Re: Twitter Users Pictures

2009-01-07 Thread Stuart

2009/1/7 Patrick Minton patr...@lexblog.com:
 Yes, but once you have the url, why store the actual .png locally?
 Sure, if a user changes their profile image you may have a broken link, but
 you can update profile info every hour or so, thus making it a non-issue.

I don't think Twitter would see it as a non-issue if your service has
more than a few users and you start requesting their details every
hour. A better option is to attempt to download their avatar and only
request their profile and update it if you get a 404.

-Stuart

-- 
http://stut.net/


Total updates

2009-01-07 Thread Fousa

Is there a way to fetch the total updates a user did throught the
twitter API? I just need the number? No other messages required!

Hope somebody can help me out!

Thnx!


Re: Displaying public user data / tweet this buttons only when user is authenticated - popup issues

2009-01-07 Thread Chris Heilmann



On Jan 7, 7:30 am, Alex Payne a...@twitter.com wrote:
 I intend to address this shortly. It's not the API's intended behavior.

cool. Despite my concerns here, thanks a lot for this whole exchange,
Damon and Chad! This is once again proof that the browser security
model is simply broken and we do need sandboxing of instances and
tabs. I for one don't use Twitter or Facebook in the browser, but
instead in Air apps.


Re: @oauth_now

2009-01-07 Thread Michael Lee

Can we just open a support ticket somewhere (like on Google Code) and
have everyone post the votes for OAuth to that rather than flooding
the discussion lists please?

(Yeah I know I'm just adding to it).

On Jan 6, 3:37 pm, Nicole Simon nee...@gmail.com wrote:
 I thought some of you might be 
 interested:http://pleasetwitterimplementoauthnow.com/

 Please follow the user @oauth_now http://twitter.com/oauth_now to show
 your support for a better, more secure Twitter! Once you follow
 @oauth_nowhttp://twitter.com/oauth_nowyou will get exactly two
 direct messages from the user
 @oauth_now http://twitter.com/oauth_now. One message asks you to retweet
 this message http://tinyurl.com/safertwitter and the second message will
 be sent out once Twitter finally has implemented OAuth for every Twitter
 user.

 Nicole

 --http://twitter.com/NicoleSimon//http://mit140zeichen.de/http://crueltobekind.org//http://beissholz.de

 skype: nicole.simon / mailto:nee...@gmail.com
 phone: +49 451 899 75 03 / mobile: +49 179 499 7076


Re: @oauth_now

2009-01-07 Thread Abraham Williams
http://code.google.com/p/twitter-api/issues/detail?id=2

On Wed, Jan 7, 2009 at 04:20, Michael Lee michael.lloyd@gmail.comwrote:


 Can we just open a support ticket somewhere (like on Google Code) and
 have everyone post the votes for OAuth to that rather than flooding
 the discussion lists please?

 (Yeah I know I'm just adding to it).

 On Jan 6, 3:37 pm, Nicole Simon nee...@gmail.com wrote:
  I thought some of you might be interested:
 http://pleasetwitterimplementoauthnow.com/
 
  Please follow the user @oauth_now http://twitter.com/oauth_now to
 show
  your support for a better, more secure Twitter! Once you follow
  @oauth_nowhttp://twitter.com/oauth_nowyou will get exactly two
  direct messages from the user
  @oauth_now http://twitter.com/oauth_now. One message asks you to
 retweet
  this message http://tinyurl.com/safertwitter and the second message
 will
  be sent out once Twitter finally has implemented OAuth for every Twitter
  user.
 
  Nicole
 
  --
 http://twitter.com/NicoleSimon//http://mit140zeichen.de/http://crueltobekind.org//http://beissholz.de
 
  skype: nicole.simon / mailto:nee...@gmail.com
  phone: +49 451 899 75 03 / mobile: +49 179 499 7076




-- 
| Abraham Williams | Web Developer | http://abrah.am
| Web608 | Community Evangelist | http://web608.org
| Micro-email: http://userscripts.org/scripts/show/38822
| This email is: [] blogable [x] ask first [] private


Re: Total updates

2009-01-07 Thread Cameron Kaiser

 Is there a way to fetch the total updates a user did throught the
 twitter API? I just need the number? No other messages required!

Look at the users/show method. The total updates are part of the fields.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- LOADSTANDARD DISCLAIMER,8,1 --


Re: Expect Header Issue for .NET developers

2009-01-07 Thread Vivek

Hi,

thanxs for replying, i have tried as per you mention.

But no success, still getting (417) error.

Vivek Shrivastav
Invitratech India

On Jan 6, 7:01 pm, Maxfield Pool maxfield.p...@gmail.com wrote:
 Try moving your System.Net.ServicePointManager.Expect100Continue = false
 higher in your method before you create your WebRequest object, that should
 help.



 On Tue, Jan 6, 2009 at 6:49 AM, Vivek vivek.shrivas...@gmail.com wrote:

  Hi,

  We are getting same (417) error back in our website.

  code:
  public string ExecutePostCommand(string url, string userName, string
  password, string data)
     {
         WebRequest request = WebRequest.Create(url);
         if (!string.IsNullOrEmpty(userName)  !string.IsNullOrEmpty
  (password))
         {
             request.Credentials = new NetworkCredential(userName,
  password);
             request.ContentType = application/x-www-form-urlencoded;
             request.Method = POST;

             if (!string.IsNullOrEmpty(TwitterClient))
             {
                 request.Headers.Add(X-Twitter-Client,
  TwitterClient);
             }

             if (!string.IsNullOrEmpty(TwitterClientVersion))
             {
                 request.Headers.Add(X-Twitter-Version,
  TwitterClientVersion);
             }

             if (!string.IsNullOrEmpty(TwitterClientUrl))
             {
                 request.Headers.Add(X-Twitter-URL,
  TwitterClientUrl);
             }

             if (!string.IsNullOrEmpty(Source))
             {
                 data += source= + HttpUtility.UrlEncode(Source);
             }

             byte[] bytes = Encoding.UTF8.GetBytes(data);

             request.ContentLength = bytes.Length;
             using (Stream requestStream = request.GetRequestStream())
             {
                 requestStream.Write(bytes, 0, bytes.Length);

                 System.Net.ServicePointManager.Expect100Continue =
  false;
                 using (WebResponse response = request.GetResponse())
                 {
                     using (StreamReader reader = new StreamReader
  (response.GetResponseStream()))
                     {
                         return reader.ReadToEnd();
                     }
                 }
             }
         }

         return null;
     }

  Please help me out,

  Thanxs

  Vivek Shrivastav

  On Jan 2, 1:06 am, Joint Contact i...@arbutusinc.com wrote:
   Thanks for posting this information. We've applied these changes and
   our application is back to normal.

