I don't understand how they have "1 billion logins a day". They only have 500-600 million accounts (and not all of those are active).
I'm assuming a "login" is the specific act of typing in your username and password into the site to authenticate into a specific account - pertinent here because we're talking about people logging in with compromised credentials.
When I visit Facebook, I'm usually cookied and so to me that isn't a login. If I had compromised the account I wouldn't consider myself 're-compromising it' just by visiting it again with the cookie already in place.
Maybe this is just semantics but seeing as we're making a headline out of a stat, it seems worth drilling down on.
I'm assuming a "login" is the specific act of typing in your username and password into the site to authenticate into a specific account - pertinent here because we're talking about people logging in with compromised credentials.
When I visit Facebook, I'm usually cookied and so to me that isn't a login. If I had compromised the account I wouldn't consider myself 're-compromising it' just by visiting it again with the cookie already in place.
Maybe this is just semantics but seeing as we're making a headline out of a stat, it seems worth drilling down on.