[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Ram

Until that happens, no user or developer is going to be happy with
OAuth in a desktop or mobile application. Sorry to be blunt, but the
user experience sucks when you're using OAuth outside the confines of
a web browser.

Not necessarily.
A UIWebView (in an iPhone app) can provide a good user experience for
OAuth login
Right now, the OAuth UI is pretty bad (see bug 395). However, if that
bug is fixed, the user experience should be fairly good.

It is even more likely that a malicious app would direct you to a phishing 
site during the OAuth flow

Yes, this is a good point. Phishing, keystroke logging etc. are some
of the attack tactics that a malicious app can use.
A malicious app can do malicious things and OAuth wouldn't protect the
user against every possible attack.

However, OAuth can help in some other circumstances (with non-
malicious apps, that may have insecure code).
For instance, a popular iPhone Twitter client used to save the user's
(unencrypted) password on the device (NSUserDefaults).
Presumably, some Windows and Mac Twitter clients also do similar
things and save the unencrypted password on the machine. Some
probably  send the unencrypted password over HTTP for every user post.

OAuth can help protect the user's password in these scenarios.
Obviously, the user (of an app with insecure code) is still at some
risk because the access token may be easily retrievable from the
machine, but it is far more difficult to exploit an access token

The bottomline is that it is possible to write good secure code with
basic auth, but several developers don't do that.
OAuth mitigates the risks, but it doesn't eliminate all risks.
So there is some value to OAuth.

Ram
http://blog.CascadeSoft.net


[twitter-dev] Re: Twitter rejecting show_user request

2009-10-13 Thread Alan

Am I reading this right? ... The php warning message implies that your
php script is trying to open the string ?xml version=1.0
encoding=UTF-8? . /hash as a file [1] .  It seems very
unlikely to me that this is a valid filename, ignoring the fact that
the user with ID 4667006333 also does not seem to exist [2]

[1] http://php.net/manual/en/function.file-get-contents.php
[2] http://twitter.com/users/show.xml?user_id=4667006333


On Oct 12, 3:44 am, Raffi Krikorian ra...@twitter.com wrote:
 can you please let us know what search you were executing at the  
 time?  this way i can look through this a bit more carefully.

 thanks!



  yes, the twitter id comes from a twitter hashtag search that returns
  an xml document. i'm using show.xml to get the location of the twitter
  id.

  Are you sure that the ID in question exists?

  Hello,

  Just started developing a Twitter app... I'm using a php script with
  CURL to issue a show_user request, and i'm getting this response:

  Warning: file_get_contents(?xml version=1.0 encoding=UTF-8?
  hash  request/users/show.xml?user_id=4667006333/request
  errorNot found/error /hash ) [function.file-get-contents]:
  failed to open stream: No such file or directory

  Does Twitter still allow Basic Authorization? Do I have to  
  register an
  app with Twitter in order to get a valid response when using the  
  REST
  API?

  Thanks for helping out...

 --
 Raffi Krikorian
 Twitter Platform Team
 ra...@twitter.com | @raffi


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Zhami

As a a software and Web site user, I consider my desktop apps mine
and Web sites theirs.  I am sure that this is the mindset of most
people. We visit Web sites, and we give information to them. Yes,
they do things for us in return. Even when providing SaaS, I am still
on their site. On the other hand, when I use a desktop app, I am
using my software on my computer and it is likely that I have
other desktop apps to which I have given passwords and keys. In fact,
I may even have my Browser remember passwords for Web sites I
frequent as well as keep other personal information.

As a consequence of this distinction, while I consider OAuth a fine
architecture in the context of Web workflow, it is (presently) not
optimally suited for the desktop experience. As a user, I control my
apps (well, presuming they are not malicious), and can turn them off
or uninstall them at my discretion. A Web site is (very) different in
that I have no real authority over it.

btw: I think it is quite important to realize just how atypical/novel
Twitter is in assessing the needs of a desktop solution: Twitter isn't
really a Web site (though it has a Web site) -- Twitter is a messaging
infrastructure, and client apps are end-points. In this regard, think
of it more like email.

The UX I want for users of my app is what I want when they use an
email client: they'll use a Preferences/Wizard approach to add account
(s), and thereafter the app provides functionality. Although users
have the option of visiting Twitter's Web site to interact with
Twitter, it is my goal (as I suspect it is for most clients), to over
time obviate the need for users to go there.

In this context, I see the needs for a desktop solution as:

1) don't ever send the user's password in the clear over an
unencrypted transaction, even if obfuscated (e.g., Base64).

2) in spite of #1, don't require use of SSL/TLS for every transaction
(that requires user authentication).

3) client apps should be uniquely identified, and Twitter should have
the control to withdraw a client's access to Twitter's service.

4) empower a user to terminate an issued token (whether because the
app turns out to be malicious, or because the token has been
compromised).



On Oct 12, 10:02 pm, JDG ghil...@gmail.com wrote:
 But it completely subverts the point of OAuth, because it lets a third party
 have your password. Why even use OAuth in that case?



 On Mon, Oct 12, 2009 at 19:01, Zhami stu...@zhameesha.com wrote:

  On Oct 12, 5:44 pm, Sebastian sdelm...@gmail.com wrote:
   The solution for OAuth on Mobile and Desktop is easy:
  snip
   Let me rewrite this in plain english: let the app ask for login/
   password and pass it to twitter.
  snip
   All we need is a simple API call where we can trade a login and
   password for an oauth access token, bypassing the browser.

  I think this is a grand idea, and wanted to acknowledge it.

  This solution removes the password from being bandied about endlessly
  with Basic Auth, but is appropriate for the world of desktop apps
  where users are comfortable providing their password because
  applications often ask for access restricted information.

 --
 Internets. Serious business.


[twitter-dev] basic help needed on connect to TWITTER and send a tweet with PERL

2009-10-13 Thread apfelmaennchen

I really find it difficult to understand documentation how to code a
TWITTER-API in perl. But with a bit start-help, I think I'll be able
to proceed.

Can somebody help me with a sample PERL-code:

From within a PERL script  ( which has two variables filled with
strings. names of those VARS are $VAR1, $VAR2) I want to

a) connect to twitter (lets assume username = test, password =
water)
b) send a tweet Hello world $VAR1 {space} $VAR2. This is my first
test tweet automatically posted from a perl script.
c) disconnect from twitter


Maybe you also can give a command-reference, something like perl
TWITTER API in a nutshell.

Very many thanks for your help, Alex


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Sebastian


On Oct 12, 11:44 pm, Josh Roesslein jroessl...@gmail.com wrote:
 Providing an API endpoint for basic auth credential exchange for a
 token would be a nice solution, but I can see it
 getting abused. An attacker could bombard this endpoint trying to
 guess an account's password. Protection can be placed to limit calls
 to this endpoint by IP which might be enough to prevent this kind of
 brute attack.

Your argument, while a valid concern, is moot. There is already a
regular login page that can be abused just like you describe. It
already has protection. Even regular API calls have to be protected
because Basic Auth can be used for brute force attacks.

Adding an api call to exchange login/password pairs for oauth tokens
doesn't add any new security issues.

It does open the possibility for web sites to use this call instead of
the regular workflow, but, again, that possibility has always been
there, doing automated calls to the regular login and auth pages.

The only way to close that door is to offer web apps a way to do
password-less authentication, which is what oauth does, and to train
users to never ever give their password to a web site.

But for non-browser, native apps (mobile, desktop, etc), forcing the
use of a browser to authenticate to a separate website provides no
security at all. The native app can easily intercept the http calls,
the browser JS callbacks and many other ways to get that information.
So there is no point in forcing this workflow. We're better off not
giving users a false sense of security.


 This has been brought up before on the oauth mailing list, but a lot
 of security folks cringe at the idea. I feel there is not
 much of a security loss here since the application running on the
 user's computer can already do harm.

 I'd like to hear from the Twitter API team on their thoughts of this
 idea. It might not be part of the spec, but OAuth
 is pretty open to service providers extending it.

 Josh



 On Mon, Oct 12, 2009 at 4:44 PM, Sebastian sdelm...@gmail.com wrote:

  The solution for OAuth on Mobile and Desktop is easy:

  Allow the app to act as the user agent when authenticating with
  Twitter when requesting the token and authorizing the app.

  Let me rewrite this in plain english: let the app ask for login/
  password and pass it to twitter.

  Users don't seem to be worried about providing their credentials to a
  local app. They do it all the time when configuring basic auth
  clients, and they do it with 99% of the other client apps they use.

  Developers are (barely, in most cases) worried about having to store
  the password, but if they only need it during the initial handshake,
  then there is nothing to store.

  All we need is a simple API call where we can trade a login and
  password for an oauth access token, bypassing the browser.

  And if you think this will make it less secure, think about a desktop
  app that, using the current workflow, launches a browser to get the
  user to approve the app. That browser can be configured to use local
  proxies, or JS callbacks or any number of mechanisms that let the app
  capture the authentication credentials. Getting rid of the browser has
  no negative impact on safety, while giving developers better control
  of the UX, which gives them more reasons to implement oauth, which
  does have a positive impact.

  Anyway, just my two cents.

  PS: There is nothing right now preventing a mobile or desktop app from
  bypassing the browser as I'm describing, by acting as a browser and
  calling the same pages a browser would have presented to the user.

  On Oct 12, 1:01 pm, Ryan Sarver rsar...@twitter.com wrote:
  Hey everyone,

  I wanted to email the list to start gathering some feedback on how we
  can improve the OAuth workflow. As we have discussed in the past,
  Basic Auth is going to be deprecated at some point in the future for
  OAuth and we want to make sure we improve the experience to meet
  everyone's needs. I am interested in capturing feedback for both the
  web and desktop workflows.

  1. What can be improved about the web workflow?
  2. What can be improved about the desktop workflow?
  3. What other models of distributed auth do you think we could learn
  from and what specifically about them?
  4. What could we improve around the materials for integrating OAuth
  into your application?

  We really appreciate your feedback.

  Best, Ryan

 --
 Josh


[twitter-dev] How To Unlock Locked iPod

2009-10-13 Thread Forum





How To Unlock Locked iPod
http://bit.ly/hddpp 
http://bit.ly/hddpp
How To Unlock Locked iPod



[twitter-dev] Re: How To Unlock Locked iPod

2009-10-13 Thread Andrew Badera
Nice. One of these showed up as from _me_ over in DotNetDevelopment.
Someone found an exploit in Google Groups ...

