On: Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years

[EnFinlay]

Having (read) access to the hash shouldn't give any access to the account.

Edit: You've made this comment twice in these threads. It's wrong.

[polote → EnFinlay]

Yeah I was wrong, it is only true if the dev has access to the prod database