<story><title>Facebook stored millions of Instagram passwords in plain text</title><url>https://www.theverge.com/2019/4/18/18485599/facebook-instagram-passwords-plain-text-millions-users</url></story><parent_chain><item><author>hmate9</author><text>&amp;quot;...various errors seem to have caused Facebook’s systems to log some passwords in plain text since as early as 2012.&amp;quot;&lt;p&gt;1) As a software engineer I can&amp;#x27;t imagine how such errors could possibly have entered production code accidentally, especially after code review. If precise details of these errors are released I am open to have my mind changed.&lt;p&gt;2) Even if it did, I can&amp;#x27;t see how it would take facebook&amp;#x27;s tens of thousands of engineers 7 years to find this &amp;quot;bug&amp;quot;.</text></item></parent_chain><comment><author>dagw</author><text>As a mere programmer I can very easily image dozens of ways such errors could easily enter production code accidentally.</text></comment>
<story><title>Facebook stored millions of Instagram passwords in plain text</title><url>https://www.theverge.com/2019/4/18/18485599/facebook-instagram-passwords-plain-text-millions-users</url></story><parent_chain><item><author>hmate9</author><text>&amp;quot;...various errors seem to have caused Facebook’s systems to log some passwords in plain text since as early as 2012.&amp;quot;&lt;p&gt;1) As a software engineer I can&amp;#x27;t imagine how such errors could possibly have entered production code accidentally, especially after code review. If precise details of these errors are released I am open to have my mind changed.&lt;p&gt;2) Even if it did, I can&amp;#x27;t see how it would take facebook&amp;#x27;s tens of thousands of engineers 7 years to find this &amp;quot;bug&amp;quot;.</text></item></parent_chain><comment><author>throwaway2016a</author><text>Not too far fetch... For example, I&amp;#x27;ve seen people put in place logging systems that logged the whole request body and then someone changed a field name and all the sudden as a side effect the code that sanitizes the body to remove the sensitive information no longer does it&amp;#x27;s job.</text></comment>