Author of this article learned a lot about password hashing, missed the detail that this was in logs, not the database. Usually you try to avoid logging passwords, you don’t hash them in logs.

Most companies have this problem, devs logging credentials all the time. Many web frameworks have a log all then blacklist mentality which leads to soo many mistakes. ex ruby on rails etc.

[dupe]

Discussion: https://news.ycombinator.com/item?id=41669912

The fine is too low for a company of this size.

91m is a drop in the bucket for Meta. Jesus.