Terence Eden wrote in his blog post that Twitter has a gaping security hole and that changing the password won’t stop malicious users logging in as you   Implementation error I'd say that this is both Twitters fault and OAuth.

If you suspect that someone has compromised your account and you change the password, the OAuth token should be deletedEven though the documentation doesn't suggest it, the engineers that implemented it should make sure that if you change your credentials, the token is re....