Twitter revealed, fixed a bug that prevented account logout on all devices after resetting password: Details

This week, Twitter announced that it recently fixed a bug that caused users to log into their accounts on multiple devices after they performed a voluntary password reset. The microblogging site also says it has signed out people who may have been affected by the bug. The company also recommends that users review the controls available in the settings menu and regularly monitor active open sessions. The company’s disclosure of the bug comes weeks after it was accused by former security chief Peiter Zatko of poor security practices, failure to handle fake accounts and allowing foreign governments to place fake accounts. agent on the payroll of the company.

In one blog postTwitter announced that a bug was introduced after it made a change to the password reset feeder system last year. The company said that the error allowed Twitter account to always log in from multiple devices after voluntarily resetting the password. “That means if you actively change your password on one device, but still have a session open on another, the session may not have been closed,” Twitter said.

It added that it “proactively logs people who may have been affected out of active sessions”. The company has also notified users who may have been affected by the bug. A member of the Gadgets 360 team also received a notification from the microblogging service that they may have been affected by the issue and that they can now sign in again on their device. Twitter said: “We take our responsibility to protect your privacy very seriously and it is unfortunate that this has happened.

Twitter’s statement about keeping everyone safe and secure comes weeks after the company was hit by allegations in a complaint. Peiter Zatko, former head of corporate security accused that the microblogging platform allows India to add agents to the company’s listing and potentially give the country access to sensitive data about users on the platform. He also claimed that “at least one agent” from China’s intelligence agency was recruited by the company.

Zatko also claims that weak cyber defenses leave the social platform vulnerable to “teenagers, thieves, and spies”, jeopardizing user privacy. Zatko told the Senate Judiciary Committee that the company ignores its engineers because “executive incentives make them prioritize profit over security.” Tesla CEO Elon Musk has licensed used the whistleblower’s allegations in Twitter’s upcoming trial to enforce the takeover agreement scheduled to begin in October.