   Regards;

   -Wayne

   On Dec 23 2008, 8:31 pm, JakeS jakesteven...@gmail.com wrote:

Looks like twitter is updating something and their servers are
returning error 417 for a lot of requests.  I looked into it and found
that .NET automatically includes an Expect header containing 100-
continue on every request unless you specifically tell it not to.

So for any .NET devs having trouble, you can set
System.Net.ServicePointManager.Expect100Continue = false before making
your request to get past this issue.- Hide quoted text -

   - Show quoted text -- Hide quoted text -

 - Show quoted text -


NetBeans and Twitter

2009-01-07 Thread Hulles

pIf anyone is interested, I have recently posted a couple of
articles about creating a desktop Java application for Twitter using
the NetBeans open-source IDE. They are tutorial-flavored articles and
make heavy use of the new strongTwitter RESTful SaaS/strong gizmo
in NetBeans. The project is called Canary (too cute I know, tweet
tweet). You can find the Canary articles at the following links:/p
ul
lia href='http://hulles.supersized.org/archives/15-The-Canary-
Project.html'The Canary Project/a/li
lia href='http://hulles.supersized.org/archives/16-Canary-II-
Feather-Straightening-and-Cage-Gilding.html'Canary II: Feather-
Straightening and Cage Gilding/a/li
lia href='http://hulles.supersized.org/archives/17-Canary-III-Its-
Not-A-Turkey-Yet.html'Canary III: It's Not A Turkey Yet/a/li
/ul
pLinks to the Java source code and a runnable jar file are included
at the end of each article. I have also recently created a Google Code
project for Canary at a href='http://code.google.com/p/
canary/'http://code.google.com/p/canary//a. If you're interested in
participating please let me know. I intend to update the code for
NetBeans 6.5 Any Day Now./p
pAnd speaking of NetBeans 6.5 and the Twitter RESTful SaaS gizmo, I
recently posted a a href='http://www.netbeans.org/issues/show_bug.cgi?
id=155882'bug report/a to NetBeans about their gizmo breaking when
it gets nilclasses back from Twitter in NetBeans 6.5. The problem
doesn't seem to have exactly sunk in for them yet, but you can find an
article and a workaround for it in a post called, appropriately, a
href='http://hulles.supersized.org/archives/21-NB-6.5-Twitter-SaaS-
Bug.html'NB 6.5 Twitter SaaS Bug/a/p
pHopefully this message editor supports HTML markup, otherwise
there'll be a lot of garbage in this post! - Hulles/p


Why App devs have to be careful about what their colleagues do

2009-01-07 Thread Nicole Simon
I am adding these notes because I believe every App Dev should
strongly consider the implications their app has on the whole ecosystem
of apps - and what their colleagus are doing. All it takes is one app to be
really stupid to challenge whatever you are doing and create a really bad
mood.

Want another, not directly app related example?
http://www.mytweetspace.com/

this site first got on my radar because I scan Twitter Apps for writing
about
them. It used a picture of Chris Messina for advertisement on the top -
of course without asking him and I am pretty sure the others at the
top are some users they did not ask either.

Given that I would bet that in the same way most of their offered
pictures are not  licenced either.

Why is this relevant? Well, look how they are playing it:
http://marketplace.sitepoint.com/auctions/55002


Re: Displaying public user data / tweet this buttons only when user is
authenticated - popup issues

On Wed, Jan 7, 2009 at 8:30 AM, Alex Payne a...@twitter.com wrote:


 I intend to address this shortly. It's not the API's intended behavior.


Of course it is not. You go for the 'oh would'nt it be cool' first and have
to implement the I can't believe people would do this' later.

Thankfully most 'security people' have a sense of honor and most
bad guys do not have the intelligence to make use of these tools.
You learn to anticipate what bad people can do and try to be one
up with them.

As for normal people there is only two ways to make them use
security: Restrict their access - which is what I bet most people on
this list do with everybody they have to 'support' - and scare the
shit out of them.

I'd love to have Chad post the proof of concept after this has been
fixed - the work is done and it would be a good example to give
to others developping apps


Nicole



-- 
Suche Beta-Tester für Experiment:
Journalisten suchen Blogger - http://bloxpert.de/

Kontakt:
http://twitter.com/NicoleSimon // http://mit140zeichen.de/
http://crueltobekind.org // http://beissholz.de

skype: nicole.simon / mailto:nee...@gmail.com
phone: +49 451 899 75 03 / mobile: +49 179 499 7076


Re: IP ranges from The Planet will be blocked

2009-01-07 Thread Terry Jones

A little off-topic:

Have Twitter detected abuse coming from Amazon EC2 IP address ranges?

I'm not building a Twitter app, but I'm very curious to know what the
reputation of Amazon's IP blocks is like. I imagine Amazon have plenty of
EC2 instances running code written by evildoers. I wonder what they're like
at reacting to reports of abuse etc. This also includes people using them
for SMTP (of course).

Terry


Re: IP ranges from The Planet will be blocked

2009-01-07 Thread mservice

If you are worried about losing your twitter capability at The Planet,
then you should consider moving over to Rackspace. We moved all of our
servers and clients servers (in excess of 50 servers) to Rackspace and
have been using them since 2003 and always get great support -
fanatical support. Their account teams and their solution partners
make the migration process simple and always go above and beyond. You
won’t have to worry about losing your Twitter capabilities again.

On Jan 6, 1:52 pm, Alex Payne a...@twitter.com wrote:
 I've put our operations staff in touch with someone from The Planet.
 We'll see what happens!



 On Tue, Jan 6, 2009 at 08:35, KHazard khaz...@gmail.com wrote:

  After coming across this thread, I've been investigating the abuse
  reports on The Planet's side. We located a complaint sent yesterday
  but were unable to locate any other complaints from the address
  sending the complaint or any other twitter.com email ... The complaint
  was responded to with a thorough, non-canned response requesting
  evidence and we haven't had any additional responses to investigate
  any further. If you have a chance, can you follow up with the abuse
  deparment's response to your initial report?

  On Jan 6, 10:13 am, zbowling zbowl...@gmail.com wrote:
  Is block at a routing level that you or is it going to be an API
  level? What I'm wondering is if read only access to my updates will
  still work. I have features of my various blogs that update to twitter
  but more importantly they show my twitter status.

  Also a few of my development tools I've written for Twitter I host at
  The Planet.

  I'm not really setup to move at the moment. Been with The Planet for 4
  years (my servers up times is are at 2.5 years now).

