Twitter's "Don't Click" clickjacking, explained

the most coherent explanation and how Twitter resolved it