That “m” should be a “b”. For a company that size, there is truly no excuse!
this post was submitted on 27 Sep 2024
1072 points (99.6% liked)
Technology
58291 readers
4205 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
I hope i dont get fined for
5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
nah, sha-256 is fine, though you should pick something stronger than "password"
Don't worry I don't use that for my internet bank: 19513FDC9DA4FB72A4A05EB66917548D3C90FF94D5419E1F2363EEA89DFEE1DD
well, "Password1" is slightly better, I'll make sure not to tell anyone.
Thanks, I appreciate that. I paid an independent IT security consultant lot of money to help me come up with it - so I don't want to have to change it.
17 cents apiece
And these are the people who demand id to get back into your account if they find activity they deem suspicious.
Yep, had basically a throw away account for the occasional thing that basically required a Facebook account, and then I guess because I never posted anything they locked my account and demanded ID. Hell no.
This is like when Dr Evil asks for $1 million dollars after being unfrozen. These courts need to get with the times.
Should be like GDPR fines: 4% of your annual global revenue.
Edit: just read "It has so far fined Meta a total of 2.5 billion euros for breaches under the bloc's General Data Protection Regulation's (GDPR), introduced in 2018, including a record 1.2 billion euro fine in 2023 that Meta is appealing"
Wow, Meta really likes donating to the EU
I can't find anything that states how much they have actually paid. It's not quite the same if they spend 20 years fighting the amount in court.
load more comments
(14 replies)
All fines should be percentage of income instead of some arbitrary number.
They also need to remove the limited liability from companies for intentional illegal activities.
illegal business practices should be charged to the people involved instead of the company. The executives who made the decision to break the law lose personal assets.
Otherwise the shitheads just pass the company losses onto the employees: no raises, hiring freezes, layoffs, reduction in benefits, etc...
Intentional? Better use Negligent. It's hard to prove intent; knowledge of something going on is much easier to prove.
100%. We need more personal liability for the evils of big business, not less
load more comments
(5 replies)
Meta: The company whose products you use when you absolutely, positively, don't give a shit that they are the worst example of the worst nightmare of a consumer-hostile, privacy-invading, you-are-the-product, tech company. Yes, even worse than Microsoft.
load more comments
(15 replies)
Jesus, why not fine them 5 bucks?
What a joke.
Meta's revenue is in the tens of billions. This fine isn't even a rounding error for them. This isn't something that should be taken so lightly.
Have you seen IT budgets? Some vice-president of technology is going to be pissed his numbers look bad compared to his peers during their weekly numbers measuring contest.
Its about $2.6 billion per week in revenue, even by the weekly numbers its not an impact
(based on ~$135b in revenue for 2023, according to financial disclosure reports)
load more comments
(1 replies)
load more comments
(1 replies)
They still store the passwords like that? I remember that quote of Zuckerberg doing so, in the early days, and boasting about it to a friend... This was so outrageous at the time. Now it's beyond absurdity.. Not to mention the fine is so small!
Not to excuse them, but this is from 2019. Yes, that behavior was so outrageous at the time, but hopefully it is no longer happening
I remember my bank used to ask me for the 2nd, 5th and 7th letters of my password from time to time.
There's only one realistic way they can know those to ask me.
They haven't asked me that for a while now, so I can only hope they encrypted them properly at some point.
And you can imagine someone thinking it's super clever and secure.
I can only hope they encrypted them properly at some point
Encryption is reversible, hashing isn't. That's why you use the latter for passwords.
load more comments
(1 replies)
Also, nobody reads the actual posts, just the headlines. They were accidentally stored in logs:
As part of a security review in 2019, we found that a subset of FB users' passwords were temporarily logged in a readable format within our internal data systems,
which is something I've seen at other companies too. For example, if you have error logging that logs the entire HTTP request when an error happens, but forget to filter out sensitive fields.
load more comments
(2 replies)
load more comments
(5 replies)
Quick math: this is only 0.076% of their 2023's revenue. No wonder big corporations don't give a fuck about fines and will continue doing fucked up/illegal shit. This is not a fine, this is a green light, my friends.
They literally just consider fines as a cost of doing business.
This is why you never reuse passwords. Usually there's no way to tell if a site is storing them in plain text until there's a data breach.
Considering how old Facebook is, you'd think they would have their shit together when it comes to password security...
Facebook is huge and has very diverse teams/departments. It's absolutely possible the guys who know what security is, and the guys who build app xyz are in different departments, countries, continents.
The capitalists want us to believe otherwise, but large corporations are just as convoluted and inefficient as a planned economy.
load more comments
(7 replies)
load more comments
(10 replies)
view more: next ›