Categories: Digital LifeNews

Facebook in hot water again. Hundreds of millions of passwords stored in plain text

Recently, Facebook has announced they’ve discovered a major security issue during their routine security review – approximately 200 million to 600 million Facebook users may have their account passwords stored in plain text format in their database, which is entirely accessible by 20,000 Facebook employees.

According to a report from KerbsOnSecurity, a source from Facebook have told them that hundreds of millions of Facebook user passwords were stored in a readable state for years, where some cases date back to 2012. To make matters worse, 20,000 employees from Facebook have access to these passwords.

Let’s not panic just yet, at least that’s what Facebook has to say. According to the social media company, ongoing investigations have indicated that these passwords were not abused by those who have access. A senior Facebook employee said that the security failures were due to employees building applications that logged unencrypted password data for Facebook users in plain text.

Sources on KerbsOnSecurity has also reported that some 2,000 engineers or developers made approximately nine million internal queries for data elements that contained plain text user passwords. They said that Facebook has issued a written statement to them, indicating that the company will inform “hundreds of millions of Facebook Lite users, tens of millions of Facebook users and tens of thousands of Instagram users” who are affected. Facebook Lite is a stripped-down version of Facebook that is designed for entry-level smartphones.

Prior to this, both GitHub and Twitter had encountered similar issues in recent months. But comparatively, the plain text passwords were only available to a much smaller group of people and for far shorter periods of time.

For Facebook to store passwords without encryption is reckless and it isn’t clear if a password change at the moment would make a difference if it continues to keep a copy of it in plain text. It is probably a good idea to change your password on other platforms if it shares the same password as your Facebook account.

On top of that, it is recommended that you use a unique password for different logins and this is where a password manager would come in handy. To secure your Facebook account further, it is also recommended that you enable two-factor authentication.

[ SOURCE ]

Recent Posts

ChargEV Yearly Essential Plan has been discontinued

[UPDATE 02/11/2024 22:50] As it turns out, the ChargEV Legacy Plan has also been closed…

7 hours ago

U Mobile eager to work with CelcomDigi and TM to build second 5G network, to reduce foreign majority shareholding to 20%

U Mobile has expressed gratitude to the Malaysian government for selecting them to implement Malaysia's…

15 hours ago

Shell Recharge Malaysia deploys card payment terminal to its EV charging station

Pavilion KL visitors can use credit or debit cards to utilise the Shell Recharge EV…

1 day ago

MCMC: Malaysia’s second 5G network goes to U Mobile

[ UPDATE 2/11/2024 11:00 ] U Mobile thanked govt for second 5G network, to reduce…

1 day ago

The 2024 Mac Mini’s power button placement is dumb, but here are some solutions

Just a couple of days ago, Apple launched its long overdue updated 2024 Mac Mini.…

1 day ago

BYD Sealion 7 performance electric SUV coming to Malaysia soon?

Following the launch of the BYD M6 fully electric MPV, BYD has teased another upcoming…

1 day ago

This website uses cookies.