  The only problem I ever have is that someone outright blocks the IP
  range. The Planet gives benefit of the doubt to its customers usually
  and that is because of their uptime guarantee policy because if they
  pull everything that has an abuse claim and it turns out to false (and
  in many cases hard to prove) then they would have to pay for the
  downtime. A lot of customers are hosting their own shared or VPS
  hosting solutions at The Planet, so many times the violators are
  customers of customers so it takes time to trickle down.

  Before the EV1 and The Planet merger (to create the new The Planet),
  I was with the old The Planet. In that system, the second there was an
  abuse claim, I got an email and their support engineer called me. That
  system is still in place but they no longer call, they just email
  apparently (but its been years since I got an abuse claim). You have a
  few days before they take action. In fully managed servers, they may
  login and try to resolve it if you allow them and post change of
  management procedures.

  I'm curious though. The rate of issues maybe directly correlated to
  the size of The Planet. They have over 8 data centers in Houston and
  Dallas (I've visited 3 of them here in Dallas when I used to have a
  private rack). I would estimate they have well in excess of 200,000
  servers guessing from the size of the data centers I seen. They pretty
  much own 2 floors at the Infomart here in Dallas 
  (http://www.infomartusa.com) and when they grew out of that, they built a 
  huge
  build across the street.

  I don't know. A single customer like me doesn't have a lot of weight
  to push an organization like this and I don't want my access to
  Twitter to get yanked.

  Can you whitelist my range? 70.86.83.50-70.86.83.63

  Thanks
  Zac Bowlinghttp://zbowling.com/

  On Jan 5, 6:17 pm, Alex Payne a...@twitter.com wrote:

   Unfortunately, no, not until we hear back from The Planet.

   On Mon, Jan 5, 2009 at 14:21, zbowling zbowl...@gmail.com wrote:

NOOO... :-)

My 3 servers are at The Planet.  They are the worlds largest managed
hosting provider so its a significant chunk of the internet so I'm
sure there will be an outcry.

Can you whitelist my range?
70.86.83.50-70.86.83.63

Zac Bowling
   http://zbowling.com/

On Jan 5, 4:05 pm, Alex Payne a...@twitter.com wrote:
Our operations team has informed me that we'll soon be blacklisting
IPs originating at hosting provider The Planet
(http://www.theplanet.com/). We've attempted to resolve a number of
abuse complaints with them over a long period of time and have not
received an acceptable response. If your service or application is
hosted at The Planet, please be aware that this will impact your
ability to talk directly to the Twitter API.

--
Alex Payne - API Lead, Twitter, Inc.http://twitter.com/al3x

   --
   Alex Payne - API Lead, Twitter, Inc.http://twitter.com/al3x

 --
 Alex Payne - API Lead, Twitter, Inc.http://twitter.com/al3x


Re: IP ranges from The Planet will be blocked

2009-01-07 Thread Jeremy Darling
If you like Rackspace, and don't need direct server access I strong
recommend their sister company MOSSO as well (http://www.mosso.com/).  We
recently moved over to them to get cloud hosting and with over 60 sites have
never had a better experience.  I can give a few down sides to MOSSO that
Rackspace fixes but this is simply due to the access levels you have at
Rackspace over MOSSO (IE: You can't install ffMpeg on a MOSSO server).

 - Jeremy

On Wed, Jan 7, 2009 at 8:26 AM, mservice adwords...@sisintl.com wrote:


 If you are worried about losing your twitter capability at The Planet,
 then you should consider moving over to Rackspace. We moved all of our
 servers and clients servers (in excess of 50 servers) to Rackspace and
 have been using them since 2003 and always get great support -
 fanatical support. Their account teams and their solution partners
 make the migration process simple and always go above and beyond. You
 won't have to worry about losing your Twitter capabilities again.

 On Jan 6, 1:52 pm, Alex Payne a...@twitter.com wrote:
  I've put our operations staff in touch with someone from The Planet.
  We'll see what happens!
 
 
 
  On Tue, Jan 6, 2009 at 08:35, KHazard khaz...@gmail.com wrote:
 
   After coming across this thread, I've been investigating the abuse
   reports on The Planet's side. We located a complaint sent yesterday
   but were unable to locate any other complaints from the address
   sending the complaint or any other twitter.com email ... The complaint
   was responded to with a thorough, non-canned response requesting
   evidence and we haven't had any additional responses to investigate
   any further. If you have a chance, can you follow up with the abuse
   deparment's response to your initial report?
 
   On Jan 6, 10:13 am, zbowling zbowl...@gmail.com wrote:
   Is block at a routing level that you or is it going to be an API
   level? What I'm wondering is if read only access to my updates will
   still work. I have features of my various blogs that update to twitter
   but more importantly they show my twitter status.
 
   Also a few of my development tools I've written for Twitter I host at
   The Planet.
 
   I'm not really setup to move at the moment. Been with The Planet for 4
   years (my servers up times is are at 2.5 years now).
 
   The only problem I ever have is that someone outright blocks the IP
   range. The Planet gives benefit of the doubt to its customers usually
   and that is because of their uptime guarantee policy because if they
   pull everything that has an abuse claim and it turns out to false (and
   in many cases hard to prove) then they would have to pay for the
   downtime. A lot of customers are hosting their own shared or VPS
   hosting solutions at The Planet, so many times the violators are
   customers of customers so it takes time to trickle down.
 
   Before the EV1 and The Planet merger (to create the new The Planet),
   I was with the old The Planet. In that system, the second there was an
   abuse claim, I got an email and their support engineer called me. That
   system is still in place but they no longer call, they just email
   apparently (but its been years since I got an abuse claim). You have a
   few days before they take action. In fully managed servers, they may
   login and try to resolve it if you allow them and post change of
   management procedures.
 
   I'm curious though. The rate of issues maybe directly correlated to
   the size of The Planet. They have over 8 data centers in Houston and
   Dallas (I've visited 3 of them here in Dallas when I used to have a
   private rack). I would estimate they have well in excess of 200,000
   servers guessing from the size of the data centers I seen. They pretty
   much own 2 floors at the Infomart here in Dallas (
 http://www.infomartusa.com) and when they grew out of that, they built a
 huge
   build across the street.
 
   I don't know. A single customer like me doesn't have a lot of weight
   to push an organization like this and I don't want my access to
   Twitter to get yanked.
 
   Can you whitelist my range? 70.86.83.50-70.86.83.63
 
   Thanks
   Zac Bowlinghttp://zbowling.com/
 
   On Jan 5, 6:17 pm, Alex Payne a...@twitter.com wrote:
 
Unfortunately, no, not until we hear back from The Planet.
 