∞ Andy Badera
∞ +1 518-641-1280
∞ This email is: [ ] bloggable [x] ask first [ ] private
∞ Google me: http://www.google.com/search?q=andrew%20badera


On Tue, Oct 13, 2009 at 6:45 AM, Forum 4bra...@gmail.com wrote:

  http://www.warez-bb.org/viewforum.php?f=3*  How To Unlock Locked iPod
 http://bit.ly/hddpp http://bit.ly/hddpp How To Unlock Locked iPod ***





[twitter-dev] Re: basic help needed on connect to TWITTER and send a tweet with PERL

2009-10-13 Thread natefanaro

Twitter has a list of libraries that should help
http://apiwiki.twitter.com/Libraries#Perl

Usually when I want to start working with an api in perl I check cpan
our first
http://search.cpan.org/search?query=twittermode=all

Most libraries in cpan will have some example code to get you going.

On Oct 13, 6:33 am, apfelmaennchen alexander.grefr...@gmail.com
wrote:
 I really find it difficult to understand documentation how to code a
 TWITTER-API in perl. But with a bit start-help, I think I'll be able
 to proceed.

 Can somebody help me with a sample PERL-code:

 From within a PERL script  ( which has two variables filled with
 strings. names of those VARS are $VAR1, $VAR2) I want to

 a) connect to twitter (lets assume username = test, password =
 water)
 b) send a tweet Hello world $VAR1 {space} $VAR2. This is my first
 test tweet automatically posted from a perl script.
 c) disconnect from twitter

 Maybe you also can give a command-reference, something like perl
 TWITTER API in a nutshell.

 Very many thanks for your help, Alex


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
They can still check for duplicate tweets, and can still suspend accounts
violating the TOS, regardless of client.

On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:



 I worried about this. Doesn't Twitter realize this will just shift
 things to desktop apps which they have less control over?!?

 On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:
  Any developer who has included and/or is thinking about including a
  recurring tweet feature in your app, please take note that they are
  against Twitter TOS.
 
  You can read what Twitter wrote to me here:
 
  http://www.socialoomphblog.com/recurring-tweets/




-- 
Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

The Twitter API already rejects duplicate tweets. It appears that not
everyone in Twitter is aware of this fact.

Ryan, can you please communicate that to your fellow Twitter
employees?

Dewald

On Oct 13, 2:23 am, PJB pjbmancun...@gmail.com wrote:
 I worried about this. Doesn't Twitter realize this will just shift
 things to desktop apps which they have less control over?!?

 On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:

  Any developer who has included and/or is thinking about including a
  recurring tweet feature in your app, please take note that they are
  against Twitter TOS.

  You can read what Twitter wrote to me here:

 http://www.socialoomphblog.com/recurring-tweets/


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread RandyC

Isn't it the case they reject duplicate Tweets if you try to post the
same thing twice consecutively?  I've not seen them reject duplicate
Tweets if there is intervening posts.

Personally I think this is a really bad move on Twitter's part.
Because of the streaming model of Twitter itself and the fact that not
every follower will see every Tweet that you do, not being able to do
recurring Tweets leaves businesses without the ability to economically
get a consistent message out onto their account.  It also looks like a
very anti-competitive move to all the ad stream businesses out there.
Certainly there are some ad companies that have abused recurring
Tweets, but without the ability to do recurring Tweets, the motivation
for many businesses to maintain a presence on Twitter just dropped
because there's no better way to capitalize on the labor and expense
of building and maintaining a following.  So much about promotion of
business has to do with consistent message and creating brand presence
with that consistent message.  Is Twitter carving out space now to do
their own in-stream ad busines?  Are businesses shut out that want to
promote themselves on their own account without having to assign a
person with a paycheck to get a simple and repetitive task done?  A
short sighted move it seems to me.  If Twitter doesn't want businesses
on their service then they're going in the right direction.


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Craig Hockenberry

To everyone who's suggesting to embed a web view in the desktop or
mobile app, please go read this:

http://fireeagle.yahoo.net/developer/documentation/
oauth_best_practice

Specifically, ... we insist that you must not use embedded rendering
controls to present the OAuth process  

Phishing in a web view is incredibly easy with a little bit of
JavaScript. From a user's point-of-view, entering their credentials
into that built-in web browser is MUCH less secure than sending HTTP
basic authentication over SSL.

-ch

On Oct 12, 11:45 pm, Ram group...@cascadesoft.net wrote:
 Until that happens, no user or developer is going to be happy with
 OAuth in a desktop or mobile application. Sorry to be blunt, but the
 user experience sucks when you're using OAuth outside the confines of
 a web browser.

 Not necessarily.
 A UIWebView (in an iPhone app) can provide a good user experience for
 OAuth login
 Right now, the OAuth UI is pretty bad (see bug 395). However, if that
 bug is fixed, the user experience should be fairly good.

 It is even more likely that a malicious app would direct you to a phishing 
 site during the OAuth flow

 Yes, this is a good point. Phishing, keystroke logging etc. are some
 of the attack tactics that a malicious app can use.
 A malicious app can do malicious things and OAuth wouldn't protect the
 user against every possible attack.

 However, OAuth can help in some other circumstances (with non-
 malicious apps, that may have insecure code).
 For instance, a popular iPhone Twitter client used to save the user's
 (unencrypted) password on the device (NSUserDefaults).
 Presumably, some Windows and Mac Twitter clients also do similar
 things and save the unencrypted password on the machine. Some
 probably  send the unencrypted password over HTTP for every user post.

 OAuth can help protect the user's password in these scenarios.
 Obviously, the user (of an app with insecure code) is still at some
 risk because the access token may be easily retrievable from the
 machine, but it is far more difficult to exploit an access token

 The bottomline is that it is possible to write good secure code with
 basic auth, but several developers don't do that.
 OAuth mitigates the risks, but it doesn't eliminate all risks.
 So there is some value to OAuth.

 Ramhttp://blog.CascadeSoft.net


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Sebastian

The problem is that on mobile platforms is extremely easy to simulate
a regular browser to the point a user cannot tell the difference.
Training users to expect security because it looks like a browser is
even worse than telling them to give their passwords to native apps
but be careful as to which apps they use.

Native apps can do many things browser-based apps cannot. Trying to
extend the OAuth metaphor to native apps only works when you give up
the idea of not having to give passwords (or you give up the idea of
having decent UX by saying that the user has to open a separate
browser manually).

OAuth on native apps is useful for:
- a way to provide fast-but-secure connections (https on small devices
has a significant performance impact)
- a way to help native apps not have to save passwords locally.
- a way for the service provider to identify (and block) apps.
- a way for the user to revoke authorization on a per-app basis.

Forget about using OAuth on native apps as a password-less
authorization mechanism, because no matter how hard you try, the
security holes are to big to close properly.

Because, as that Fire Eagle document proves, the only way to prevent
app developers from intercepting browser calls is to beg developers
not to intercept browser calls.

On Oct 13, 11:49 am, Craig Hockenberry craig.hockenbe...@gmail.com
wrote:
 To everyone who's suggesting to embed a web view in the desktop or
 mobile app, please go read this:

 http://fireeagle.yahoo.net/developer/documentation/
 oauth_best_practice

 Specifically, ... we insist that you must not use embedded rendering
 controls to present the OAuth process  

 Phishing in a web view is incredibly easy with a little bit of
 JavaScript. From a user's point-of-view, entering their credentials
 into that built-in web browser is MUCH less secure than sending HTTP
 basic authentication over SSL.

 -ch

 On Oct 12, 11:45 pm, Ram group...@cascadesoft.net wrote:

  Until that happens, no user or developer is going to be happy with
  OAuth in a desktop or mobile application. Sorry to be blunt, but the
  user experience sucks when you're using OAuth outside the confines of
  a web browser.

  Not necessarily.
  A UIWebView (in an iPhone app) can provide a good user experience for
  OAuth login
  Right now, the OAuth UI is pretty bad (see bug 395). However, if that
  bug is fixed, the user experience should be fairly good.

  It is even more likely that a malicious app would direct you to a 
  phishing site during the OAuth flow

  Yes, this is a good point. Phishing, keystroke logging etc. are some
  of the attack tactics that a malicious app can use.
  A malicious app can do malicious things and OAuth wouldn't protect the
  user against every possible attack.

  However, OAuth can help in some other circumstances (with non-
  malicious apps, that may have insecure code).
  For instance, a popular iPhone Twitter client used to save the user's
  (unencrypted) password on the device (NSUserDefaults).
  Presumably, some Windows and Mac Twitter clients also do similar
  things and save the unencrypted password on the machine. Some
  probably  send the unencrypted password over HTTP for every user post.

  OAuth can help protect the user's password in these scenarios.
  Obviously, the user (of an app with insecure code) is still at some
  risk because the access token may be easily retrievable from the
  machine, but it is far more difficult to exploit an access token

  The bottomline is that it is possible to write good secure code with
  basic auth, but several developers don't do that.
  OAuth mitigates the risks, but it doesn't eliminate all risks.
  So there is some value to OAuth.

  Ramhttp://blog.CascadeSoft.net




[twitter-dev] Whitelisting - Turn Around

2009-10-13 Thread Kyle B

Hi,

I requested to be whitelisted on October 9th, which is less than a
week I know.  Unfortunately, my project is timely and requires
receiving a larger amount of data as soon as possible.

I saw that other people had trouble with being whitelisted so I was
wondering the time that it usually takes to be whitelisted.  I was
also wondering if there was anyone I could contact in the attempt to
expedite the decision?

-Kyle


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Cameron Kaiser

 Isn't it the case they reject duplicate Tweets if you try to post the
 same thing twice consecutively?  I've not seen them reject duplicate
 Tweets if there is intervening posts.

Correct.

 Personally I think this is a really bad move on Twitter's part.
 Because of the streaming model of Twitter itself and the fact that not
 every follower will see every Tweet that you do, not being able to do
 recurring Tweets leaves businesses without the ability to economically
 get a consistent message out onto their account.

I think this is a valid point, but what would you do with accounts that
do recurrent @s? You don't have to follow them for them to show up in your
mentions, and that means a never ending stream of blocks.

