"Due to a bug, passwords were written to an internal log before completing the hashing process," he said. Twitter practice is to store passwords encrypted, or "hashed," so they are masked to even people inside the company, Twitter chief technology officer Parag Agrawal explained in a blog post. "Due to a bug, passwords were written to an internal log before completing the hashing process," he said. "When in doubt, it is better to have people change passwords than to be wrong," Enderle said. The analyst thought it unlikely people would abandon Twitter simply for being asked to change passwords.

Source: Daily Nation May 04, 2018 04:07 UTC