On Mon, Jan 5, 2009 at 14:21, zbowling zbowl...@gmail.com wrote:
 
 NOOO... :-)
 
 My 3 servers are at The Planet.  They are the worlds largest
 managed
 hosting provider so its a significant chunk of the internet so I'm
 sure there will be an outcry.
 
 Can you whitelist my range?
 70.86.83.50-70.86.83.63
 
 Zac Bowling
http://zbowling.com/
 
 On Jan 5, 4:05 pm, Alex Payne a...@twitter.com wrote:
 Our operations team has informed me that we'll soon be
 blacklisting
 IPs originating at hosting provider The Planet
 (http://www.theplanet.com/). We've attempted to resolve a number
 of
 abuse complaints with 

Re: IP ranges from The Planet will be blocked

2009-01-07 Thread Anthony Eden

Amazon's EC2 IP ranges are essentially unusable for SMTP since they
have been blacklisted. I have to use another host to handle outbound
SMTP traffic.

As for traffic to Twitter, most likely you'd want to use an elastic IP
address to get whitelisted.

Sincerely,
Anthony Eden

On Wed, Jan 7, 2009 at 9:51 AM, Terry Jones terry.jo...@gmail.com wrote:

 A little off-topic:

 Have Twitter detected abuse coming from Amazon EC2 IP address ranges?

 I'm not building a Twitter app, but I'm very curious to know what the
 reputation of Amazon's IP blocks is like. I imagine Amazon have plenty of
 EC2 instances running code written by evildoers. I wonder what they're like
 at reacting to reports of abuse etc. This also includes people using them
 for SMTP (of course).

 Terry




-- 
GMU/IT d- s: a32 C++()$ UL@ P--- L+(++) !E W+++$ !N o? K? w--- !O
M++ V PS+ PE Y PGP t+ !5 X- R tv b++ DI+ D++ G- e++ h r+++ y**

http://anthony.mp


twitter keyword tracking?

2009-01-07 Thread charris1980

is tracking back in twitter yet?  i put in track word and it
didn't work, just posted my tweet.  tweetbeep.com is down so can't use
that anymore.  any suggestions to track keywords throughout twitter?


Re: twitter keyword tracking?

2009-01-07 Thread Brian Gilham

Use search.twitter.com.
-Original Message-
From: charris1980 christopher.jason.har...@gmail.com

Date: Wed, 7 Jan 2009 07:45:09 
To: Twitter Development Talktwitter-development-talk@googlegroups.com
Subject: twitter keyword tracking?



is tracking back in twitter yet?  i put in track word and it
didn't work, just posted my tweet.  tweetbeep.com is down so can't use
that anymore.  any suggestions to track keywords throughout twitter?



Re: twitter keyword tracking?

2009-01-07 Thread Nicole Simon
On Wed, Jan 7, 2009 at 4:45 PM, charris1980 
christopher.jason.har...@gmail.com wrote:


 is tracking back in twitter yet?  i put in track word and it
 didn't work, just posted my tweet.  tweetbeep.com is down so can't use
 that anymore.  any suggestions to track keywords throughout twitter?


search.twitter.com
 feed
 your favourite feed2email service

might need more work on higher traffic topics
 search api as described in the documentation

I think tools like tweetdeek implement the search as well.
Nicole


jquery bug or twitter bug? on api call to /users/show/[username].json

2009-01-07 Thread Ivan

Hi,

I'm cofounder of Tipjoy - we just made payment on twitter. Check it
out: http://tipjoy.com/twitter

We have a fun project related to this that I'm working on right now.

I'm using jquery to parse the twitter account info from the API.
Disclaimer: I'm learning javascript JIT.

There is either a bug in my javascript, or the return from the twitter
API is wrong.

Here is some simplified code:

$(document).ready(function(){
var url = http://twitter.com/users/show/; + [the username] +
.json?callback=?;
$.getJSON(url,
function(data){
if( data.error ){
alert(username doesn't exist)
}
else{
alert(that username exists)
}
}
);
});

This code uses jquery's getJSON to grab the account info for a given
username.

The return for a correct username is:
({...});

That wrapping is to pass it to the callback unnamed function.

But this code doesn't work for a username that doesn't exist. The
function doesn't even get called, and the alert doesn't show up.

Putting this is a browser
http://twitter.com/users/show/someBadUsername.json?callback=?

Returns:
{request:\/users\/show\/someBadUsername.json?
callback=?,error:Not found}

Should that be wrapped in ({...}); ? Is that a bug on twitter's side?

Or is there something I'm doing wrong in jquery?

I looked at the code for this project, and it looks like they are
using jquery to access summize in the same way I'm grabbing from the
twitter api.
http://tweet.seaofclouds.com/
http://github.com/seaofclouds/tweet/tree/master/javascripts/jquery.tweet.js

Any help would be greatly appreciated.

Thanks,
Ivan
http://tipjoy.com


Re: jquery bug or twitter bug? on api call to /users/show/[username].json

2009-01-07 Thread Matt Sanford

Hi Ivan,

The jQuery getJSON replaces the trailing ? with a function name  
like jsonp4728701093601231 [1]. To test you need to use something more  
like:


$ curl 'http://twitter.com/users/show/someBadUsername.json?callback=foo'
foo({request:\/users\/show\/someBadUsername.json? 
callback=foo,error:Not found})


It looks like the Twitter API is working correctly. One thing to  
note is that the Twitter API is returning HTTP 404. I am pretty sure  
the jQuery getJSON method is only calling your function on success  
(HTTP 200). I'm not totally sure but the jQuery ajaxError event  
handler may help do what you need.


Thanks;
  — Matt Sanford / @mzsanford

[1] - jsonp + currentTimeMillis

On Jan 7, 2009, at 07:48 AM, Ivan wrote:



Hi,

I'm cofounder of Tipjoy - we just made payment on twitter. Check it
out: http://tipjoy.com/twitter

We have a fun project related to this that I'm working on right now.

I'm using jquery to parse the twitter account info from the API.
Disclaimer: I'm learning javascript JIT.

There is either a bug in my javascript, or the return from the twitter
API is wrong.

Here is some simplified code:

$(document).ready(function(){
   var url = http://twitter.com/users/show/; + [the username] +
.json?callback=?;
   $.getJSON(url,
   function(data){
   if( data.error ){
   alert(username doesn't exist)
   }
   else{
   alert(that username exists)
   }
   }
   );
});

This code uses jquery's getJSON to grab the account info for a given
username.

The return for a correct username is:
({...});

That wrapping is to pass it to the callback unnamed function.

But this code doesn't work for a username that doesn't exist. The
function doesn't even get called, and the alert doesn't show up.

