What could Twitter have done better? What would you do if your users' accounts were compromised?