Advertisement

We need your help now

Support from readers like you keeps The Journal open.

You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.

If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.

nafterphoto via Shutterstock

Twitter urges users to change passwords after data 'unmasked'

Twitter says there’s no indication that there was a data breach.

TWITTER HAS URGED users to change their passwords, which were unintentionally “unmasked” internally by a software bug.

The company said this evening that it recently discovered a bug that stored passwords in an internal log in an unprotected form.

Twitter says there’s no indication that there was a breach or that any of the passwords were misused.

However, as a precaution, Twitter recommends users consider changing the passwords they use to log onto the social media platform. They should also change that password if they used it for any other services.

The San Francisco company says it masks – or encrypts – passwords by replacing them with a random set of numbers and letters. But the bug caused passwords to be written to an internal log before that masking occurred.

The company says it discovered the bug on its own and has fixed it.

With reporting by AFP.

Readers like you are keeping these stories free for everyone...
A mix of advertising and supporting contributions helps keep paywalls away from valuable information like this article. Over 5,000 readers like you have already stepped up and support us with a monthly payment or a once-off donation.

Close
5 Comments
This is YOUR comments community. Stay civil, stay constructive, stay on topic. Please familiarise yourself with our comments policy here before taking part.
Leave a Comment
    Install the app to use these features.
    Mute The Viking
    Favourite The Viking
    Report
    May 3rd 2018, 10:21 PM

    Mmmmmmmmmmmmmmmmmm. Should I believe there version. ???? Dont think so. FB mark 2..

    39
    Install the app to use these features.
    Mute B9xiRspG
    Favourite B9xiRspG
    Report
    May 3rd 2018, 10:58 PM

    So what they are saying is that the passwords are not secure, can’t be if you can decrypt them.

    12
    Install the app to use these features.
    Mute Peter
    Favourite Peter
    Report
    May 4th 2018, 6:55 AM

    @B9xiRspG: They’re saying they were stored separately before being decrypted, too.

    5
    Install the app to use these features.
    Mute Eirblath
    Favourite Eirblath
    Report
    May 4th 2018, 9:49 AM

    @B9xiRspG: The passwords weren’t decrypted. They were stored in a log before being encrypted. If anyone got access to that log though they could use it to potentially gain access to other sites if you use the same email address and password combination all the time. This story highlights the real importance of using different passwords for different websites.

    2
    Install the app to use these features.
    Mute Dr Rex Butts
    Favourite Dr Rex Butts
    Report
    May 3rd 2018, 11:02 PM

    What’s next my pornhub account, oh god no, must change password immediately

    21
Submit a report
Please help us understand how this comment violates our community guidelines.
Thank you for the feedback
Your feedback has been sent to our team for review.

Leave a commentcancel