> Due to a bug, passwords were written to an internal log before completing the hashing process This isn't a bug, it's incompetence. Remember folks, never, eve

> Due to a bug, passwords were written to an internal log before completing the hashing process This isn't a bug, it's incompetence. Remember folks, never, ever use the same password for two different websites. Assume all websites store your password in plain text even if they hash it at some point. With logging and tracking on steroids these days, I expect "bugs" like this to be commonplace.