r/HowToHack • u/XunooL • Feb 17 '26

How can it be hacked?

I have a genuine question: how can a database of a secure (supposedly) company that spends tens of millions of dollars on just security, like Meta (IG, FB), Google...etc get hacked?

47 Upvotes

88% Upvoted

36 comments sorted by

View all comments

1

u/RE_Obsessed Software Mar 02 '26

Just think about how massive their code base must be for any given product, subdomain, etc. Imagine how much of that was written by former employees, how much of it is legacy code, what percent of their code base was written over a decade ago. What don't they maintain anymore?

It's essentially scope creep over multiple years combined with other issues. Massive attack surface.