Wow, good catch. I wonder if anyone from Twitter reads HN. Seems like this is something they'd want to fix. So to replicate this bug, I'm guessing you just hav

Wow, good catch. I wonder if anyone from Twitter reads HN. Seems like this is something they'd want to fix. So to replicate this bug, I'm guessing you just have to get around 100 people to RT a tweet from a protected account. I imagine that isn't a common use case. But it's still a privacy issue.