Twitter Discover Bug That Could Compromise Account Passwords - Dexerto
General

Twitter Discover Bug That Could Compromise Account Passwords

Published: 4/May/2018 0:49 Updated: 11/Mar/2019 12:48

by Albert Petrosyan

Share


Twitter have announced that they have discovered a bug in their systems that could compromise account passwords.

The announcement came on May 3rd as the social media giants have informed their users to take precaution.

Advertisement

Created in March of 2006, Twitter quickly established itself as one of the most prominent social media platforms on the internet and, as of 2016, had more than 319 million active users.

Many are attracted by Twitter’s simplicity and efficiency and have turned to it to quickly get their news, interact with others, and express themselves to their followers.

Advertisement

With such a vast user-base, Twitter understandably prioritizes user privacy and security, which makes this latest development slightly daunting.

 

It would be safe to assume that a considerable portion of Twitter users use the same password on the website that they do on at least one other service.

Therefore, despite the fact that the bug has been fixed and there appear to be no indications of misuse, Twitter recommends that their users change their password on all services where they’ve used it.

Advertisement

Essentially, the bug that they have found unmasks the users’ passwords that are stored in a hidden internal log that is normally encrypted and cannot be viewed by employees.

It will be worth keeping an eye on the situation to see whether there are any long-term effects of this security issue. 

Advertisement

A more detailed explanation of the issue can be seen below, or on the official Twitter blog.

When you set a password for your Twitter account, we use technology that masks it so no one at the company can see it. We recently identified a bug that stored passwords unmasked in an internal log. We have fixed the bug, and our investigation shows no indication of breach or misuse by anyone.

Out of an abundance of caution, we ask that you consider changing your password on all services where you’ve used this password. You can change your Twitter password anytime by going to the password settings page.

About The Bug

We mask passwords through a process called hashing using a function known as bcrypt, which replaces the actual password with a random set of numbers and letters that are stored in Twitter’s system. This allows our systems to validate your account credentials without revealing your password. This is an industry standard.  

Due to a bug, passwords were written to an internal log before completing the hashing process. We found this error ourselves, removed the passwords, and are implementing plans to prevent this bug from happening again.

Tips on Account Security

Again, although we have no reason to believe password information ever left Twitter’s systems or was misused by anyone, there are a few steps you can take to help us keep your account safe:

  1. Change your password on Twitter and on any other service where you may have used the same password.
  2. Use a strong password that you don’t reuse on other websites.
  3. Enable login verification, also known as two factor authentication. This is the single best action you can take to increase your account security.
  4. Use a password manager to make sure you’re using strong, unique passwords everywhere.

We are very sorry this happened. We recognize and appreciate the trust you place in us, and are committed to earning that trust every day.

Entertainment

StreamElements supports underrepresented streamers with Creator Diversity Fund

Published: 2/Sep/2020 17:38 Updated: 3/Sep/2020 9:32

by Calum Patterson

Share


StreamElements has announced the 20 recipients of its $100,000 Creator Diversity fund, providing creators of underrepresented groups on Twitch with professional livestreaming services.

These streamers are up-and-coming broadcasters who are fighting for their place in the uber-competitive landscape of livestreaming, and who face even harsher competition because of their protected characteristics.

Advertisement

The Creator Diversity Fund will provide them “a wide range of support from StreamElements which includes graphics, production, and mentorship.”

StreamElements Logo
StreamElements
StreamElements provides tools and services to livestreamers.

Additionally, SteelSeries is onboard to provide all recipients with Arctis 1 Wireless Gaming Headsets.

Advertisement

StreamElements said they were inspired to start the fund, due to an acknowledgment that these creators, in underrepresented groups, face extra challenges in the livestreaming space.

StreamElements Creator Diversity Fund Recipients

The creators were selected due to the type of content they were producing, their dedication to livestreaming, and their own insights provided when they applied.

The fund hopes to be “a way to help elevate their presence and voice in an ecosystem where discovery and access to information is an issue.”

Advertisement

Marc, who goes by Teknikalx on Twitch, told us “I applied for the fund because I thought it would be beneficial for my channel to receive additional support to give the channel a more professional look vs what I have now. Also to bring to light that programs like this exist and if a channel such as mine can receive support in this manner, other channels can too.”

Teknikalx boasts over 5,000 followers on Twitch, but says that having the support of StreamElements ‘Dream Team’ will “give a boost to my channel in the extra visibility to my content. I truly believe that the access to doors that would otherwise be closed will open, with their support to show that my content is worth not only checking out but supporting.”

Fellow streamer StreetGrind, who streams everything from Fall Guys to Horizon Zero Dawn, said the support from the Creator Diversity fund will take his “content and brand to the next level in overall aesthetics as well as consistency.”

Advertisement
Twitch streamer StreetGrind
StreetGrind
StreetGrind, one of the recipients of the Creator Diversity Fund, aims to take his content and brand to the “next level.”

“I’m hoping to use this support to increase my discoverability on who I am and what my brand is about. Improving every day one step at a time and helping others along the way,” he explained. “We stand stronger together instead of individually.”

Another recipient, GoofyWise, similarly hopes the support will push his stream further and provide a better viewing experience. “Opportunities like these are rare especially those targeted to people who look like me.”

Advertisement

GoofyWise

“I plan to use this opportunity to take my channel to the next level by giving my stream an increased level of professionalism that will attract viewers from all around,” he told Dexerto. “Not to mention the added confidence boost from having a higher quality look and feel. Look good, feel good!”

The support will include guidance on growing their brand, securing sponsorships, merchandising, and all other facets of growing and maintaining an audience.

StreamElements is one of the leading third-party services used by countless streamers to manage their donations, overlays, alerts and more while they are broadcasting.

“Livestreaming is not an easy profession and it can be even more daunting for members of underrepresented groups,” said Doron Nir, CEO, StreamElements. “With the Creator Diversity Fund, our goal is to provide those invaluable industry insights on top of improving all aspects of their channels.”

Each of the 20 recipients will have an “account manager”, with 24/7 assistance, and provided a selection of “in-game overlays, alerts, emotes, transitions, sub badges, headers, tipping pages, info panels, and logos,” customized for their channel.