Just when you thought it was safe to trust Facebook again… WIRED reports:
On Thursday, following a report by Krebs on Security, Facebook acknowledged a bug in its password management systems that caused hundreds of millions of user passwords for Facebook, Facebook Lite, and Instagram to be stored as plaintext in an internal platform. This means that thousands of Facebook employees could have searched for and found them. Krebs reports that the passwords stretched back to those created in 2012.
Pedro Canahuati, Facebook’s vice president of engineering, security, and privacy shared in a statement:
“As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems…. Our login systems are designed to mask passwords using techniques that make them unreadable. To be clear, these passwords were never visible to anyone outside of Facebook and we have found no evidence to date that anyone internally abused or improperly accessed them.”