News for hackers. Stuff that matters.

A comment on Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years. Parent comment

Re:Facebook Stored Hundreds of Millions of User Passwords in... by nuclear_eclipse on Thursday March 21, 2019 @03:35PM (#19456387)
That doesn't necessarily help when logs are sampled. Eg, for high volume services or endpoints, only 1 in X,000 requests might be logged, and you have no theoretical guarantee that you would ever catch any one individual request in your logs.
[ Parent | on HN ]
Re:Facebook Stored Hundreds of Millions of User Passwords in... by x38iq84n on Thursday March 21, 2019 @05:41PM (#19457647)
Good point, though I consider that as just an implementation detail. Bypass sampling for designated system accounts and you will be able to see if systems leak cleartext secrets into logs or not.
[ Parent | on HN ]