Ok, I've done my homework, really. I get that you can't let
m.twitter.com do pre-populated status updates. Clickjacking, you
you say. I've read all of these threads that say so.
What about just letting us specify that we want to load the standard
page? Is that possible? Or could you make it so? It's possible to
send an iPhone user to twitter, which loads the mobile site, and then
if that user clicks for the standard view, the pre-populated status is
present. Is that really any different, security-wise, than visiting
the standard page (with pre-populated text) in the first place?