Hacker News Reader

Because some developer typed:

> log.info(req.body)

and no one realized that login data would get captured?

Get real.

Smart companies typically overload loggers to do tokenization over many types of requests automatically to avoid this kind of inadvertent exposure.