For Years, Hundreds of Millions of Facebook Users Had Their Account Passwords Stored in Plain Text and Searchable By Thousands of Facebook Employees

'Hundreds of millions of Facebook users had their account passwords
stored in plain text and searchable by thousands of Facebook employees
-- in some cases going back to 2012, KrebsOnSecurity reported
Thursday. From the report:

Facebook says an ongoing investigation has so far found no indication
that employees have abused access to this data. Facebook is probing
the causes of a series of security failures in which employees built
applications that logged unencrypted password data for Facebook users
and stored it in plain text on internal company servers. That's
according to a senior Facebook employee who is familiar with the
investigation and who spoke on condition of anonymity because they
were not authorized to speak to the press. The Facebook source said
the investigation so far indicates between 200 million and 600 million
Facebook users may have had their account passwords stored in plain
text and searchable by more than 20,000 Facebook employees. The source
said Facebook is still trying to determine how many passwords were
exposed and for how long, but so far the inquiry has uncovered
archives with plain text user passwords in them dating back to 2012.'

-- source: https://yro.slashdot.org/story/19/03/21/1525243

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug