Meta fined $101 million for storing hundreds of millions of passwords in plaintext
therecord.media
European regulators fined Meta for an engineering mistake that the social media giant first reported in 2019.
  • delirious_owl
    74·
    3 months ago

    Usually these services have god mode where they can see a UI from a given user. They don’t need the password.

    This sounds like a rumor spread by someone who doesn’t understand tech

    • FrederikNJS@lemm.ee
      9·
      3 months ago

      The OP made the argument that Zuckerberg wanted to know their passwords, such that if the users reused the same passwords elsewhere, then he would be able to log in there and check out their accounts.

      For example he could have seen a profile he was interested in, nabbed their password and looked into their email.

      Not that he wouldn’t have godmode on their Facebook account, and needed their password to access their account, because of course he could have just accessed those accounts without needing the password.

      I have not heard this rumor before, though I wouldn’t be completely surprised if it was true.

      • delirious_owl
        2·
        3 months ago

        Well, Facebook did have an auth method that involved promoting you for your password so that they could log into your email and get an OTP iirc

        It wasn’t zuckerberg doing something in secret. It was an explicit protocol that was terrible. They got called out and stopped it. Kinda like early days of open graph.