Twitter has announced that Direct Messages of 140 characters and longer sent via UberSocial and Twidroyd are currently visible to the public.
DMs longer than 140 chars sent via “d username” on UberSocial for Blackberry/iPhone & Twidroyd are currently visible publicly. [1/2]
They are currently working on a fix.
We’re working w/the dev to bring the apps into compliance w/our privacy policies; meanwhile, please be aware of this vulnerability. [2/2]
In February, Twitter suspended UberTwitter and Twidroyd but later reinstated the two apps.