Twitter vulnerability lets apps send DMs without user permission | Hacker News Reader