Moreover, those kinds of recurrent tweets also show up (all other things
being equal) in Twitter Search, contaminating those results.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- She loves ya! ... now what? -- True Lies -


[twitter-dev] Re: basic help needed on connect to TWITTER and send a tweet with PERL

2009-10-13 Thread Nigel Cannings


If you are looking to do something basic like that, then curl works 
well.  As a perl script:


#!/usr/bin/perl
my $VAR1=hello;
my $VAR2=bye bye;

my $response=`curl --basic --user test:water --data status=\aHello 
world $VAR1 $VAR2. This is my first test tweet automatically posted from 
a perl script\ http://twitter.com/statuses/update.xml`;


print $response;


Naturally, if you want to start doing more complex stuff, especially 
OAuth, then the CPAN libraries are an enormous help.


Nigel
http://tags.linkky.com
@secretbear

apfelmaennchen wrote:

I really find it difficult to understand documentation how to code a
TWITTER-API in perl. But with a bit start-help, I think I'll be able
to proceed.

Can somebody help me with a sample PERL-code:


From within a PERL script  ( which has two variables filled with

strings. names of those VARS are $VAR1, $VAR2) I want to

a) connect to twitter (lets assume username = test, password =
water)
b) send a tweet Hello world $VAR1 {space} $VAR2. This is my first
test tweet automatically posted from a perl script.
c) disconnect from twitter


Maybe you also can give a command-reference, something like perl
TWITTER API in a nutshell.

Very many thanks for your help, Alex



[twitter-dev] Re: Whitelisting - Turn Around

2009-10-13 Thread Chad Etzel

It can take up to a week. Unfortunately, everyone's project is timely
and wants more data as soon as possible :(

We're working through the backlog.

-Chad

On Tue, Oct 13, 2009 at 11:56 AM, Kyle B kylebarn...@gmail.com wrote:

 Hi,

 I requested to be whitelisted on October 9th, which is less than a
 week I know.  Unfortunately, my project is timely and requires
 receiving a larger amount of data as soon as possible.

 I saw that other people had trouble with being whitelisted so I was
 wondering the time that it usually takes to be whitelisted.  I was
 also wondering if there was anyone I could contact in the attempt to
 expedite the decision?

 -Kyle



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread RandyC

I see @ mention abusers as a different breed because for the most part
their Tweets are not technically duplicates.  They are complete
pollution for sure and harder for an individual user to stop
preemptively.  At least if someone is annoyed with recurring or
duplicate tweets they can simply unfollow that account and there's a
self regulating mechanism. Ultimately the real pollution issue is the
@ mention system itself, not recurring Tweets on individual
accounts.

If Twitter wants to clean up the pollution, as they put in their
message to Dewald, they would have a lot easier time rooting out @
mention spammers than trying to figure out some pattern of recurring
Tweets looking back into history.  You can usually determine an
@mention spammer by looking at the first 5-10 Tweets and simply
counting the @ symbols.  The DM system is already polluted beyond
hope.  @ mentions are right on the heels of being useless to
businesses trying to track the brand.  In the grand scheme of Twitter
problems, it seems to me that recurring Tweets are way down on the
list and I think they're pulling a real tool out of the grasp of many
businesses, enough that I don't know whether I can honestly suggest a
business spend time on Twitter.


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread Ram

As I mentioned yesterday, phishing, keystroke logging are some of the
attacks that a malicious app can use with OAuth.
With these attacks, a malicious app can get the password.
Of course, in the case of basic auth, every app (malicious or good)
will always get the password.

However, as I also mentioned, OAuth offers significant security/
privacy benefits over basic auth - when it comes to non-malicious
apps.

I'm surprised that many OAuth opponents are unwilling to acknowledge
(or even discuss) this basic fact.

Ram
http://blog.CascadeSoft.net

On Oct 13, 8:49 am, Craig Hockenberry craig.hockenbe...@gmail.com
wrote:
 To everyone who's suggesting to embed a web view in the desktop or
 mobile app, please go read this:

 http://fireeagle.yahoo.net/developer/documentation/
 oauth_best_practice

 Specifically, ... we insist that you must not use embedded rendering
 controls to present the OAuth process  

 Phishing in a web view is incredibly easy with a little bit of
 JavaScript. From a user's point-of-view, entering their credentials
 into that built-in web browser is MUCH less secure than sending HTTP
 basic authentication over SSL.

 -ch

 On Oct 12, 11:45 pm, Ram group...@cascadesoft.net wrote:



  Until that happens, no user or developer is going to be happy with
  OAuth in a desktop or mobile application. Sorry to be blunt, but the
  user experience sucks when you're using OAuth outside the confines of
  a web browser.

  Not necessarily.
  A UIWebView (in an iPhone app) can provide a good user experience for
  OAuth login
  Right now, the OAuth UI is pretty bad (see bug 395). However, if that
  bug is fixed, the user experience should be fairly good.

  It is even more likely that a malicious app would direct you to a 
  phishing site during the OAuth flow

  Yes, this is a good point. Phishing, keystroke logging etc. are some
  of the attack tactics that a malicious app can use.
  A malicious app can do malicious things and OAuth wouldn't protect the
  user against every possible attack.

  However, OAuth can help in some other circumstances (with non-
  malicious apps, that may have insecure code).
  For instance, a popular iPhone Twitter client used to save the user's
  (unencrypted) password on the device (NSUserDefaults).
  Presumably, some Windows and Mac Twitter clients also do similar
  things and save the unencrypted password on the machine. Some
  probably  send the unencrypted password over HTTP for every user post.

  OAuth can help protect the user's password in these scenarios.
  Obviously, the user (of an app with insecure code) is still at some
  risk because the access token may be easily retrievable from the
  machine, but it is far more difficult to exploit an access token

  The bottomline is that it is possible to write good secure code with
  basic auth, but several developers don't do that.
  OAuth mitigates the risks, but it doesn't eliminate all risks.
  So there is some value to OAuth.

  Ramhttp://blog.CascadeSoft.net- Hide quoted text -

 - Show quoted text -


[twitter-dev] Re: HTTP Server Error 503 No available server to handle this request

2009-10-13 Thread rivv

My application is no longer able to Authorize Twitter accounts, even
though I was able too on october 9th.  I am assuming it is because of
this as well, so take from that what you will.

On Oct 12, 7:47 pm, eclipsed4utoo ryanalford...@gmail.com wrote:
 Are people still having issues posting status updates from third party
 applications?  I haven't been able to post all day.  Still can't post
 now.

 There isn't an update on the Twitter status page.  I didn't know if
 that was because it wasn't fixed yet, or because they just haven't
 updated it post yet.

 Ryan

 On Oct 12, 4:56 pm, Andrew Badera and...@badera.us wrote:

  On Mon, Oct 12, 2009 at 4:42 PM, John Kalucki jkalu...@gmail.com wrote:

   We need to get better at
   the status blog, but it's rare that we aren't responding to a site-
   wide issue within moments.

   -John Kalucki
  http://twitter.com/jkalucki
   Services, Twitter Inc.

  Any idea when that might happen? I've been seeing this issue for over
  four hours now. Had a 4pm EDT client phone call, and didn't have much
  to tell them. I understand there's a lot going on that you guys need
  to handle, but the entire ecosystem that helped popularize Twitter has
  a financial motivation that needs to be attended to, even if Twitter's
  current momentum has carried it past us little people. And Twitter has
  shown a history of going to the media before informing us folk. There
  needs to be a better balance.

  ∞ Andy Badera
  ∞ +1 518-641-1280
  ∞ This email is: [ ] bloggable [x] ask first [ ] private
  ∞ Google me:http://www.google.com/search?q=andrew%20badera


[twitter-dev] Re: Whitelisting - Turn Around

2009-10-13 Thread vorapoap

I got blank page on submission on both IE8 and FF3.5 not sure why?

On Oct 13, 11:37 pm, Chad Etzel c...@twitter.com wrote:
 It can take up to a week. Unfortunately, everyone's project is timely
 and wants more data as soon as possible :(

 We're working through the backlog.

 -Chad

 On Tue, Oct 13, 2009 at 11:56 AM, Kyle B kylebarn...@gmail.com wrote:

  Hi,

  I requested to be whitelisted on October 9th, which is less than a
  week I know.  Unfortunately, my project is timely and requires
  receiving a larger amount of data as soon as possible.

  I saw that other people had trouble with being whitelisted so I was
  wondering the time that it usually takes to be whitelisted.  I was
  also wondering if there was anyone I could contact in the attempt to
  expedite the decision?

  -Kyle


[twitter-dev] I try to request for a white-list but results in blank page.

2009-10-13 Thread vorapoap

Hi.

I try to request to be on a white-list

http://twitter.com/help/request_whitelisting

After submitting, I only get blank page on both FireFox3.5 and IE8
I have done this several times in FireFox3.5 first before I switched
to IE8

Is the submission success?... Or it is an error?

Regards,


[twitter-dev] Re: HTTP Server Error 503 No available server to handle this request

2009-10-13 Thread ryan alford
And I am still having issues.  I still can't post status updates from my
application, even though this worked fine on Sunday night.
Ryan

On Tue, Oct 13, 2009 at 2:24 PM, rivv drachemor...@gmail.com wrote:


 My application is no longer able to Authorize Twitter accounts, even
 though I was able too on october 9th.  I am assuming it is because of
 this as well, so take from that what you will.

 On Oct 12, 7:47 pm, eclipsed4utoo ryanalford...@gmail.com wrote:
  Are people still having issues posting status updates from third party
  applications?  I haven't been able to post all day.  Still can't post
  now.
 
  There isn't an update on the Twitter status page.  I didn't know if
  that was because it wasn't fixed yet, or because they just haven't
  updated it post yet.
 
  Ryan
 
  On Oct 12, 4:56 pm, Andrew Badera and...@badera.us wrote:
 
   On Mon, Oct 12, 2009 at 4:42 PM, John Kalucki jkalu...@gmail.com
 wrote:
 
We need to get better at
the status blog, but it's rare that we aren't responding to a site-
wide issue within moments.
 
-John Kalucki
   http://twitter.com/jkalucki
Services, Twitter Inc.
 
   Any idea when that might happen? I've been seeing this issue for over
   four hours now. Had a 4pm EDT client phone call, and didn't have much
   to tell them. I understand there's a lot going on that you guys need
   to handle, but the entire ecosystem that helped popularize Twitter has
   a financial motivation that needs to be attended to, even if Twitter's
   current momentum has carried it past us little people. And Twitter has
   shown a history of going to the media before informing us folk. There
   needs to be a better balance.
 
