If you needed another reminder to frequently update your passwords, Twitter has you covered. Twitter has announced that a bug caused the platform to store passwords unmasked in an internal log. That means passwords were stored unprotected in plain text and could have potentially been stolen. You should change your password just in case.
We recently found a bug that stored passwords unmasked in an internal log. We fixed the bug and have no indication of a breach or misuse by anyone. As a precaution, consider changing your password on all services where you’ve used this password. https://t.co/RyEDvQOTaZ
— Twitter Support (@TwitterSupport) May 3, 2018
Twitter says they have “no reason to believe password information ever left Twitter’s system.” That doesn’t mean they definitely weren’t accessed, just that they haven’t detected any foul play. They are advising users to change their passwords as a precautionary measure. Here’s their full statement on what happened:
“We mask passwords through a process called hashing using a function known as bcrypt, which replaces the actual password with a random set of numbers and letters that are stored in Twitter’s system. This allows our systems to validate your account credentials without revealing your password. This is an industry standard.
Due to a bug, passwords were written to an internal log before completing the hashing process. We found this error ourselves, removed the passwords, and are implementing plans to prevent this bug from happening again.”
Change your password and start using two-factor authentication if you’re not already. These types of things happen far too often and you don’t want your sensitive information out there. Taking 5 minutes to secure your account now could save you a world of pain later on.
Source: Twitter
from xda-developers https://ift.tt/2Ky70kb
via IFTTT
Aucun commentaire:
Enregistrer un commentaire