Just do it. Log in. Change your password. And then think REALLY hard about which services you’re giving your password to. This phishing thing is getting stupid fast.
Go to http://www.twitter.com and log in. The setting is right here:
Just change it. It might not be you. But it probably is someone you know. Please retweet the holy hell out of this post.
Here’s why. (amended to please Steve Garfield)