zlacker

>>colone+(OP)
I find facebook's effects on privacy and democracy as scary as the next person, but so far their secure coding standards have been extremely high. They're one of the few big names NOT on haveibeenpwned.com, they run their passwords through a KDF and then encrypt the result with a hardware security module, and a whole lot of other good things.

I guess even the best (at secure coding) sometimes mess up.

>>red_ad+x3
Many users are still going to use the same password for their FB account and email account. All the security in the world won't fix people.

>>51lver+En
Pervasive biometric security may be the next step. I know it's scary and could actually be abused but it also can generally increase the level of security for everyone.

>>ilaksh+Sr
If your password is leaked, then you can still reset it. If your fingerprint signature leaks, you're out of options.