News for hackers. Stuff that matters.
Re:Meta fined $102M for storing passwords in plain text by omnimus on Saturday September 28, 2024 @07:00AM (#41679420)
“lots” not really as most companies want accesss to european market.

Also no you dont need to consult lawyers when writing code. You just dont track and save data and do questionable stuff with it. Saving passwords in logs is surely security issue first before its GDPR issue.

Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:11AM (#41679474)
> “lots” not really as most companies want accesss to european market.

Plenty of foreign newspapers block the EU from accessing their sites. The EU is not that a big market.

Re:Meta fined $102M for storing passwords in plain text by mdhb on Saturday September 28, 2024 @07:21AM (#41679521)
Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:42AM (#41679600)
How so? Your source shows that Asia + North America make up like 67% of global GPD.
Re:Meta fined $102M for storing passwords in plain text by mdhb on Saturday September 28, 2024 @01:51PM (#41681806)
The $18349 Billion GDP. What did you think I was referring to? Were you trying to be daft?
Re:Meta fined $102M for storing passwords in plain text by JCharante on Sunday September 29, 2024 @12:33AM (#41684935)
I said the EU is not that big of a market. It’s less than 1/3 of the global GDP. We seem to have different definitions of a big market.
Re:Meta fined $102M for storing passwords in plain text by mdhb on Sunday September 29, 2024 @02:09AM (#41685269)
Clearly but whatever definition you have that doesn’t include $18349 Billion is ridiculous
Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:10AM (#41679465)
yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Do I think we should punish companies for storing passwords in plaintext? Yes. Would I expect that a bug and devs untrained in GDPR best practices could lead to fines? No.

Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance. This was just passwords which most sites have, not something like PCI DSS stuff

Re:Meta fined $102M for storing passwords in plain text by nolok on Saturday September 28, 2024 @02:00PM (#41681882)
> yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Which is exactly why companies don't care, which is why this regulation was made and those fines decided.

> Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance.

You're not fined for a mistake, you're fined for a mistake AND that mistake huer the customer more than you AND you don't disclose it swiflty to him.

Re:Meta fined $102M for storing passwords in plain text by gm3dmo on Sunday October 06, 2024 @05:34PM (#41760525)
>yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

The penalties are based on percentage of turnover.