   ∞ Andy Badera
   ∞ +1 518-641-1280
   ∞ This email is: [ ] bloggable [x] ask first [ ] private
   ∞ Google me:http://www.google.com/search?q=andrew%20badera



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB


Twitter is being incredibly stupid, rash, and short-sighted about
this.

Does ATT write to Microsoft and say, hey, our network is getting a
lot of junk email sent through Microsoft Outlook.  We therefore demand
you get rid of the CC and BCC features of that product.  Of course
not!

That Twitter is now focusing on regulating Twitter APPS shows that it
has a weak and ineffective user regulation system in place.  It can't
effectively police its users, so it decides to go after apps that they
(may) use.  Cheap shot.  It's like stopping drunk driving by banning
all driving after dark.  Do they really think that that is going to
work?  Sure, they can probably slam down Web-based clients that use
dedicated, whitelisted IP addresses.  But as I pointed out earlier,
this will just shift the behavior, and make it even more nettlesome.
Now it will move to desktop clients that they cannot stop (yes, they
can still ban individual members for duplicate content, but they
cannot stop the sale and use of the desktop client).

Months ago I emailed Twitter asking them what OUR responsibilities
were as app developers.  I think all of us understand and recognize
that many of our apps have features that could be abused.  I think
many of us are perfectly willing to police our own apps, and work with
Twitter to help reign in behavior that isn't acceptable.  But it seems
out-of-bounds for Twitter to bypass such a cooperative system, and
instead just carte blanche ban a particular app feature that has many
legitimate uses.


On Oct 13, 6:32 am, JDG ghil...@gmail.com wrote:
 They can still check for duplicate tweets, and can still suspend accounts
 violating the TOS, regardless of client.

 On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:

  I worried about this. Doesn't Twitter realize this will just shift
  things to desktop apps which they have less control over?!?

  On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:
   Any developer who has included and/or is thinking about including a
   recurring tweet feature in your app, please take note that they are
   against Twitter TOS.

   You can read what Twitter wrote to me here:

  http://www.socialoomphblog.com/recurring-tweets/

 --
 Internets. Serious business.


[twitter-dev] Re: basic help needed on connect to TWITTER and send a tweet with PERL

2009-10-13 Thread PJB


http://search.cpan.org/dist/Net-Twitter/lib/Net/Twitter.pod

On Oct 13, 3:33 am, apfelmaennchen alexander.grefr...@gmail.com
wrote:
 I really find it difficult to understand documentation how to code a
 TWITTER-API in perl. But with a bit start-help, I think I'll be able
 to proceed.

 Can somebody help me with a sample PERL-code:

 From within a PERL script  ( which has two variables filled with
 strings. names of those VARS are $VAR1, $VAR2) I want to

 a) connect to twitter (lets assume username = test, password =
 water)
 b) send a tweet Hello world $VAR1 {space} $VAR2. This is my first
 test tweet automatically posted from a perl script.
 c) disconnect from twitter

 Maybe you also can give a command-reference, something like perl
 TWITTER API in a nutshell.

 Very many thanks for your help, Alex


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
If the desktop client uses OAuth (which, if and when they deprecate basic
auth, will be all), you bet your ass they can regulate desktop clients. All
they have to do is ban any tweets using the Consumer Secret and Key for that
app (and any subsequent keys said jackass developer attempts to get after
previous tokens have been banned).

Furthermore, the app in question explicitly offered the option of a
recurring tweet which is a violation of the TOS. Regardless of whether or
not that provides a useful service -- I'm not going to start debating that
-- the fact of the matter is it *is* a violation of the TOS. Plain and
simple. Why shouldn't they be allowed (as if we have a say what a private
company does with their own resources) to ban an app that violates the TOS
with one of their own options?

On Tue, Oct 13, 2009 at 12:54, PJB pjbmancun...@gmail.com wrote:



 Twitter is being incredibly stupid, rash, and short-sighted about
 this.

 Does ATT write to Microsoft and say, hey, our network is getting a
 lot of junk email sent through Microsoft Outlook.  We therefore demand
 you get rid of the CC and BCC features of that product.  Of course
 not!

 That Twitter is now focusing on regulating Twitter APPS shows that it
 has a weak and ineffective user regulation system in place.  It can't
 effectively police its users, so it decides to go after apps that they
 (may) use.  Cheap shot.  It's like stopping drunk driving by banning
 all driving after dark.  Do they really think that that is going to
 work?  Sure, they can probably slam down Web-based clients that use
 dedicated, whitelisted IP addresses.  But as I pointed out earlier,
 this will just shift the behavior, and make it even more nettlesome.
 Now it will move to desktop clients that they cannot stop (yes, they
 can still ban individual members for duplicate content, but they
 cannot stop the sale and use of the desktop client).

 Months ago I emailed Twitter asking them what OUR responsibilities
 were as app developers.  I think all of us understand and recognize
 that many of our apps have features that could be abused.  I think
 many of us are perfectly willing to police our own apps, and work with
 Twitter to help reign in behavior that isn't acceptable.  But it seems
 out-of-bounds for Twitter to bypass such a cooperative system, and
 instead just carte blanche ban a particular app feature that has many
 legitimate uses.


 On Oct 13, 6:32 am, JDG ghil...@gmail.com wrote:
  They can still check for duplicate tweets, and can still suspend accounts
  violating the TOS, regardless of client.
 
  On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:
 
   I worried about this. Doesn't Twitter realize this will just shift
   things to desktop apps which they have less control over?!?
 
   On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:
Any developer who has included and/or is thinking about including a
recurring tweet feature in your app, please take note that they are
against Twitter TOS.
 
You can read what Twitter wrote to me here:
 
   http://www.socialoomphblog.com/recurring-tweets/
 
  --
  Internets. Serious business.




-- 
Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

the app in question explicitly offered the option of a recurring
tweet which is a violation of the TOS

Hang on a second. Please point me to the Twitter Rules where it
clearly said that a recurring tweet is in violation of the TOS.

Even though my app provided users with the ability to have recurring
tweets that would not result in what my understanding and
interpretation was at that time of the meaning of the very vague term
duplicate content, they ruled recurring tweets as off-limits this
Monday in a communication to me.

And in a very patient attempt to be a good Twitter application
developer, I complied and am deactivating that feature. NOW THAT I
KNOW.

Dewald

On Oct 13, 4:16 pm, JDG ghil...@gmail.com wrote:
 If the desktop client uses OAuth (which, if and when they deprecate basic
 auth, will be all), you bet your ass they can regulate desktop clients. All
 they have to do is ban any tweets using the Consumer Secret and Key for that
 app (and any subsequent keys said jackass developer attempts to get after
 previous tokens have been banned).

 Furthermore, the app in question explicitly offered the option of a
 recurring tweet which is a violation of the TOS. Regardless of whether or
 not that provides a useful service -- I'm not going to start debating that
 -- the fact of the matter is it *is* a violation of the TOS. Plain and
 simple. Why shouldn't they be allowed (as if we have a say what a private
 company does with their own resources) to ban an app that violates the TOS
 with one of their own options?



 On Tue, Oct 13, 2009 at 12:54, PJB pjbmancun...@gmail.com wrote:

  Twitter is being incredibly stupid, rash, and short-sighted about
  this.

  Does ATT write to Microsoft and say, hey, our network is getting a
  lot of junk email sent through Microsoft Outlook.  We therefore demand
  you get rid of the CC and BCC features of that product.  Of course
  not!

  That Twitter is now focusing on regulating Twitter APPS shows that it
  has a weak and ineffective user regulation system in place.  It can't
  effectively police its users, so it decides to go after apps that they
  (may) use.  Cheap shot.  It's like stopping drunk driving by banning
  all driving after dark.  Do they really think that that is going to
  work?  Sure, they can probably slam down Web-based clients that use
  dedicated, whitelisted IP addresses.  But as I pointed out earlier,
  this will just shift the behavior, and make it even more nettlesome.
  Now it will move to desktop clients that they cannot stop (yes, they
  can still ban individual members for duplicate content, but they
  cannot stop the sale and use of the desktop client).

  Months ago I emailed Twitter asking them what OUR responsibilities
  were as app developers.  I think all of us understand and recognize
  that many of our apps have features that could be abused.  I think
  many of us are perfectly willing to police our own apps, and work with
  Twitter to help reign in behavior that isn't acceptable.  But it seems
  out-of-bounds for Twitter to bypass such a cooperative system, and
  instead just carte blanche ban a particular app feature that has many
  legitimate uses.

  On Oct 13, 6:32 am, JDG ghil...@gmail.com wrote:
   They can still check for duplicate tweets, and can still suspend accounts
   violating the TOS, regardless of client.

   On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:

I worried about this. Doesn't Twitter realize this will just shift
things to desktop apps which they have less control over?!?

On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:
 Any developer who has included and/or is thinking about including a
 recurring tweet feature in your app, please take note that they are
 against Twitter TOS.

 You can read what Twitter wrote to me here:

http://www.socialoomphblog.com/recurring-tweets/

   --
   Internets. Serious business.

 --
 Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB


 If the desktop client uses OAuth (which, if and when they deprecate basic
 auth, will be all), you bet your ass they can regulate desktop clients. All
 they have to do is ban any tweets using the Consumer Secret and Key for that
 app (and any subsequent keys said jackass developer attempts to get after
 previous tokens have been banned).

Wrong.  Basic Authentication will obviously ALWAYS be an option for
desktop clients, regardless of whether or not it is via API.

 Furthermore, the app in question explicitly offered the option of a
 recurring tweet which is a violation of the TOS. Regardless of whether or
 not that provides a useful service -- I'm not going to start debating that
 -- the fact of the matter is it *is* a violation of the TOS. Plain and
 simple. Why shouldn't they be allowed (as if we have a say what a private
 company does with their own resources) to ban an app that violates the TOS
 with one of their own options?

I see, so then sites like mapmyrun and others that, for example, tweet
Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
hour, and other templated text, are also in violation of the terms?
Or what about hootsuite where I can queue up 100 tweets with the exact
same text to fire off every hour, perhaps interspersed with a second
tweet?

