Social networking site Twitter has just announced that all users will need to change passwords immediately following a bug discovery.
The bug, seen by the internal team, logs all of the user’s passwords onto a single file without having any encryption. Although there have been no signs of breach or misuse over the said bug, the company –including CEO Jack Dorsey — is urging everyone who uses the platform to immediately change their passwords for their safety and as a precautionary measure.
We recently discovered a bug where account passwords were being written to an internal log before completing a masking/hashing process. We’ve fixed, see no indication of breach or misuse, and believe it’s important for us to be open about this internal defect. https://t.co/BJezo7Gk00
— jack (@jack) May 3, 2018
The site has rolled out a new popup that informs users of the incident, prompting them to do action immediately, as well as suggesting to heighten up account security such as turning on two-factor authentication, choosing more unique passwords, and using password managers for storage.
Twitter said that the issue has been fixed as of the announcement time. There are currently 336 million users on the microblogging social network service, and the company declined to comment to CNN on how many passwords were stored in the said internal bug.
YugaTech.com is the largest and longest-running technology site in the Philippines. Originally established in October 2002, the site was transformed into a full-fledged technology platform in 2005.
How to transfer, withdraw money from PayPal to GCash
Prices of Starlink satellite in the Philippines
Install Google GBox to Huawei smartphones
Pag-IBIG MP2 online application
How to check PhilHealth contributions online
How to find your SIM card serial number
Globe, PLDT, Converge, Sky: Unli fiber internet plans compared
10 biggest games in the Google Play Store
LTO periodic medical exam for 10-year licenses
Netflix codes to unlock hidden TV shows, movies
Apple, Asus, Cherry Mobile, Huawei, LG, Nokia, Oppo, Samsung, Sony, Vivo, Xiaomi, Lenovo, Infinix Mobile, Pocophone, Honor, iPhone, OnePlus, Tecno, Realme, HTC, Gionee, Kata, IQ00, Redmi, Razer, CloudFone, Motorola, Panasonic, TCL, Wiko
Best Android smartphones between PHP 20,000 - 25,000
Smartphones under PHP 10,000 in the Philippines
Smartphones under PHP 12K Philippines
Best smartphones for kids under PHP 7,000
Smartphones under PHP 15,000 in the Philippines
Best Android smartphones between PHP 15,000 - 20,000
Smartphones under PHP 20,000 in the Philippines
Most affordable 5G phones in the Philippines under PHP 20K
5G smartphones in the Philippines under PHP 16K
Smartphone pricelist Philippines 2024
Smartphone pricelist Philippines 2023
Smartphone pricelist Philippines 2022
Smartphone pricelist Philippines 2021
Smartphone pricelist Philippines 2020
bern says:
What?! Funny! Absurd in the first place, why you logged all the password in single unprotected file, don’t you have a QA before you patch your production server even if it is internal, you twitter is not a small time, but having with this kind of bug that shouldn’t have passed your QA all along, is not making any sense. You demean your reputation and made yourself stupid, because no stupid engineer would make this without your consent, because all codes must go through the engineering process before it reach the server, first the engineer must follow the BRD, then code review, after that the QA Testings, and how this kind of stupidity, because in the first place who made a requirement that the password should be included in the log in an unencrypted format and what for, have passed through all your scrutiny?