Putting this is a browser
http://twitter.com/users/show/someBadUsername.json?callback=?

Returns:
{request:\/users\/show\/someBadUsername.json?
callback=?,error:Not found}

Should that be wrapped in ({...}); ? Is that a bug on twitter's side?

Or is there something I'm doing wrong in jquery?

I looked at the code for this project, and it looks like they are
using jquery to access summize in the same way I'm grabbing from the
twitter api.
http://tweet.seaofclouds.com/
http://github.com/seaofclouds/tweet/tree/master/javascripts/jquery.tweet.js

Any help would be greatly appreciated.

Thanks,
Ivan
http://tipjoy.com




Re: Will we see Twitter Connect soon

2009-01-07 Thread Daniel Sims

No they didn't, Google is just using the Twitter API like everyone
else.  Google asks for your twitter name and password, which IMO is
flirting with doing-evil.

I think that making Twitter an OpenID provider is going too far, I
would rather see Twitter be a Relying Party.  Having a reliable and
secure OpenID, then associating your twitter username and other
details to it is the best option, IMO.  It would be nice if the OpenID
providers stored this info and passed it along automatically to other
RPs.

Also, people can change their twitter name, so it couldn't be in the
OpenID.  They would have to do a yahoo-ish implementation.

On Jan 5, 7:02 pm, Andrew Badera and...@badera.us wrote:
 Twitter already partnered with Google's FriendConnect ...

 Thanks-
 - Andy Badera
 - and...@badera.us
 - (518) 641-1280
 - Google me:http://www.google.com/search?q=andrew+badera



 On Mon, Jan 5, 2009 at 5:15 PM, Twitblogs samkse...@googlemail.com wrote:

  When twitter finally supports oauth what user autentication system
  will they use? With our application we will remove the need for
  username/password but that means users will need to still login to our
  service for authentication.

  Of course we could use Google Friend Connect or JanRain's RPXonline to
  authenticate users but then we would have to map this user account to
  the users twitter account via oauth. But it seems a missed opportunity
  to me.

 www.twitter.com/usernameis a RESTful address that could be an openid
  endpoint.  The profile could support SREG. Twitter connect could be a
  third party authentication service for 3rd party twitter developer
  apps.

  The two are not linked oauth on its own will be great but openid
  (twitter connect) and oauth would be better.

  What do you think?


Re: twitter keyword tracking?

2009-01-07 Thread Chad Etzel

/shameless plug

http://tweetgrid.com/

not a perfect solution for track since you have to actively watch
the tweets, but still it's something.

-Chad

On Wed, Jan 7, 2009 at 10:48 AM, Nicole Simon nee...@gmail.com wrote:


 On Wed, Jan 7, 2009 at 4:45 PM, charris1980
 christopher.jason.har...@gmail.com wrote:

 is tracking back in twitter yet?  i put in track word and it
 didn't work, just posted my tweet.  tweetbeep.com is down so can't use
 that anymore.  any suggestions to track keywords throughout twitter?

 search.twitter.com
 feed
 your favourite feed2email service

 might need more work on higher traffic topics
 search api as described in the documentation

 I think tools like tweetdeek implement the search as well.
 Nicole



Re: twitter keyword tracking?

2009-01-07 Thread charris1980

cool thanks all.  i'll have to look into tweetgrid as well.  friend
also suggested http://twilert.com/, trying this now.

CH



On Jan 7, 10:54 am, Chad Etzel jazzyc...@gmail.com wrote:
 /shameless plug

 http://tweetgrid.com/

 not a perfect solution for track since you have to actively watch
 the tweets, but still it's something.

 -Chad



 On Wed, Jan 7, 2009 at 10:48 AM, Nicole Simon nee...@gmail.com wrote:

  On Wed, Jan 7, 2009 at 4:45 PM, charris1980
  christopher.jason.har...@gmail.com wrote:

  is tracking back in twitter yet?  i put in track word and it
  didn't work, just posted my tweet.  tweetbeep.com is down so can't use
  that anymore.  any suggestions to track keywords throughout twitter?

  search.twitter.com
  feed
  your favourite feed2email service

  might need more work on higher traffic topics
  search api as described in the documentation

  I think tools like tweetdeek implement the search as well.
  Nicole- Hide quoted text -

 - Show quoted text -


Re: @oauth_now

2009-01-07 Thread Xeoncross

You know, given the trouble the twitter site keeps having - I am
losing faith in the Ruby platform. Slow site, constant downtime,
developers that don't implement important things (my only guess is)
because of the work and trouble involved with the Ruby Language. This
is almost as bad as a Microsoft product.


Re: @oauth_now

2009-01-07 Thread Stuart

2009/1/7 Xeoncross xeoncr...@gmail.com:
 You know, given the trouble the twitter site keeps having - I am
 losing faith in the Ruby platform. Slow site, constant downtime,
 developers that don't implement important things (my only guess is)
 because of the work and trouble involved with the Ruby Language. This
 is almost as bad as a Microsoft product.

Bloody nora, that's a few giant leaps to make for an ignorant developer.

That's all I've got to say about that.

-Stuart

-- 
http://stut.net/


Re: @oauth_now

2009-01-07 Thread Alex Payne

This thread is so locked.

On Wed, Jan 7, 2009 at 12:54, Andrew Badera and...@badera.us wrote:
 And it's a horse that's been beaten and invalidated many moons ago ...

 Thanks-
 - Andy Badera
 - and...@badera.us
 - (518) 641-1280
 - Google me: http://www.google.com/search?q=andrew+badera



 On Wed, Jan 7, 2009 at 3:46 PM, Stuart stut...@gmail.com wrote:

 2009/1/7 Xeoncross xeoncr...@gmail.com:
  You know, given the trouble the twitter site keeps having - I am
  losing faith in the Ruby platform. Slow site, constant downtime,
  developers that don't implement important things (my only guess is)
  because of the work and trouble involved with the Ruby Language. This
  is almost as bad as a Microsoft product.

 Bloody nora, that's a few giant leaps to make for an ignorant developer.

 That's all I've got to say about that.

 -Stuart

 --
 http://stut.net/





-- 
Alex Payne - API Lead, Twitter, Inc.
http://twitter.com/al3x


Re: alpha test of a new service: Tweetpass

2009-01-07 Thread Chad Etzel

By logging into http://tweetpass.com/api/ do you automatically store
the password somewhere?  If so, how is it stored? encrypted? You
should really tell the users what is happening (even tho it is in
alpha stage).

Also, the /api/ page does not appear to have htmlbody tags?

It also doesn't appear that I am able to change anything on my
homepage or save it... am I missing something? or is this still in
implementation phase?

