5 ms·

>Due to a bug, passwords were written to an internal log before completing the hashing process. Hate to speculate, but it sounds possibly like perhaps a debug

>Due to a bug, passwords were written to an internal log before completing the hashing process. Hate to speculate, but it sounds possibly like perhaps a debug statement/log level had been enabled for testing and forgotten about?

mithr 8y ago
You wouldn't even need that -- just a request log that included the request body without sanitizing it first :)
- Jare 8y ago
  That would have never happened to me. Not ever!
abhishekjha 8y ago
Pretty much. Apparently github did something similar and now people are curious about the library/framework. Why is it so obvious that they both used the same library?
- swypych 8y ago
  my thoughts exactly, wondering what they are all using.
  - nepthar 8y ago
    Many of twitter's services use this: https://github.com/twitter/finatra https://github.com/twitter/finatra