I am too lazy like Apple developers.. When was this routine up-streamed so we can meter the mediocrity?
So Apple basically implemented the typical password hash algorithm upgrade logic:
if (check_password(hash, password) && hash_is_old(hash)) {
set_hash(new_hash(password))
}
... except they somehow managed to botch check_password 
#IAmRoot
https://objective-see.com/blog/blog_0x24.html …
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
This is typical Apple security, just like when they had their logging service running as root which would accept output files and content as arguments making it trivial to overwrite /etc/passwd
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.