On: Twitter urges users to change passwords after computer 'glitch'

[spike021]

>Due to a bug, passwords were written to an internal log before completing the hashing process.

Hate to speculate, but it sounds possibly like perhaps a debug statement/log level had been enabled for testing and forgotten about?

[mithr → spike021]

You wouldn't even need that -- just a request log that included the request body without sanitizing it first :)

[Jare → mithr]

That would have never happened to me. Not ever!

[abhishekjha → spike021]

Pretty much. Apparently github did something similar and now people are curious about the library/framework. Why is it so obvious that they both used the same library?

[swypych → abhishekjha]

my thoughts exactly, wondering what they are all using.

[nepthar → swypych]

Many of twitter's services use this: https://github.com/twitter/finatra