Self-XSS to Site-Wide CSRF on Twitter

Cool, I liked it included blind alleys, too often people include just what worked to seem smarter.