The bottom line is that this situation isn't as black and white as you
think, and Twitter's approach is wrong-headed.






[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
I'm not debating that there might have been some confusion. I wasn't
implying that you were irresponsible or malicious when building your app,
and I commend you for taking appropriate measures when contacted by Twitter.
It's now precedent, though, that it is a violation of the TOS, regardless of
how you read the document.

On Tue, Oct 13, 2009 at 13:29, Dewald Pretorius dpr...@gmail.com wrote:


 the app in question explicitly offered the option of a recurring
 tweet which is a violation of the TOS

 Hang on a second. Please point me to the Twitter Rules where it
 clearly said that a recurring tweet is in violation of the TOS.

 Even though my app provided users with the ability to have recurring
 tweets that would not result in what my understanding and
 interpretation was at that time of the meaning of the very vague term
 duplicate content, they ruled recurring tweets as off-limits this
 Monday in a communication to me.

 And in a very patient attempt to be a good Twitter application
 developer, I complied and am deactivating that feature. NOW THAT I
 KNOW.

 Dewald

 On Oct 13, 4:16 pm, JDG ghil...@gmail.com wrote:
  If the desktop client uses OAuth (which, if and when they deprecate basic
  auth, will be all), you bet your ass they can regulate desktop clients.
 All
  they have to do is ban any tweets using the Consumer Secret and Key for
 that
  app (and any subsequent keys said jackass developer attempts to get after
  previous tokens have been banned).
 
  Furthermore, the app in question explicitly offered the option of a
  recurring tweet which is a violation of the TOS. Regardless of whether or
  not that provides a useful service -- I'm not going to start debating
 that
  -- the fact of the matter is it *is* a violation of the TOS. Plain and
  simple. Why shouldn't they be allowed (as if we have a say what a
 private
  company does with their own resources) to ban an app that violates the
 TOS
  with one of their own options?
 
 
 
  On Tue, Oct 13, 2009 at 12:54, PJB pjbmancun...@gmail.com wrote:
 
   Twitter is being incredibly stupid, rash, and short-sighted about
   this.
 
   Does ATT write to Microsoft and say, hey, our network is getting a
   lot of junk email sent through Microsoft Outlook.  We therefore demand
   you get rid of the CC and BCC features of that product.  Of course
   not!
 
   That Twitter is now focusing on regulating Twitter APPS shows that it
   has a weak and ineffective user regulation system in place.  It can't
   effectively police its users, so it decides to go after apps that they
   (may) use.  Cheap shot.  It's like stopping drunk driving by banning
   all driving after dark.  Do they really think that that is going to
   work?  Sure, they can probably slam down Web-based clients that use
   dedicated, whitelisted IP addresses.  But as I pointed out earlier,
   this will just shift the behavior, and make it even more nettlesome.
   Now it will move to desktop clients that they cannot stop (yes, they
   can still ban individual members for duplicate content, but they
   cannot stop the sale and use of the desktop client).
 
   Months ago I emailed Twitter asking them what OUR responsibilities
   were as app developers.  I think all of us understand and recognize
   that many of our apps have features that could be abused.  I think
   many of us are perfectly willing to police our own apps, and work with
   Twitter to help reign in behavior that isn't acceptable.  But it seems
   out-of-bounds for Twitter to bypass such a cooperative system, and
   instead just carte blanche ban a particular app feature that has many
   legitimate uses.
 
   On Oct 13, 6:32 am, JDG ghil...@gmail.com wrote:
They can still check for duplicate tweets, and can still suspend
 accounts
violating the TOS, regardless of client.
 
On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:
 
 I worried about this. Doesn't Twitter realize this will just shift
 things to desktop apps which they have less control over?!?
 
 On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:
  Any developer who has included and/or is thinking about including
 a
  recurring tweet feature in your app, please take note that they
 are
  against Twitter TOS.
 
  You can read what Twitter wrote to me here:
 
 http://www.socialoomphblog.com/recurring-tweets/
 
--
Internets. Serious business.
 
  --
  Internets. Serious business.




-- 
Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Chad Etzel

On Tue, Oct 13, 2009 at 3:38 PM, PJB pjbmancun...@gmail.com wrote:

 Wrong.  Basic Authentication will obviously ALWAYS be an option for
 desktop clients, regardless of whether or not it is via API.

Please explain this statement?
-Chad


 Furthermore, the app in question explicitly offered the option of a
 recurring tweet which is a violation of the TOS. Regardless of whether or
 not that provides a useful service -- I'm not going to start debating that
 -- the fact of the matter is it *is* a violation of the TOS. Plain and
 simple. Why shouldn't they be allowed (as if we have a say what a private
 company does with their own resources) to ban an app that violates the TOS
 with one of their own options?

 I see, so then sites like mapmyrun and others that, for example, tweet
 Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
 hour, and other templated text, are also in violation of the terms?
 Or what about hootsuite where I can queue up 100 tweets with the exact
 same text to fire off every hour, perhaps interspersed with a second
 tweet?

 The bottom line is that this situation isn't as black and white as you
 think, and Twitter's approach is wrong-headed.







[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG

 Wrong.  Basic Authentication will obviously ALWAYS be an option for
 desktop clients, regardless of whether or not it is via API.

When are you going to turn off Basic Auth?

We would like to deprecate Basic Auth at some point to prevent security
issues but no date has been set for that. We will not set a date for
deprecation until several outstanding issues have been resolved. When we do
set a date we plan to provide at least six months to transition.


 Can my application continue to use Basic Auth?

There is no requirement to move to OAuth at this time. If/When a date is set
for the deprecation of Basic Auth we will publish a notice on the API
Development Talk. We will not set a date for deprecation until several
outstanding issues have been resolved. When we do set a date we plan to
provide at least six months to transition.


Explain to me where it's obvious that basic auth will ALWAYS be an option
for desktop clients. Furthermore, please explain to me what voodoo you
employed while reading those statements to come to your conclusion.

 I see, so then sites like mapmyrun and others that, for example, tweet
 Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
 hour, and other templated text, are also in violation of the terms?
 Or what about hootsuite where I can queue up 100 tweets with the exact
 same text to fire off every hour, perhaps interspersed with a second
 tweet?


Why on earth would people do that? Why on earth would you want to tweet the
exact same text once an hour for 100 consecutive hours. What benefit could
that POSSIBLY provide to the Twitter ecosystem?





 The bottom line is that this situation isn't as black and white as you
 think, and Twitter's approach is wrong-headed.


I disagree. I think it's pretty black and white.



-- 
Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB



On Oct 13, 12:48 pm, JDG ghil...@gmail.com wrote:
  Wrong.  Basic Authentication will obviously ALWAYS be an option for
  desktop clients, regardless of whether or not it is via API.

 Explain to me where it's obvious that basic auth will ALWAYS be an option
 for desktop clients. Furthermore, please explain to me what voodoo you
 employed while reading those statements to come to your conclusion.

You clearly do not understand the basics of HTTP.  Do you think that
Twitter is going to somehow deny Firefox, IE, and other desktop
clients from connecting to Twitter with a simple username and password
only?

  I see, so then sites like mapmyrun and others that, for example, tweet
  Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
  hour, and other templated text, are also in violation of the terms?
  Or what about hootsuite where I can queue up 100 tweets with the exact
  same text to fire off every hour, perhaps interspersed with a second
  tweet?

 Why on earth would people do that? Why on earth would you want to tweet the
 exact same text once an hour for 100 consecutive hours. What benefit could
 that POSSIBLY provide to the Twitter ecosystem?

I am beginning to realize it is of no use arguing with you.  Obviously
there is no benefit.  That's the point: that both the app in question
AND those apps provide means for violating Twitter's Terms of
Service.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Cameron Kaiser

   Wrong. _Basic Authentication will obviously ALWAYS be an option for
   desktop clients, regardless of whether or not it is via API.
 
  Explain to me where it's obvious that basic auth will ALWAYS be an option
  for desktop clients. Furthermore, please explain to me what voodoo you
  employed while reading those statements to come to your conclusion.
 
 You clearly do not understand the basics of HTTP.  Do you think that
 Twitter is going to somehow deny Firefox, IE, and other desktop
 clients from connecting to Twitter with a simple username and password
 only?

In fairness, you can still disallow Basic Auth and allow other forms of
password-based authentication. Twitter requiring a password does not
necessarily mandate that Basic Auth be the method of presenting said
authentication credentials.

This coming from someone who likes Chad's idea rather than a pure OAuth
universe.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- Von Herzen, moge es wieder zu Herzen gehen. -- Beethoven ---


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread ryan alford
 You clearly do not understand the basics of HTTP.  Do you think that
 Twitter is going to somehow deny Firefox, IE, and other desktop
 clients from connecting to Twitter with a simple username and password
 only?
Since when do Firefox and IE use the API to communicate with Twitter?  Last
time I checked, they don't...but maybe I am just missing something.




On Tue, Oct 13, 2009 at 3:53 PM, PJB pjbmancun...@gmail.com wrote:




 On Oct 13, 12:48 pm, JDG ghil...@gmail.com wrote:
   Wrong.  Basic Authentication will obviously ALWAYS be an option for
   desktop clients, regardless of whether or not it is via API.
 
  Explain to me where it's obvious that basic auth will ALWAYS be an option
  for desktop clients. Furthermore, please explain to me what voodoo you
  employed while reading those statements to come to your conclusion.

 You clearly do not understand the basics of HTTP.  Do you think that
 Twitter is going to somehow deny Firefox, IE, and other desktop
 clients from connecting to Twitter with a simple username and password
 only?

   I see, so then sites like mapmyrun and others that, for example, tweet
   Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
   hour, and other templated text, are also in violation of the terms?
   Or what about hootsuite where I can queue up 100 tweets with the exact
   same text to fire off every hour, perhaps interspersed with a second
   tweet?
 
  Why on earth would people do that? Why on earth would you want to tweet
 the
  exact same text once an hour for 100 consecutive hours. What benefit
 could
  that POSSIBLY provide to the Twitter ecosystem?

 I am beginning to realize it is of no use arguing with you.  Obviously
 there is no benefit.  That's the point: that both the app in question
 AND those apps provide means for violating Twitter's Terms of
 Service.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Abraham Williams
On Tue, Oct 13, 2009 at 13:54, PJB pjbmancun...@gmail.com wrote:

 Does ATT write to Microsoft and say, hey, our network is getting a
 lot of junk email sent through Microsoft Outlook.  We therefore demand
 you get rid of the CC and BCC features of that product.  Of course
 not!


