Have Twitter stated that this is how the hack was accomplished? When I first read that SMS was used I assumed someone had just spoofed the phone number. My assu

Have Twitter stated that this is how the hack was accomplished? When I first read that SMS was used I assumed someone had just spoofed the phone number. My assumption was that the Twitter account has a verified phone number and that any SMS sent to the SMS->Tweet service would be published as long as the senderid was the same as the account phone number. That there was need to begin the SMS with a secret code/password to authenticate each SMS. And that is why the shut down the whole service because anyone can just spoof the senderid in a SMS.