News for hackers. Stuff that matters.

A comment on Facebook Expects to Be Fined Up to $5B by FTC Over Privacy Issues. Parent comment

Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by jyrkesh on Wednesday April 24, 2019 @07:09PM (#19743427)
There might not have been a large-scale public data dump of passwords, but if 20,000[1] employees had access to logs with plaintext passwords, there is no guarantee I could ever accept that zero of them read or used customer passwords for personal purposes.

What's to stop a malicious ex-lover from grabbing a FB password and reading that person's private messages? If FB didn't even know there were passwords in plaintext, they very likely weren't auditing log access as much as was needed.

[1] https://www.theverge.com/2019/3/21/18275837/facebook-plain-t...

[ Parent | on HN ]
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by UncleMeat on Wednesday April 24, 2019 @07:46PM (#19743645)
Malicious insiders don't need your password to access your data. If you are concerned about malicious insiders then plaintext password logs don't matter.
[ Parent | on HN ]
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by beat on Thursday April 25, 2019 @08:59AM (#19747586)
I'm more concerned with plaintext passwords because most people use the same passwords over and over, so if you can break one system, you can break others.
[ Parent | on HN ]
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by _jal on Thursday April 25, 2019 @01:06AM (#19745157)
With FB's dataset and employee count, it would be insane not to be concerned with malicious insiders. Even if you completely discount morality and honesty where Facebook is concerned (and I do), there's substantial liability risk, PR risk, regulatory risk and commercial paranoia, which I suspect was likely their biggest concern, at least until recently.
[ Parent | on HN ]