Nope. They send letters to the FCC because Google Voice is filling up their
small tubes.
http://arstechnica.com/tech-policy/news/2009/10/att-accused-of-regulatory-capitalism-as-fcc-probes-google-voice.ars

-- 
Abraham Williams | Community Evangelist | http://web608.org
Hacker | http://abrah.am | http://twitter.com/abraham
http://web608.org/geeks/abraham/blogs/2009/10/03/win-google-wave-invite
This email is: [ ] blogable [x] ask first [ ] private.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

There appears to be a lack of understanding on the part of Twitter of
the following:

When you create a vacuum, something will fill that vacuum.

Instead of working with me and opting for a solution I offered to them
that would have ensured that recurring tweets never result in
duplicate content from my system, they opted to rather outright ban
recurring tweets.

Okay fine, so now I don't offer that feature. That creates a vacuum. A
whole host of less scrupulous developers are waiting to fill that
vacuum with solutions that will be harder or impossible for Twitter to
detect, creating an even bigger problem for Twitter than they had
before. The fact that this approach of them is hurting my business is
not very encouraging to write another Twitter-related line of code.

Dewald

On Oct 13, 4:45 pm, JDG ghil...@gmail.com wrote:
 I'm not debating that there might have been some confusion. I wasn't
 implying that you were irresponsible or malicious when building your app,
 and I commend you for taking appropriate measures when contacted by Twitter.
 It's now precedent, though, that it is a violation of the TOS, regardless of
 how you read the document.



 On Tue, Oct 13, 2009 at 13:29, Dewald Pretorius dpr...@gmail.com wrote:

  the app in question explicitly offered the option of a recurring
  tweet which is a violation of the TOS

  Hang on a second. Please point me to the Twitter Rules where it
  clearly said that a recurring tweet is in violation of the TOS.

  Even though my app provided users with the ability to have recurring
  tweets that would not result in what my understanding and
  interpretation was at that time of the meaning of the very vague term
  duplicate content, they ruled recurring tweets as off-limits this
  Monday in a communication to me.

  And in a very patient attempt to be a good Twitter application
  developer, I complied and am deactivating that feature. NOW THAT I
  KNOW.

  Dewald

  On Oct 13, 4:16 pm, JDG ghil...@gmail.com wrote:
   If the desktop client uses OAuth (which, if and when they deprecate basic
   auth, will be all), you bet your ass they can regulate desktop clients.
  All
   they have to do is ban any tweets using the Consumer Secret and Key for
  that
   app (and any subsequent keys said jackass developer attempts to get after
   previous tokens have been banned).

   Furthermore, the app in question explicitly offered the option of a
   recurring tweet which is a violation of the TOS. Regardless of whether or
   not that provides a useful service -- I'm not going to start debating
  that
   -- the fact of the matter is it *is* a violation of the TOS. Plain and
   simple. Why shouldn't they be allowed (as if we have a say what a
  private
   company does with their own resources) to ban an app that violates the
  TOS
   with one of their own options?

   On Tue, Oct 13, 2009 at 12:54, PJB pjbmancun...@gmail.com wrote:

Twitter is being incredibly stupid, rash, and short-sighted about
this.

Does ATT write to Microsoft and say, hey, our network is getting a
lot of junk email sent through Microsoft Outlook.  We therefore demand
you get rid of the CC and BCC features of that product.  Of course
not!

That Twitter is now focusing on regulating Twitter APPS shows that it
has a weak and ineffective user regulation system in place.  It can't
effectively police its users, so it decides to go after apps that they
(may) use.  Cheap shot.  It's like stopping drunk driving by banning
all driving after dark.  Do they really think that that is going to
work?  Sure, they can probably slam down Web-based clients that use
dedicated, whitelisted IP addresses.  But as I pointed out earlier,
this will just shift the behavior, and make it even more nettlesome.
Now it will move to desktop clients that they cannot stop (yes, they
can still ban individual members for duplicate content, but they
cannot stop the sale and use of the desktop client).

Months ago I emailed Twitter asking them what OUR responsibilities
were as app developers.  I think all of us understand and recognize
that many of our apps have features that could be abused.  I think
many of us are perfectly willing to police our own apps, and work with
Twitter to help reign in behavior that isn't acceptable.  But it seems
out-of-bounds for Twitter to bypass such a cooperative system, and
instead just carte blanche ban a particular app feature that has many
legitimate uses.

On Oct 13, 6:32 am, JDG ghil...@gmail.com wrote:
 They can still check for duplicate tweets, and can still suspend
  accounts
 violating the TOS, regardless of client.

 On Mon, Oct 12, 2009 at 23:23, PJB pjbmancun...@gmail.com wrote:

  I worried about this. Doesn't Twitter realize this will just shift
  things to desktop apps which they have less control over?!?

  On Oct 12, 7:24 pm, Dewald Pretorius dpr...@gmail.com wrote:

[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Cameron Kaiser

 I see @ mention abusers as a different breed because for the most part
 their Tweets are not technically duplicates.  They are complete
 pollution for sure and harder for an individual user to stop
 preemptively.  At least if someone is annoyed with recurring or
 duplicate tweets they can simply unfollow that account and there's a
 self regulating mechanism. Ultimately the real pollution issue is the
 @ mention system itself, not recurring Tweets on individual
 accounts.

For the sake of argument, let's take this at face value as true. How
about the search pollution issue with recurrent tweets in general?

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- When people get acupuncture, do voodoo dolls die? --


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Cameron Kaiser

  Does ATT write to Microsoft and say, hey, our network is getting a
  lot of junk email sent through Microsoft Outlook.  We therefore demand
  you get rid of the CC and BCC features of that product.  Of course
  not!
 
 Nope. They send letters to the FCC because Google Voice is filling up their
 small tubes.

That's easily solved, just get some trucks.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- A zebra cannot change its spots. -- Al Gore 


[twitter-dev] Separate terms using commas?

2009-10-13 Thread EastSideDev

I am using the streaming search API. If I have more than one term to
search, do I need to separate those terms with commas? If these are
hash tags, do I include the hash symbol? (#test1, #test2, #test3)  I
am experiencing some random problems, and I would like to eliminate
this as the trouble spot before looking for the problem elsewhere.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB



  You clearly do not understand the basics of HTTP.  Do you think that
  Twitter is going to somehow deny Firefox, IE, and other desktop
  clients from connecting to Twitter with a simple username and password
  only?

 Since when do Firefox and IE use the API to communicate with Twitter?  Last
 time I checked, they don't...but maybe I am just missing something.

My point is that desktop apps can perform Twitter actions without
going through the API.

Any crackdown on particular behaviors of Web-based Twitter apps will
likely see that behavior shift to desktop apps, as they are
exceedingly difficult, if not impossible, to centrally restrict.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread ryan alford
My point is that Basic Auth will be going away with the API.  If an
application is not using the API, then it's developers don't have to worry
about Basic Auth going away because it won't concern them.

OAuth is for API authorization, not website authorization.

Ryan

On Tue, Oct 13, 2009 at 4:11 PM, PJB pjbmancun...@gmail.com wrote:




   You clearly do not understand the basics of HTTP.  Do you think that
   Twitter is going to somehow deny Firefox, IE, and other desktop
   clients from connecting to Twitter with a simple username and password
   only?
 
  Since when do Firefox and IE use the API to communicate with Twitter?
  Last
  time I checked, they don't...but maybe I am just missing something.

 My point is that desktop apps can perform Twitter actions without
 going through the API.

 Any crackdown on particular behaviors of Web-based Twitter apps will
 likely see that behavior shift to desktop apps, as they are
 exceedingly difficult, if not impossible, to centrally restrict.


[twitter-dev] Ummmm, how in the heck does someone get support around here

2009-10-13 Thread Scott Haneda


I brought this up on this list before, let's look at this:

http://help.twitter.com/home
1) Where do I go to open a ticket?
I read the entire page, to find a little link, that says ask us.

That takes me to:
http://twitter.zendesk.com/requests/new

That redirects me around a few times, and takes me right back to  
help.twitter.com/home.


2) How do I open a new ticket?  Why do I need to? Because I just got  
this email from twitter support:

http://dl.getdropbox.com/u/340087/Drops/10.13.09/what-6855eebe-132402.png

Thanks
--
Scott * If you contact me off list replace talklists@ with scott@ *



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB



 For the sake of argument, let's take this at face value as true. How
 about the search pollution issue with recurrent tweets in general?

You may have a point.  But it comes down to uneven enforcement.
Twitter smacks down an app because they allow an individual to recur,
say, every Monday: Today is Monday and my office hours will be from
2:15-3:30pm.

Meanwhile, you have apps which do things like this:
http://search.twitter.com/search?q=%23fun140

Aren't those effectively recurring tweets?


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
Yes, and should be treated as such. I personally detest all those stupid
twitter-based games. Point is, with Twitter's userbase, some get through the
cracks. Don't like it, report it. This is like complaining that cops only
pull over SOME speeders. Yeah, some are going to get through the cracks.

On Tue, Oct 13, 2009 at 14:29, PJB pjbmancun...@gmail.com wrote:




  For the sake of argument, let's take this at face value as true. How
  about the search pollution issue with recurrent tweets in general?

 You may have a point.  But it comes down to uneven enforcement.
 Twitter smacks down an app because they allow an individual to recur,
 say, every Monday: Today is Monday and my office hours will be from
 2:15-3:30pm.

 Meanwhile, you have apps which do things like this:
 http://search.twitter.com/search?q=%23fun140

 Aren't those effectively recurring tweets?




-- 
Internets. Serious business.


[twitter-dev] Re: Ummmm, how in the heck does someone get support around here

2009-10-13 Thread Chad Etzel

There is currently a bug in the system that will inadvertently omit
rejection reasons. Please email a...@twitter.com with your username and
we can lookup the information.

-Chad

On Tue, Oct 13, 2009 at 4:25 PM, Scott Haneda talkli...@newgeo.com wrote:

 I brought this up on this list before, let's look at this:

 http://help.twitter.com/home
 1) Where do I go to open a ticket?
 I read the entire page, to find a little link, that says ask us.

