On: 32mil passwords compromised, SQL injection attack on RockYou

[jrockway]

But if the company spent its time solving every theoretical security problem, it would have never had a product to make money with in the first place. It is a balance, and "zero tolerance" is silly.

(So is not using a modern database abstraction library. Even PHP has them these days!)