Logging Out did not actually log me out as I was able to return to
/api/ without needing to re-enter any user/pass info...

This site sounds like a good idea (until we see what Twitter's OAuth
looks like), but looks like it still needs some work before it is
usable?

I apologize if my tone seems critical, but this seems like one of
those services you have to get right the first time or risk total
user abandonment.

-Chad

On Wed, Jan 7, 2009 at 2:58 PM, Brian Hendrickson
br...@openmicroblogger.com wrote:

 Hi Twitter-dev-talk,

 I would appreciate your feedback on a new service I've been working
 on, it's called Tweetpass. I was motivated to get it working after I
 wrote a comment about Twitter API security on Rahsheen's blog this
 past weekend. http://sheenonline.biz/ -- I decided that instead of
 complaining I should try to make a difference of some kind.

 Tweetpass makes fresh, disposable Twitter passwords, which can be used
 at (compatible) 3rd-party Twitter services. (there are none, yet)
 Also, it makes it simple for the end user to delete the passwords
 individually, and toggle the API methods individually.

 It works like this:

 Twitter microbloggers:

   a) submit their nicknames at http://tweetpass.com
   b) look in their Replies tab and click a link
   c) do Basic Authentication against twitter.com
   d) receive Tweetpass passwords to use at (compatible) 3rd-party
 Twitter services

   e) turn API methods on/off per-password
   f)  delete passwords anytime

 Developers:

   a) change their code to (conditionally) call the tweetpass.com API
 (see below)
   b) put the Tweetpass logo on their site

 Twitter API methods:

 twitter.com/statuses/update.json
 twitter.com/statuses/friends_timeline.json
 twitter.com/statuses/user_timeline.json
 twitter.com/statuses/show/ID.json
 twitter.com/USERNAME
 twitter.com/USERNAME/statuses/STATUS
 search.twitter.com/search?q=HASHTAG

 Tweetpass API methods (so far):

 tweetpass.com/statuses/update.json
 tweetpass.com/statuses/friends_timeline.json
 tweetpass.com/statuses/user_timeline.json
 tweetpass.com/statuses/show/ID.json
 tweetpass.com/USERNAME
 tweetpass.com/USERNAME/statuses/STATUS
 search.tweetpass.com/search?q=HASHTAG

 How you can help:

 If you're a developer who happens to use only these few API methods,
 you can test your service against the Tweetpass API. The simplest
 thing to do is search and replace twitter.com/ with tweetpass.com/
 in your code. Then you can proceed to http://tweetpass.com to get your
 disposable passwords.

 Thanks for your feedback and ideas about Tweetpass.

 -- Brian
 http://tweetpass.com
 503.358.7501





Re: Twitter Users Pictures

2009-01-07 Thread Patrick Minton

Since you get user objects 100 at a time, you would have to query  
about an unreasonable number of users for this to be a problem imho.

Lextweet.com follows about 700 lawyers.  This may grow to 2000.  20  
API calls an hour is a problem for the API?  I doubt it.  If it is,  
though, I'd be more than happy to reduce the frequency.

On Jan 7, 2009, at 1:45 AM, Stuart wrote:


 2009/1/7 Patrick Minton patr...@lexblog.com:
 Yes, but once you have the url, why store the actual .png locally?
 Sure, if a user changes their profile image you may have a broken  
 link, but
 you can update profile info every hour or so, thus making it a non- 
 issue.

 I don't think Twitter would see it as a non-issue if your service has
 more than a few users and you start requesting their details every
 hour. A better option is to attempt to download their avatar and only
 request their profile and update it if you get a 404.

 -Stuart

 -- 
 http://stut.net/

Patrick Minton
IT Director
LexBlog, Inc.
+1 206 697 4548





Re: Twitter Users Pictures

2009-01-07 Thread Stuart

2009/1/7 Patrick Minton patr...@lexblog.com:
 Since you get user objects 100 at a time, you would have to query
 about an unreasonable number of users for this to be a problem imho.

 Lextweet.com follows about 700 lawyers.  This may grow to 2000.  20
 API calls an hour is a problem for the API?  I doubt it.  If it is,
 though, I'd be more than happy to reduce the frequency.

My point was that there's no need to hit the API at all unless you get
a 404 from the avatar URL. Why call the API if you don't need to?
Seems like a pointless waste of resources to me.

-Stuart

-- 
http://stut.net/

 On Jan 7, 2009, at 1:45 AM, Stuart wrote:


 2009/1/7 Patrick Minton patr...@lexblog.com:
 Yes, but once you have the url, why store the actual .png locally?
 Sure, if a user changes their profile image you may have a broken
 link, but
 you can update profile info every hour or so, thus making it a non-
 issue.

 I don't think Twitter would see it as a non-issue if your service has
 more than a few users and you start requesting their details every
 hour. A better option is to attempt to download their avatar and only
 request their profile and update it if you get a 404.

 -Stuart

 --
 http://stut.net/

 Patrick Minton
 IT Director
 LexBlog, Inc.
 +1 206 697 4548






Passing curl to XML

2009-01-07 Thread thegreatbund...@gmail.com

Hello everyone,
I'm working on my first Twitter-related project and am very excited to
be doing so.

What I'm trying to do is create a site that lists my
friends_timeline. With that account, I'm following a group of
individuals in a particular industry.

Right now, I've been able to use curl to display the raw XML. Now I'm
struggling to display that data the way I need to.

Here's what I have written.

blockquote
?php
// set user/pswd
$username = '123';
$password = 'abc';

// create a new curl resource
$ch = curl_init();

// set URL and options
curl_setopt($ch, CURLOPT_URL, http://twitter.com/statuses/
friends_timeline/ACCOUNT+NAME.xml);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERPWD, $username:$password);

// execute and pass to browser
$str = curl_exec($ch);

// close curl resource
curl_close($ch);

$xml = simplexml_load_string ($str);
foreach ($xml-status as $status) {
print $status-text . \n;
}

?/blockquote

Again, this outputs the last 20 entries in friends_outline as XML
just fine, but fails at the array. The following appears immediately
afterward.

blockquote
Warning: simplexml_load_string() [function.simplexml-load-string]:
Entity: line 1: parser error : Start tag expected, '' not found in /
projects/tweets/test/curltest.php on line 20

Warning: simplexml_load_string() [function.simplexml-load-string]: 1
in /projects/tweets/test/curltest.php on line 20

Warning: simplexml_load_string() [function.simplexml-load-string]: ^
in /projects/tweets/test/curltest.php on line 20

Warning: Invalid argument supplied for foreach() in /projects/tweets/
test/curltest.php on line 21/blockquote

I only have rudimentary PHP skills, but I'm a fairly quick study. Any
advice is appreciated!