 That takes me to:
 http://twitter.zendesk.com/requests/new

 That redirects me around a few times, and takes me right back to
 help.twitter.com/home.

 2) How do I open a new ticket?  Why do I need to? Because I just got this
 email from twitter support:
 http://dl.getdropbox.com/u/340087/Drops/10.13.09/what-6855eebe-132402.png

 Thanks
 --
 Scott * If you contact me off list replace talklists@ with scott@ *




[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

Now there is an excellent analogy, which begs the question, Where is
the user's responsibility in this?

I have very clearly warned my users, every time they enter a tweet,
that they must adhere to the Twitter Rules, with hyperlinks to those
rules. That was not good enough.

So, with your analogy in mind, should the authorities pull over
speeders, or should they shut down manufacturers that make vehicles
that can exceed the speed limit? Or, in a different analogy, should
the government shut down Home Depot because they sell chain saws and
box cutters, and some people use chain saws and box cutters to murder
other human beings?

Dewald

On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
 Yes, and should be treated as such. I personally detest all those stupid
 twitter-based games. Point is, with Twitter's userbase, some get through the
 cracks. Don't like it, report it. This is like complaining that cops only
 pull over SOME speeders. Yeah, some are going to get through the cracks.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Cameron Kaiser

  For the sake of argument, let's take this at face value as true. How
  about the search pollution issue with recurrent tweets in general?
 
 You may have a point.  But it comes down to uneven enforcement.
 Twitter smacks down an app because they allow an individual to recur,
 say, every Monday: Today is Monday and my office hours will be from
 2:15-3:30pm.
 
 Meanwhile, you have apps which do things like this:
 http://search.twitter.com/search?q=%23fun140
 
 Aren't those effectively recurring tweets?

I agree, and actually I have a filter rule for something very similar. But
we're moving from definition of TOS to enforcement of same.

-- 
 personal: http://www.cameronkaiser.com/ --
  Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com
-- You can't have everything. Where would you put it? -- Steven Wright 


[twitter-dev] Picture overlapping

2009-10-13 Thread xmascowgirl

The pictures of who I am following overlap their tweets and I can't
read all of it.


[twitter-dev] Re: Ummmm, how in the heck does someone get support around here

2009-10-13 Thread Jacob

Hi Chad,

I've had difficulty receiving responses to #591600 and #593461 - is
this due to the bug? Looks like it's been ignored : 

Thanks

-Sam

On Oct 13, 9:37 pm, Chad Etzel c...@twitter.com wrote:
 There is currently a bug in the system that will inadvertently omit
 rejection reasons. Please email a...@twitter.com with your username and
 we can lookup the information.

 -Chad

 On Tue, Oct 13, 2009 at 4:25 PM, Scott Haneda talkli...@newgeo.com wrote:

  I brought this up on this list before, let's look at this:

 http://help.twitter.com/home
  1) Where do I go to open a ticket?
  I read the entire page, to find a little link, that says ask us.

  That takes me to:
 http://twitter.zendesk.com/requests/new

  That redirects me around a few times, and takes me right back to
  help.twitter.com/home.

  2) How do I open a new ticket?  Why do I need to? Because I just got this
  email from twitter support:
 http://dl.getdropbox.com/u/340087/Drops/10.13.09/what-6855eebe-132402...

  Thanks
  --
  Scott * If you contact me off list replace talklists@ with scott@ *


[twitter-dev] Re: Ummmm, how in the heck does someone get support around here

2009-10-13 Thread Chad Etzel

Hi Jacob and/or Sam,

I don't have any visibility into the Zen Desk tickets. You can try
supp...@twitter.com for that...

-Chad

On Tue, Oct 13, 2009 at 4:48 PM, Jacob sam...@gmail.com wrote:

 Hi Chad,

 I've had difficulty receiving responses to #591600 and #593461 - is
 this due to the bug? Looks like it's been ignored : 

 Thanks

 -Sam

 On Oct 13, 9:37 pm, Chad Etzel c...@twitter.com wrote:
 There is currently a bug in the system that will inadvertently omit
 rejection reasons. Please email a...@twitter.com with your username and
 we can lookup the information.

 -Chad

 On Tue, Oct 13, 2009 at 4:25 PM, Scott Haneda talkli...@newgeo.com wrote:

  I brought this up on this list before, let's look at this:

 http://help.twitter.com/home
  1) Where do I go to open a ticket?
  I read the entire page, to find a little link, that says ask us.

  That takes me to:
 http://twitter.zendesk.com/requests/new

  That redirects me around a few times, and takes me right back to
  help.twitter.com/home.

  2) How do I open a new ticket?  Why do I need to? Because I just got this
  email from twitter support:
 http://dl.getdropbox.com/u/340087/Drops/10.13.09/what-6855eebe-132402...

  Thanks
  --
  Scott * If you contact me off list replace talklists@ with scott@ *



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
They already do that ... in SOME cases. Pharmacies are required (or maybe
simply strongly encouraged) to sell OTC meds like Sudafed behind the counter
because some people use that to make crystal meth. The government requires a
waiting period on guns because some people use guns to murder people.

Rightly or wrongly -- and I seriously believe you did this with no abusive
intent -- you provided a tool that made it very easy for users to post
duplicate tweets. They didn't shut you down. They gave you a stern warning.

On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com wrote:


 Now there is an excellent analogy, which begs the question, Where is
 the user's responsibility in this?

 I have very clearly warned my users, every time they enter a tweet,
 that they must adhere to the Twitter Rules, with hyperlinks to those
 rules. That was not good enough.

 So, with your analogy in mind, should the authorities pull over
 speeders, or should they shut down manufacturers that make vehicles
 that can exceed the speed limit? Or, in a different analogy, should
 the government shut down Home Depot because they sell chain saws and
 box cutters, and some people use chain saws and box cutters to murder
 other human beings?

 Dewald

 On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
  Yes, and should be treated as such. I personally detest all those stupid
  twitter-based games. Point is, with Twitter's userbase, some get through
 the
  cracks. Don't like it, report it. This is like complaining that cops only
  pull over SOME speeders. Yeah, some are going to get through the cracks.




-- 
Internets. Serious business.


[twitter-dev] Re: Picture overlapping

2009-10-13 Thread Dave Briccetti

It sounds like you need to get the developer of your Twitter client in
here so we can help him.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Justyn

If duplicate tweets are the concern, then why are RT's on their way to
being a feature?

Abuse is the concern. Not duplicate content, right?

So a local restaurant can't setup a tweet to go out on Wednesdays to
remind their followers of 1/2 off appetizers? There's no ill intent
here, and they have businesses to run. Doesn't twitter want businesses
to foster it's platform? There's valid uses for recurring content
within reason. It's not realistic to ask users to come up with 52
unique headlines, hunt down the associated link and fire up the laptop
prior to happy to hour every Wednesday at 6:00 in order to get a
message out to people who opted to follow them.

What's the happy-medium here?

On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:
 They already do that ... in SOME cases. Pharmacies are required (or maybe
 simply strongly encouraged) to sell OTC meds like Sudafed behind the counter
 because some people use that to make crystal meth. The government requires a
 waiting period on guns because some people use guns to murder people.

 Rightly or wrongly -- and I seriously believe you did this with no abusive
 intent -- you provided a tool that made it very easy for users to post
 duplicate tweets. They didn't shut you down. They gave you a stern warning.



 On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com wrote:

  Now there is an excellent analogy, which begs the question, Where is
  the user's responsibility in this?

  I have very clearly warned my users, every time they enter a tweet,
  that they must adhere to the Twitter Rules, with hyperlinks to those
  rules. That was not good enough.

  So, with your analogy in mind, should the authorities pull over
  speeders, or should they shut down manufacturers that make vehicles
  that can exceed the speed limit? Or, in a different analogy, should
  the government shut down Home Depot because they sell chain saws and
  box cutters, and some people use chain saws and box cutters to murder
  other human beings?

  Dewald

  On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
   Yes, and should be treated as such. I personally detest all those stupid
   twitter-based games. Point is, with Twitter's userbase, some get through
  the
   cracks. Don't like it, report it. This is like complaining that cops only
   pull over SOME speeders. Yeah, some are going to get through the cracks.

 --
 Internets. Serious business.


[twitter-dev] Re: Ummmm, how in the heck does someone get support around here

2009-10-13 Thread Chad Etzel

There are many many reasons to reject whitelist applications. We
definitely will not whitelist an entire /24 block of IPs, though.  I
have responded to you off-list about your particular case.

-Chad

On Tue, Oct 13, 2009 at 7:59 PM, Scott Haneda talkli...@newgeo.com wrote:

 What is the most common reason a whitelist request is rejected?  I sent in a
 comma sep list of my entire /24, just because I do not know what IP's I am
 yet to use.  Is that probably it?
 --
 Scott * If you contact me off list replace talklists@ with scott@ *

 On Oct 13, 2009, at 1:37 PM, Chad Etzel wrote:

 There is currently a bug in the system that will inadvertently omit
 rejection reasons. Please email a...@twitter.com with your username and
 we can lookup the information.




[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread JDG
I dunno. It'd be nice. I personally like rearranging deck chairs like this.
It was civil and, hopefully, productive.

On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:


 I often wonder whether our non-API musings here on these forums have
 any effect on anything, or are we just amusing ourselves by
 rearranging deck chairs?

 Dewald

 On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
  If duplicate tweets are the concern, then why are RT's on their way to
  being a feature?
 
  Abuse is the concern. Not duplicate content, right?
 
  So a local restaurant can't setup a tweet to go out on Wednesdays to
  remind their followers of 1/2 off appetizers? There's no ill intent
  here, and they have businesses to run. Doesn't twitter want businesses
  to foster it's platform? There's valid uses for recurring content
  within reason. It's not realistic to ask users to come up with 52
  unique headlines, hunt down the associated link and fire up the laptop
  prior to happy to hour every Wednesday at 6:00 in order to get a
  message out to people who opted to follow them.
 
  What's the happy-medium here?
 
  On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:
 
   They already do that ... in SOME cases. Pharmacies are required (or
 maybe
   simply strongly encouraged) to sell OTC meds like Sudafed behind the
 counter
   because some people use that to make crystal meth. The government
 requires a
   waiting period on guns because some people use guns to murder people.
 
   Rightly or wrongly -- and I seriously believe you did this with no
 abusive
   intent -- you provided a tool that made it very easy for users to post
   duplicate tweets. They didn't shut you down. They gave you a stern
 warning.
 
