5 ms·

* I've already confirmed that there has been no activity on my GMail account since the time I know I last used it, Luckily enough GMail tracks this and I don't

* I've already confirmed that there has been no activity on my GMail account since the time I know I last used it, Luckily enough GMail tracks this and I don't access me email any other way. * Title changed. * I had a good look at the emails when I first saw them. All the headers look as thought Twitter actually sent them, and all the links in them point back to the real Twitter site. They're not spam/phishes... * I already got a password reset for the account: the email it was setup with was aarongough@gmail.com, my actual email is aaron.gough@gmail.com (but we already know that GMail ignores periods in email addresses). I logged into the Twitter account after the password reset, tweeted a polite warning that they should not try this whole deal again then deleted the account. I'm not a rube, I'm a web-developer and have a good understanding of the various points where this could have gone wrong. I'm certain my GMail accoun has not been compromised (I have SSL set to permanently on with GMail, I don't use it on open wifi and my pw is a 10 char randised Alpha/Num/symbol string) I'm just interested in finding out how they managed to verify the twitter account without access to my email...

noodle 17y ago
fair enough. your wording set a different tone. the simple answer is this: you don't verify twitter accounts via email. all you need is to input an email address and you can start tweeting.
- aarongough 17y ago
  Ah bugger. I didn't realize that... I assume that these days everyone uses email verification as a best practice. Sorry if I came off snooty in my last comment, I appreciate your response and thoughts in general! The whole deal had me worried! I guess I can probably change my passwords back now :-p I also just looked back and saw how bad my spelling was on my last post, I guess I am more tired than I realized! Thanks again! -A
  - noodle 17y ago
    no worries. i guess your email just got scraped from somewhere and used to register a spam account? registration into email verification is starting to die off a bit in the newer web apps. mostly because they want to make the process of setting up an account as quick and easy as possible, provided the app is trivial enough (don't want to this for something like banking). email verification requires you to focus on something else besides the place you're registering for, as well as possibly waiting around for the email to come in.

noodle 17y ago

fair enough. your wording set a different tone. the simple answer is this: you don't verify twitter accounts via email. all you need is to input an email address and you can start tweeting.

aarongough 17y ago
Ah bugger. I didn't realize that... I assume that these days everyone uses email verification as a best practice. Sorry if I came off snooty in my last comment, I appreciate your response and thoughts in general! The whole deal had me worried! I guess I can probably change my passwords back now :-p I also just looked back and saw how bad my spelling was on my last post, I guess I am more tired than I realized! Thanks again! -A
- noodle 17y ago
  no worries. i guess your email just got scraped from somewhere and used to register a spam account? registration into email verification is starting to die off a bit in the newer web apps. mostly because they want to make the process of setting up an account as quick and easy as possible, provided the app is trivial enough (don't want to this for something like banking). email verification requires you to focus on something else besides the place you're registering for, as well as possibly waiting around for the email to come in.