Facebook again - when will it end?

[cjsmith]

Passwords stored in plain text. Discovered in January, admitted yesterday.

https://www.aljazeera.com/news/2019/03/facebook-admits-storing-millions-passwords-encryption-190322061631080.html

I should ask them what mine was.

Comments

[britgeekgrrl]

Thank dog for 2FA. Still going to change mine again, though. Sigh.

[cjsmith]

For me, one pressing issue is the likelihood that many folk affected were using the same password elsewhere.

Does 2FA help with all the myriad “sign in using FB” sites out there? I never did any of that.

[britgeekgrrl]

That's a very good question. No idea.

[metahacker]

Ayup. And buried in there is how they are clearly keystroke-logging while people are entering passwords. (How else do passwords accidentally end up in logs?)

[cjsmith]

Given what we know of their ethics and what we know of their business model, the stunning shocking idea to me is the concept that anyone out there thinks they AREN’T keystroke logging. Are there truly such folk out there? ...don’t answer that; it’ll be depressing.