ok so the "don't click" thing is an XSRF vulnerability on twitter. Read up: http://www.codinghorror.com/blog/archives/001171.html