BTW, this comment was meant to be in response to the other thread "How I Lost My $50,000 Twitter Username (medium.com)" https://news.ycombinator.com/item?id=71

BTW, this comment was meant to be in response to the other thread "How I Lost My $50,000 Twitter Username (medium.com)" https://news.ycombinator.com/item?id=7141532 https://news.ycombinator.com/item?id=7141532 But they're both pretty much the same problem. Service has complex/secret authentication policy, so users have no chance to be secure.