Re: An update on your account security (fwd)

[robert <http://dummy.us.eu.org/robert>]

Did you change your password?

 > From: Noelle <noelle>
 > Date: Fri, 4 May 2018 10:51:00 -0700 (PDT)
 >
 >  > Date: Fri, 04 May 2018 02:16:58 +0000
 >  > From: Twitter <http://www.twitter.com/~info>
 >  > 
 >  > Twitter 
 >  > > https://twitter.com
 >  > 
 >  > Hi @Noellegi,
 >  > 
 >  > When you set a password for your Twitter account, we use technology that 
 >  > masks it so no one at the company can see it. We recently identified a bug 
 >  > that stored passwords unmasked in an internal log. We have fixed the bug, 
 >  > and our investigation shows no indication of breach or misuse by anyone.
 >  > 
 >  > Out of an abundance of caution, we ask that you consider changing your 
 >  > password on all services where youâ??ve used this password. You can change 
 >  > your Twitter password anytime by going to the password <a href="
 >  > https://twitter.com/i/redirect?url=https%3A%2F%2Fmobile.twitter.com%2Fsettings%2Fpassword%2F.%2F&t=1+1525400218214&cn=bGVnYWxfZW1haWxfMQ%3D%3D&sig=885b6fad0a4e14128adbcceadfe8c4cada07444f&iid=1520b8aa7779417296ff1611fa81a000&uid=239549244&nid=244+1553"; class="blue">settings</a> page. 
 >  > 
 >  > About The Bug 
 >  > 
 >  > We mask passwords through a process called hashing using a function known as 
 >  > bcrypt, which replaces the actual password with a random set of numbers and 
 >  > letters that are stored in Twitter's system. This is an industry standard. 
 >  > 
 >  > Due to a bug, passwords were written to an internal log before completing 
 >  > the hashing process. We found this error ourselves, removed the passwords, 
 >  > and are implementing plans to prevent this bug from happening again. 
 >  > 
 >  > Tips on Account Security 
 >  > 
 >  > 1. Again, although we have no reason to believe password information ever 
 >  > left Twitter's systems or was misused by anyone, there are a few steps you 
 >  > can take to help us keep your account safe: 
 >  > 
 >  > 2. Change your password on Twitter and on any other service where you may 
 >  > have used the same password. 
 >  > 
 >  > 3. Use a strong password that you don't reuse on other services. Enable <a 
 >  > href="
 >  > https://t.co/redirect?url=https%3A%2F%2Ft.co%2Flogin-verification&t=1+1525400218215&cn=bGVnYWxfZW1haWxfMQ%3D%3D&sig=70299923e3ecbecbbfab05b5a26a5fd71ad4a85e&iid=1520b8aa7779417296ff1611fa81a000&uid=239549244&nid=244+1554"; class="blue">login verification</a>, also known as two factor authentication. 
 >  > 
 >  > 4. This is the single best action you can take to increase your account 
 >  > security. Use a password manager to make sure you're using strong, unique 
 >  > passwords everywhere. 
 >  > 
 >  > We are very sorry this happened. We recognize and appreciate the trust you 
 >  > place in us, and are committed to earning that trust every day. 
 >  > 
 >  > Team Twitter
 >  > 
 >  > =
 >  > 
 >  > Help
 >  > > https://support.twitter.com
 >  > 
 >  > Reset Password
 >  > > https://twitter.com/account/begin_password_reset?account_identifier=Noelleg
 >  > > i
 >  > 
 >  > Download App
 >  > > https://twitter.com/download
 >  > 
 >  > We sent this to @Noellegi.
 >  > 
 >  > Twitter, Inc. 1355 Market Street, Suite 900 San Francisco, CA 
 >  > 94103