Thanks in advance for the help!

--Alex


Search API screen return 404

2009-01-07 Thread Michael Lee

Hello All,
  I'm searching for all the replies from a specified ID
(1103044621) but the page is returning a 404. However if I change the
since_id (up or down) everything works fine. The name I search for
does not matter. If you change mrmlk to anything else I still get a
404.

404:
http://search.twitter.com/search.atom?lang=enq=+to%3Amrmlksince_id=1103044621

Works fine:
http://search.twitter.com/search.atom?lang=enq=+to%3Amrmlksince_id=1103044620
http://search.twitter.com/search.atom?lang=enq=+to%3Amrmlksince_id=1103044622

Any idea what is going on, and why post 1103044621 is special.

Thanks
Mike


Re: when did a friendship started

2009-01-07 Thread Alex Payne

No.

On Wed, Jan 7, 2009 at 15:13, Ruth yac...@gmail.com wrote:

 is there a way in the Api to know when a friendship created between
 two users?




-- 
Alex Payne - API Lead, Twitter, Inc.
http://twitter.com/al3x


Re: Passing curl to XML

2009-01-07 Thread Chad Etzel

I think the XML parser will choke on the headers that are being
returned from your curl_exec.

Try setting this instead:
curl_setopt($ch, CURLOPT_HEADER, false);

You'll also want to set this:
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);

so that the XML is actually stored in $str when curl_exec returns;

Try that out,
-Chad

On Wed, Jan 7, 2009 at 6:29 PM, thegreatbund...@gmail.com
thegreatbund...@gmail.com wrote:

 Hello everyone,
 I'm working on my first Twitter-related project and am very excited to
 be doing so.

 What I'm trying to do is create a site that lists my
 friends_timeline. With that account, I'm following a group of
 individuals in a particular industry.

 Right now, I've been able to use curl to display the raw XML. Now I'm
 struggling to display that data the way I need to.

 Here's what I have written.

 blockquote
 ?php
 // set user/pswd
 $username = '123';
 $password = 'abc';

 // create a new curl resource
 $ch = curl_init();

 // set URL and options
 curl_setopt($ch, CURLOPT_URL, http://twitter.com/statuses/
 friends_timeline/ACCOUNT+NAME.xml);
 curl_setopt($ch, CURLOPT_HEADER, 1);
 curl_setopt($ch, CURLOPT_USERPWD, $username:$password);

 // execute and pass to browser
 $str = curl_exec($ch);

 // close curl resource
 curl_close($ch);

 $xml = simplexml_load_string ($str);
 foreach ($xml-status as $status) {
print $status-text . \n;
 }

 ?/blockquote

 Again, this outputs the last 20 entries in friends_outline as XML
 just fine, but fails at the array. The following appears immediately
 afterward.

 blockquote
 Warning: simplexml_load_string() [function.simplexml-load-string]:
 Entity: line 1: parser error : Start tag expected, '' not found in /
 projects/tweets/test/curltest.php on line 20

 Warning: simplexml_load_string() [function.simplexml-load-string]: 1
 in /projects/tweets/test/curltest.php on line 20

 Warning: simplexml_load_string() [function.simplexml-load-string]: ^
 in /projects/tweets/test/curltest.php on line 20

 Warning: Invalid argument supplied for foreach() in /projects/tweets/
 test/curltest.php on line 21/blockquote

 I only have rudimentary PHP skills, but I'm a fairly quick study. Any
 advice is appreciated!

 Thanks in advance for the help!

 --Alex



Re: alpha test of a new service: Tweetpass

2009-01-07 Thread Chad Etzel

Hi Brian,

Happy to provide feedback.  A couple more questions inline, see [CBE]

On Wed, Jan 7, 2009 at 7:37 PM, Brian Hendrickson
br...@openmicroblogger.com wrote:


 Hi Chad,

 Thanks for the feedback!

 On Jan 7, 1:00 pm, Chad Etzel jazzyc...@gmail.com wrote:
 By logging intohttp://tweetpass.com/api/do you automatically store
 the password somewhere?  If so, how is it stored? encrypted? You
 should really tell the users what is happening (even tho it is in
 alpha stage).

 I created this rough draft of the Tweetpass service so that developers
 can test the proxy API, it doesn't have much end-user-friendly
 documentation yet.

[CBE] That may be, but I am now curious as to the fate of the twitter
password I entered to your site to test it out... I am assuming it
must be stored somehow to make the proxy API calls effective?  So,
what happens to those passwords?


 Also, the /api/ page does not appear to have htmlbody tags?

 It also doesn't appear that I am able to change anything on my
 homepage or save it... am I missing something? or is this still in
 implementation phase?

 That's because the first password you see is not active until you
 make an API call against it. The Activity box is empty, and the Host
 says not in use. Those will light up when you hit the API.

[CBE] Ah, makes sense, tho not immediately intuitive.. I think this
may be why people haven't tried out the proxy API yet, as they did not
know they had to use the API first in order to make their homepage
active so to speak.

Is the idea, though, to limit the activity that can occur from a given
host?  If so, how do you limit that activity with the checkboxes? Or
do they become available once you actually use that particular
disposable password...? If that's the case, what's to stop the 3rd
party app from abusing that password before I have a chance to go back
to tweetpass and configure the usage rights?


 Logging Out did not actually log me out as I was able to return to
 /api/ without needing to re-enter any user/pass info...

 That appears to be affecting some browsers and not others, quitting
 the browser should complete the logout. Seems to be related to my
 latest mod_rewrite addition, fixing now...

 This site sounds like a good idea (until we see what Twitter's OAuth
 looks like), but looks like it still needs some work before it is
 usable?

 Exactly, yes. It's a rough draft to see if the idea is sound while
 gauging interest

 I apologize if my tone seems critical, but this seems like one of
 those services you have to get right the first time or risk total
 user abandonment.

 Totally agree with this sentiment

 I can see that many of you have authenticated and created disposable
 passwords in my database, but not many hits on the API yet. That will
 allow you to see the full service at work, and you could make use of
 that disposable password. Don't let it go to waste!  :-)

 Thanks again Chad for sharing your ideas.

[CBE] Glad to help,
-Chad



  -- Brian



 -Chad

 On Wed, Jan 7, 2009 at 2:58 PM, Brian Hendrickson

 br...@openmicroblogger.com wrote:

  Hi Twitter-dev-talk,

  I would appreciate your feedback on a new service I've been working
  on, it's called Tweetpass. I was motivated to get it working after I
  wrote a comment about Twitter API security on Rahsheen's blog this
  past weekend.http://sheenonline.biz/-- I decided that instead of
  complaining I should try to make a difference of some kind.

