Per a report from Krebs on Security on March 21, Facebook has — yet again — found a way to mishandle its users' data. This time around, it appears that Facebook incorrectly stored user passwords and made them exposed to thousands of employees.
Facebook is probing a series of security failures in which employees built applications that logged unencrypted password data for Facebook users and stored it in plain text on internal company servers. That's according to a senior Facebook employee who is familiar with the investigation and who spoke on condition of anonymity because they were not authorized to speak to the press.
It's estimated that between 200 million and 600 million users had their passwords exposed, dating as far back as to ones created in 2012. During this time, over 20,000 employees at Facebook could search for and find the passwords without a problem.
Facebook says it'll notify users affected by this, but it won't require them to change their password as a result of the findings.
Speaking to Krebs on Security, Facebook Software Engineer, Scott Renfro, said:
We've not found any cases so far in our investigations where someone was looking intentionally for passwords, nor have we found signs of misuse of this data. In this situation what we've found is these passwords were inadvertently logged but that there was no actual risk that's come from this. We want to make sure we're reserving those steps and only force a password change in cases where there's definitely been signs of abuse
Even if none of the passwords were used for malicious purposes, it's incredible that stuff like this keeps happening with Facebook. We've heard the company talk about how it values its users' privacy/security, but when stories like this continue to pop up, those reassurances mean less and less.
PS5 snub shows just how little Sony cares about India
The PS5 and PS5 Digital Edition will be going on sale in most global markets starting November 12. But with Sony failing to reveal pricing and availability details for India, PlayStation fans are left guessing as to when Sony's next-gen console will make its debut in the country.
Everything you need to know about the Pixel 4a and Pixel 4a 5G
The Pixel 4a is now available, the Pixel 4a 5G is coming soon, and we've rounded up everything you need to know about both phones. Let's dive in!
What to expect from Amazon's September 2020 Alexa & Ring hardware event
Amazon is set to host its annual fall hardware event on Thursday, September 24. Here are a few devices that we might expect to see at tomorrow's event.
Spice up your smartphone or tablet with the best icon packs for Android
Being able to customize your device is fantastic as it helps to make your device even more of "your own". With the power of Android, you can use third-party launchers to add custom icon themes and these are just some of our favorites.