Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Facebook Stored Hundreds of Millions Passwords in Plain Text, Thousands of Employees Had Access

cmaier said:
Every turd knows you salt the password and hash it and never ever store anything other than the hash. The password should never even have been transmitted to Facebook, but that’s a whole other story.

These guys should be shut down.
Click to expand...

Yep.

dtlee1974 said:
Yes. At this point, storing non-hashed passwords should be a criminal offense. Period. The CEO and Chief Engineer of any firm doing it should get jail time for it. That will stop it. This isn't rocket science either, the protocols to make this kind of thing impossible are pretty well known.
Click to expand...

Yep.

jlbraun said:
No one, but *no one* stores passwords in plain text accidentally. *NO ONE.*

This is otherwise known as "poisoning the well".

Facebook is covering its tracks for something nefarious it did or helped the government do, that's all.

"We or the government did some bad **** using a user's password on another site, but look! Passwords to do so were stored in plain text! Wasn't us, it was, um, hackers! Yep!"

This is all very standard stuff.
Click to expand...

Even though this is a brand new poster, I think they're on to something here.

To NOT salt passwords is very very odd.
 
Facebook? People still use that thing?

Are people completely ignorant of their immorality and laissez-faire attitude towards security and privacy, or do they just not care?
 
  • Like
Reactions: 5105973
mi7chy said:
Almost as bad as MacOS no root password.
Click to expand...

not really. because to exploit the root password bug you had to have access to a computer with root access enabled. which means being in front of the computer or a computer where the user turned off the defaults that block remote access.

with this 'exploit' anyone with that list can access your account. so that's tons of facebook employees, anyone they sold the list to and so on
 
  • Like
Reactions: bobmepp, buckwheet and ApfelKuchen
kaycrystal626 said:
Delete Facebook? Where are you going to go? Google+?
Click to expand...
So you feel that FB, or equivalent, is a life necessity? My God, what have we done? If the people you communicate with on FB are, actually, friends, have them install Signal and create a group with those folks. Bam! Share vids, pics, audio, text interesting links, ALL ENCRYPTED end-to-end. No logging, open source, audited. There are actually *very* good alternatives to FB, but *you* have to *do* something. Therein lies the rub, I guess.
 
  • Like
Reactions: ericwn
thadoggfather said:
I dont feel bad for Zuckerberg for a second over the autobahn speed dumpster fire car crash that is Facebook that none of us can look away from.

Karma is so frigging beautiful. And to think, the demise of Zuck/FB is only in its earliest phase. Popcorn.gif

Good luck with that new privacy-centric platform pitch too, credible Lizardman! ;)

He'll be lucky to go the way of Tom; irrelevant. In more likelihood, jail time and litigation issues / scandals piling up until his old age. He certainly will not have gotten the last laugh, proverbially speaking.

I think in the end, Tom wasn't just everyone's friend on MySpace, he was indirectly everyone's friend IRL.

The platform caving on itself was a great 'avante-garde' gift to humanity; Nobel Peace Prize worthy imo!

And while I engage in debate often in polarizing pol threads, I think we *all* can rally behind the fact both sides are equally furious (for different reasons) at Facebook... Maybe thats the sort of common ground unity we need?
Click to expand...
Maybe with the fall of Facebook bulletin board sites like ex: macrumors etc will rise again. Facebook is the reason why BB sites went by the wayside except for larger sites like this one.
 
  • Like
Reactions: 5105973 and thadoggfather
dannyyankou said:
Delete Facebook and delete your accounts
Click to expand...

Delete Facebook after you've already given them your data? LMAO.

So you delete Facebook. Okay, so that takes care of your user-generated content.

But what about the data on you that your friends and family members have provided to Facebook and who have not deleted their Facebook accounts yet?

And there's also the logged data Facebook keeps.

For-eh-ver.

WwKH9RX.gif


See https://www.cbsnews.com/news/ok-youve-deleted-facebook-but-is-your-data-still-out-there/

Facebook has two types of databases of user content, according to Paul-Olivier Dehaye, co-founder of PersonalData.IO, a service that helps consumers track their data.

One collects user-generated content, such as status updates and photos.

The other is for log data -- a record of what a user does, such as when they log in, click on a Facebook group or post a comment.

"When you delete your account, all the user generated content is normally erased (although there are small exceptions), while all the log data is preserved – forever." The preserved log data won't have your name attached to it.

One catch: Data about consumers posted by friends and family members will remain with the service as long as they remain on the social-media service, according to Facebook's Help Center. "Keep in mind that information that others have shared about you is not part of your account and will not be deleted when you delete your account," Facebook says in its data policy.
Click to expand...
 
  • Like
Reactions: BigMcGuire and 5105973
macduke said:
Hah, there is no worse game company (although Bethesda is getting there), but I don't think EA is destroying our society.


I don't think Amazon is that bad. I don't put their listening devices in my home, and they are putting the squeeze on local businesses, but I don't think Amazon is destroying the very fabric of our society in how we communicate, learn, and lose our privacy. But they definitely need to be watched carefully. I am no longer going to buy an EERO when I upgrade to mesh when WiFi 6 is widely available since they bought it. But I'd rather use Alexa and all of that stuff than FaceBook's creepy box.
Click to expand...
I suggest skipping mesh entirely and going straight to enterprise equipment! I went with a Sonicwall and SonicPOINT APs and never looked back. Most reliable WiFi ever.
 
  • Like
Reactions: macduke
charlituna said:
not really. because to exploit the root password bug you had to have access to a computer with root access enabled. which means being in front of the computer or a computer where the user turned off the defaults that block remote access.

with this 'exploit' anyone with that list can access your account. so that's tons of facebook employees, anyone they sold the list to and so on
Click to expand...

Yes, really. They're both local exploits (internal access only FB DB) but MacOS gives you root access while FB gives user access so not as bad.
 
Seriously, WTF is wrong with this godforsaken company?! It has never understood the concept of user privacy and is continually apologising for supposed privacy mistakes.
 
  • Like
Reactions: DotCom2 and 5105973
dontwalkhand said:
Right. They’re better.
Click to expand...

None of them let me keep in touch with my family and friends that live in other states or across the ocean, letting us share photos, memories and stories. I'm not looking for a way to meet new people and neither are my family and friends. We just want to stay in the loop with each other.

So instead of snark, maybe come up with a real, viable recommendation?
[doublepost=1553200326][/doublepost]
UKinEK said:
Monsanto. So far Facebook didn’t manage to literally kill millions of people, like Monsanto did.
Click to expand...

Monsanto has not killed millions of people. Christ almighty.
 
dontwalkhand said:
I suggest skipping mesh entirely and going straight to enterprise equipment! I went with a Sonicwall and SonicPOINT APs and never looked back. Most reliable WiFi ever.
Click to expand...
Interesting. Haven't thought about that. Sounds pricey but so is mesh. We have gigabit now in our area and I'd like to be able to broadcast it all over my house at near full speed, which is about 3000sqft.
[doublepost=1553202468][/doublepost]
drumcat said:
Spirit Airlines.
Click to expand...
Haven't heard about why you would think that. Have heard about many of the United horror stories. I flew with Spirit once several years ago, I think to Houston. It was nice and inexpensive when we traveled. Are they killing pets and beating up people like United?
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back