    • EGreg 7y ago
      No. Never.
      • NullPrefix 7y ago
        Could "Never" be defined as a time frame from year 2012 to at least 2019 ? https://krebsonsecurity.com/2019/03/facebook-stored-hundreds-of-millions-of-user-passwords-in-plain-text-for-years/ https://krebsonsecurity.com/2019/03/facebook-stored-hundreds... https://www.theverge.com/2019/3/21/18275837/facebook-plain-text-password-storage-hundreds-millions-users https://www.theverge.com/2019/3/21/18275837/facebook-plain-t... https://arstechnica.com/information-technology/2019/03/facebook-developers-wrote-apps-that-stored-users-passwords-in-plaintext/ https://arstechnica.com/information-technology/2019/03/faceb... https://www.wired.com/story/facebook-passwords-plaintext-change-yours/ https://www.wired.com/story/facebook-passwords-plaintext-cha...
• service_bus 7y ago
  This is true, but the way the article is worded it makes it very much sound like the passwords were being stored cleartext.
• crtlaltdel 7y ago
  this is super common in my experience, along with checking creds into the repo
• heelix 7y ago
  I swear - our 'single sign on' that requires a new login on every single system just trains people to put in their username/password without thought....