Facebook’s recent error in password handling was egregious, but there’s more than one way to abuse user data. We take a look at various missteps in credential security and how businesses can improve practices. The most common algorithm for many years, MD5, was shown to be insecure via single block collision in 2010, and therefore inappropriate for most security uses. Misconfigured servers have resulted in large scale data loss in a variety of settings. Security on an assortment of cloud services can have sub-optimal default settings.”]