“Okay, wild! We guessed someone else’s tweet ID! And as the IDs are time-dependent that means they were met with an instantaneous retweet—creepy. Also, it seems like Twitter doesn’t actually care about the username and just resolves URLs based on the tweet ID.”