Meta fined $102M for storing passwords in plain text

Re:Meta fined $102M for storing passwords in plain text by JCharante on Saturday September 28, 2024 @07:10AM (#41679465)

yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Do I think we should punish companies for storing passwords in plaintext? Yes. Would I expect that a bug and devs untrained in GDPR best practices could lead to fines? No.

Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance. This was just passwords which most sites have, not something like PCI DSS stuff

[ Parent | on HN ]

Re:Meta fined $102M for storing passwords in plain text by nolok on Saturday September 28, 2024 @02:00PM (#41681882)

> yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

Which is exactly why companies don't care, which is why this regulation was made and those fines decided.

> Usually in software engineering you don't get your company fined for making terrible mistakes unless you're in a field like finance.

You're not fined for a mistake, you're fined for a mistake AND that mistake huer the customer more than you AND you don't disclose it swiflty to him.

[ Parent | on HN ]

Re:Meta fined $102M for storing passwords in plain text by gm3dmo on Sunday October 06, 2024 @05:34PM (#41760525)

>yes it's a security issue but you wouldn't "expect" to get fined millions of dollars.

The penalties are based on percentage of turnover.

[ Parent | on HN ]