### Comment:
Sorry, i disagree. The fact that they even hold routinely security audits, and caught it on their own without someone else bringing it to their attention should speak for itself on how they run like a well oiled machine. The bigger the application/product, the higher probability that bugs/issues gets introduced. Of course due diligence and  competence minimizes that, but its just what comes with the territory

### REPLY:
I have to disagree there. It's not normal to overlook such a basic lack of implementation in production. In development maybe, but even there it's not normal. Also you and I don't know how long it was in production. Maybe for 5+ years which seems sensible because if not the passwords of hundreds of million of users would not have been working when they accidently switched from beeing hashed to unhashed.

### END.