  Tweetpass makes fresh, disposable Twitter passwords, which can be used
  at (compatible) 3rd-party Twitter services. (there are none, yet)
  Also, it makes it simple for the end user to delete the passwords
  individually, and toggle the API methods individually.

  It works like this:

  Twitter microbloggers:

a) submit their nicknames athttp://tweetpass.com
b) look in their Replies tab and click a link
c) do Basic Authentication against twitter.com
d) receive Tweetpass passwords to use at (compatible) 3rd-party
  Twitter services

e) turn API methods on/off per-password
f)  delete passwords anytime

  Developers:

a) change their code to (conditionally) call the tweetpass.com API
  (see below)
b) put the Tweetpass logo on their site

  Twitter API methods:

  twitter.com/statuses/update.json
  twitter.com/statuses/friends_timeline.json
  twitter.com/statuses/user_timeline.json
  twitter.com/statuses/show/ID.json
  twitter.com/USERNAME
  twitter.com/USERNAME/statuses/STATUS
  search.twitter.com/search?q=HASHTAG

  Tweetpass API methods (so far):

  tweetpass.com/statuses/update.json
  tweetpass.com/statuses/friends_timeline.json
  tweetpass.com/statuses/user_timeline.json
  tweetpass.com/statuses/show/ID.json
  tweetpass.com/USERNAME
  tweetpass.com/USERNAME/statuses/STATUS
  search.tweetpass.com/search?q=HASHTAG

  How you can help:

  If you're a developer who happens to use only these few API methods,
  you can test your 

International characters counted multiple times in 140 char limit

2009-01-07 Thread benjackson

Just sent out the following tweet through the API:

@gabrielemcrise acho que é um misto de pioneirismo +hype+base de
usuários. E também o API, que cercou o serviço de ferramentas
interessantes

The international characters are being counted more than once and the
tweet shows up as:

@gabrielemcrise acho que é um misto de pioneirismo +hype+base de
usuários. E também o API, que cercou o serviço de ferramentas inter


Re: International characters counted multiple times in 140 char limit

2009-01-07 Thread Alex Payne

Yes, we count by byte.

2009/1/7 benjackson bhjack...@gmail.com:

 Just sent out the following tweet through the API:

 @gabrielemcrise acho que é um misto de pioneirismo +hype+base de
 usuários. E também o API, que cercou o serviço de ferramentas
 interessantes

 The international characters are being counted more than once and the
 tweet shows up as:

 @gabrielemcrise acho que é um misto de pioneirismo +hype+base de
 usuários. E também o API, que cercou o serviço de ferramentas inter




-- 
Alex Payne - API Lead, Twitter, Inc.
http://twitter.com/al3x


Re: alpha test of a new service: Tweetpass

2009-01-07 Thread Brian Hendrickson

On Jan 7, 5:12 pm, Chad Etzel jazzyc...@gmail.com wrote:

 [CBE] That may be, but I am now curious as to the fate of the twitter
 password I entered to your site to test it out...

mysql delete from passes where nick = 'chazzyjad';
Query OK, 1 row affected (0.00 sec)

I didn't mean to not-answer your encryption question!

I guess I shouldn't be surprised about suspicion of a new service (and
personality), given twply's recent shenanigans. But if you look at the
technical aspects, it should be clear that i'm not talking about
another me-too service like Twitterrank, instead it's an actual
security  architectural innovation for the Twitter API ecosystem. One
that will allow users to try out services much more safely, and to
have total control over how services use their account.

 [CBE] Ah, makes sense, tho not immediately intuitive.. I think this
 may be why people haven't tried out the proxy API yet, as they did not
 know they had to use the API first in order to make their homepage
 active so to speak.

Developers also need to figure out whether their app uses Twitter API
methods beyond what i've provided so far. If it is a good fit then
they can try switching their API URLs to try the service.

 Is the idea, though, to limit the activity that can occur from a given
 host?  If so, how do you limit that activity with the checkboxes? Or
 do they become available once you actually use that particular
 disposable password...? If that's the case, what's to stop the 3rd
 party app from abusing that password before I have a chance to go back
 to tweetpass and configure the usage rights?

Yes, that's the idea, it's granular API control per-host and per-
password. Right now it allows all API features (checks all the boxes)
by default, I didn't want to do the opposite because it would be a
usability problem, but that would be a good firewall-like setup.
Ultimately you would want to set your own defaults. Also, it's not set
that way right now, but I will make it possible to set the API
permissions [[before]] a 3rd party uses a given password.

 -- Brian



Re: alpha test of a new service: Tweetpass

2009-01-07 Thread Brian Hendrickson


On Jan 7, 1:00 pm, Chad Etzel jazzyc...@gmail.com wrote:
 By logging intohttp://tweetpass.com/api/do you automatically store
 the password somewhere?  If so, how is it stored? encrypted?

Yes, each user's twitter password is encrypted and stored in the SQL
database. It's not on dreamhost, though :-) the server is physically
controlled, in a high-end co-location facility in Portland.

When an API call comes in with a disposable password, the twitter
password is fetched from the database and used to make the call to the
twitter.com API

Also, the first time a disposable password is used, it is labeled with
the incoming hostname and will only be good for that host. API events
for that password are visible in the control panel.

 -- Brian


Re: International characters counted multiple times in 140 char limit

2009-01-07 Thread zbowling

Welcome to UTF-8.

This is something I consult on all the time. The days that encoding
length equaled character size length and even equaled representation
length are long gone. It's something you have to break your mind of
(and it doesn't help that languages like C and C++ call a byte a
char.

1 character can count anywhere from 1 to 5 bytes in some cases.

Basicly:
U+00 to U+7F (basic Latin) = 1 byte - the graceful part of
UTF-8 is that it is directly equivalent to ASCII in that range.
U+80 to U+0007FF - 2 bytes
U+000800 to U+00 - 3 bytes
U+01 to U+10 - 4 bytes
etc...

See: http://en.wikipedia.org/wiki/UTF-8

Zac Bowling
http://zbowling.com/


On Jan 7, 7:39 pm, benjackson bhjack...@gmail.com wrote:
 Just sent out the following tweet through the API:

 @gabrielemcrise acho que é um misto de pioneirismo +hype+base de
 usuários. E também o API, que cercou o serviço de ferramentas
 interessantes

 The international characters are being counted more than once and the
 tweet shows up as:

 @gabrielemcrise acho que é um misto de pioneirismo +hype+base de
 usuários. E também o API, que cercou o serviço de ferramentas inter