Mails from Twitter | XSS

"Hey there.

Due to concern that your account may have been compromised in a phishing attack that took place off-Twitter, your password was reset. Please create a new password by opening this link in your browser: [...]"

Now THIS is nice...at least now they seem to realize how they failed with this problem