News for hackers. Stuff that matters.

A comment on Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years. Parent comment

Re:Facebook Stored Hundreds of Millions of User Passwords in... by C4stor on Friday March 22, 2019 @06:40AM (#19461176)
> Some API requests include plaintext passwords (also fine and normal)

Wait, no ? How is that fine and normal ? It doesn't seem fine and normal all.

[ Parent | on HN ]
Re:Facebook Stored Hundreds of Millions of User Passwords in... by yogaboll on Friday March 22, 2019 @11:52AM (#19463727)
It's completely standard. If you encrypt the password in the browser, potential hackers have access to the encryption code which makes it useless.

Check the network tab in dev-tools when logging in to hn for example and you'll see your password in the request body :)

[ Parent | on HN ]