So.. how long will it take Twitter to flick the trip switch? Thinking oEmbed implementation for #newtwitter has left gaping security hole?