“between 200 million and 600 million Facebook users may have had their account passwords stored in plain text”

https://krebsonsecurity.com/2019/03/facebook-stored-hundreds-of-millions-of-user-passwords-in-plain-text-for-years/

Very curious wording in Facebook’s press release:

“we have found no evidence to date that anyone internally abused or improperly accessed them”

If the CIA accessed them to break into accounts would that be considered “abuse”?

>>5811463

They did also say

“To be clear, these passwords were never visible to anyone outside of Facebook”

So maybe they were just trying to be clear.

>>5811612

No. I think Facebook == C_A. But was replying to the question about why they explicitly said that no one “internally” had “abused” or “improperly accessed”. I still would love to hear them explain about when it proper to access a user’s password.