   On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
 wrote:
 
Now there is an excellent analogy, which begs the question, Where is
the user's responsibility in this?
 
I have very clearly warned my users, every time they enter a tweet,
that they must adhere to the Twitter Rules, with hyperlinks to those
rules. That was not good enough.
 
So, with your analogy in mind, should the authorities pull over
speeders, or should they shut down manufacturers that make vehicles
that can exceed the speed limit? Or, in a different analogy, should
the government shut down Home Depot because they sell chain saws and
box cutters, and some people use chain saws and box cutters to murder
other human beings?
 
Dewald
 
On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
 Yes, and should be treated as such. I personally detest all those
 stupid
 twitter-based games. Point is, with Twitter's userbase, some get
 through
the
 cracks. Don't like it, report it. This is like complaining that
 cops only
 pull over SOME speeders. Yeah, some are going to get through the
 cracks.
 
   --
   Internets. Serious business.




-- 
Internets. Serious business.


[twitter-dev] Re: Obama: Afghanistan decision in 'coming weeks'

2009-10-13 Thread Chad Etzel

Cut it out, Abraham :P

ugh, spammers suck :(

On Tue, Oct 13, 2009 at 6:27 PM, News 4bra...@gmail.com wrote:
 Obama: Afghanistan decision in 'coming weeks'

 http://bit.ly/2dWFN5

 http://bit.ly/2dWFN5

 http://bit.ly/2dWFN5

 Obama: Afghanistan decision in 'coming weeks'


[twitter-dev] twitterauth unpacked into GEMS directory issue

2009-10-13 Thread Me

Has anyone had an issue doing ajax calls and the twitterauth thinking
it is the root directory rather than the app directory?


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

The only Twitter participation we've had thus far on this unfortunate
matter was Chad aging 10 years in 10 seconds over the idea that
someone can write a desktop or browser script that scrapes the login
page and then do whatever the hell it pleases (you know, like posting
something awful like recurring tweets).

The sad thing is this. Selected people at Twitter are very familiar
with my level of cooperation with them. Believe it or not, there are
people in Twitter who actually view me as one of the good guys.

With my users having a recurring tweet feature available to them, and
with the cooperation of Twitter and suitable information from Twitter,
I could have contained the matter programmatically.

But, with what essentially amounts as a flat-out rejection of my offer
to cooperate and change my system to prevent duplicate tweets, they
have now sent all those users off somewhere else, into the loving arms
of people who couldn't give a shit about working with Twitter, and
have in essence unleashed recurring tweet hell on themselves.

The demand for recurring tweets has not suddenly magically
disappeared. Let me repeat that. Hopefully someone in Twitter will
take notice. The demand for recurring tweets has not suddenly
magically disappeared.

Dewald

On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
 I dunno. It'd be nice. I personally like rearranging deck chairs like this.
 It was civil and, hopefully, productive.



 On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:

  I often wonder whether our non-API musings here on these forums have
  any effect on anything, or are we just amusing ourselves by
  rearranging deck chairs?

  Dewald

  On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
   If duplicate tweets are the concern, then why are RT's on their way to
   being a feature?

   Abuse is the concern. Not duplicate content, right?

   So a local restaurant can't setup a tweet to go out on Wednesdays to
   remind their followers of 1/2 off appetizers? There's no ill intent
   here, and they have businesses to run. Doesn't twitter want businesses
   to foster it's platform? There's valid uses for recurring content
   within reason. It's not realistic to ask users to come up with 52
   unique headlines, hunt down the associated link and fire up the laptop
   prior to happy to hour every Wednesday at 6:00 in order to get a
   message out to people who opted to follow them.

   What's the happy-medium here?

   On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:

They already do that ... in SOME cases. Pharmacies are required (or
  maybe
simply strongly encouraged) to sell OTC meds like Sudafed behind the
  counter
because some people use that to make crystal meth. The government
  requires a
waiting period on guns because some people use guns to murder people.

Rightly or wrongly -- and I seriously believe you did this with no
  abusive
intent -- you provided a tool that made it very easy for users to post
duplicate tweets. They didn't shut you down. They gave you a stern
  warning.

On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
  wrote:

 Now there is an excellent analogy, which begs the question, Where is
 the user's responsibility in this?

 I have very clearly warned my users, every time they enter a tweet,
 that they must adhere to the Twitter Rules, with hyperlinks to those
 rules. That was not good enough.

 So, with your analogy in mind, should the authorities pull over
 speeders, or should they shut down manufacturers that make vehicles
 that can exceed the speed limit? Or, in a different analogy, should
 the government shut down Home Depot because they sell chain saws and
 box cutters, and some people use chain saws and box cutters to murder
 other human beings?

 Dewald

 On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
  Yes, and should be treated as such. I personally detest all those
  stupid
  twitter-based games. Point is, with Twitter's userbase, some get
  through
 the
  cracks. Don't like it, report it. This is like complaining that
  cops only
  pull over SOME speeders. Yeah, some are going to get through the
  cracks.

--
Internets. Serious business.

 --
 Internets. Serious business.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Chad Etzel

Believe it or not, I've been reading every post on this thread with
great intent. I have been proxying major points to powers that be
and started an internal discussion on the topic at hand. The resulting
decisions and policies that may be made/enforced from these
discussions is, how do you say, above my pay grade.

We do listen to these threads as long as the discussion remains
constructive, which this one has.

-Chad

On Tue, Oct 13, 2009 at 9:08 PM, Dewald Pretorius dpr...@gmail.com wrote:

 The only Twitter participation we've had thus far on this unfortunate
 matter was Chad aging 10 years in 10 seconds over the idea that
 someone can write a desktop or browser script that scrapes the login
 page and then do whatever the hell it pleases (you know, like posting
 something awful like recurring tweets).

 The sad thing is this. Selected people at Twitter are very familiar
 with my level of cooperation with them. Believe it or not, there are
 people in Twitter who actually view me as one of the good guys.

 With my users having a recurring tweet feature available to them, and
 with the cooperation of Twitter and suitable information from Twitter,
 I could have contained the matter programmatically.

 But, with what essentially amounts as a flat-out rejection of my offer
 to cooperate and change my system to prevent duplicate tweets, they
 have now sent all those users off somewhere else, into the loving arms
 of people who couldn't give a shit about working with Twitter, and
 have in essence unleashed recurring tweet hell on themselves.

 The demand for recurring tweets has not suddenly magically
 disappeared. Let me repeat that. Hopefully someone in Twitter will
 take notice. The demand for recurring tweets has not suddenly
 magically disappeared.

 Dewald

 On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
 I dunno. It'd be nice. I personally like rearranging deck chairs like this.
 It was civil and, hopefully, productive.



 On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:

  I often wonder whether our non-API musings here on these forums have
  any effect on anything, or are we just amusing ourselves by
  rearranging deck chairs?

  Dewald

  On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
   If duplicate tweets are the concern, then why are RT's on their way to
   being a feature?

   Abuse is the concern. Not duplicate content, right?

   So a local restaurant can't setup a tweet to go out on Wednesdays to
   remind their followers of 1/2 off appetizers? There's no ill intent
   here, and they have businesses to run. Doesn't twitter want businesses
   to foster it's platform? There's valid uses for recurring content
   within reason. It's not realistic to ask users to come up with 52
   unique headlines, hunt down the associated link and fire up the laptop
   prior to happy to hour every Wednesday at 6:00 in order to get a
   message out to people who opted to follow them.

   What's the happy-medium here?

   On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:

They already do that ... in SOME cases. Pharmacies are required (or
  maybe
simply strongly encouraged) to sell OTC meds like Sudafed behind the
  counter
because some people use that to make crystal meth. The government
  requires a
waiting period on guns because some people use guns to murder people.

Rightly or wrongly -- and I seriously believe you did this with no
  abusive
intent -- you provided a tool that made it very easy for users to post
duplicate tweets. They didn't shut you down. They gave you a stern
  warning.

On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
  wrote:

 Now there is an excellent analogy, which begs the question, Where is
 the user's responsibility in this?

 I have very clearly warned my users, every time they enter a tweet,
 that they must adhere to the Twitter Rules, with hyperlinks to those
 rules. That was not good enough.

 So, with your analogy in mind, should the authorities pull over
 speeders, or should they shut down manufacturers that make vehicles
 that can exceed the speed limit? Or, in a different analogy, should
 the government shut down Home Depot because they sell chain saws and
 box cutters, and some people use chain saws and box cutters to murder
 other human beings?

 Dewald

 On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
  Yes, and should be treated as such. I personally detest all those
  stupid
  twitter-based games. Point is, with Twitter's userbase, some get
  through
 the
  cracks. Don't like it, report it. This is like complaining that
  cops only
  pull over SOME speeders. Yeah, some are going to get through the
  cracks.

--
Internets. Serious business.

 --
 Internets. Serious business.



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

Thank you Chad, that is comforting to know.

Dewald

On Oct 13, 10:28 pm, Chad Etzel c...@twitter.com wrote:
 Believe it or not, I've been reading every post on this thread with
 great intent. I have been proxying major points to powers that be
 and started an internal discussion on the topic at hand. The resulting
 decisions and policies that may be made/enforced from these
 discussions is, how do you say, above my pay grade.

 We do listen to these threads as long as the discussion remains
 constructive, which this one has.

 -Chad

 On Tue, Oct 13, 2009 at 9:08 PM, Dewald Pretorius dpr...@gmail.com wrote:

  The only Twitter participation we've had thus far on this unfortunate
  matter was Chad aging 10 years in 10 seconds over the idea that
  someone can write a desktop or browser script that scrapes the login
  page and then do whatever the hell it pleases (you know, like posting
  something awful like recurring tweets).

  The sad thing is this. Selected people at Twitter are very familiar
  with my level of cooperation with them. Believe it or not, there are
  people in Twitter who actually view me as one of the good guys.

  With my users having a recurring tweet feature available to them, and
  with the cooperation of Twitter and suitable information from Twitter,
  I could have contained the matter programmatically.

  But, with what essentially amounts as a flat-out rejection of my offer
  to cooperate and change my system to prevent duplicate tweets, they
  have now sent all those users off somewhere else, into the loving arms
  of people who couldn't give a shit about working with Twitter, and
  have in essence unleashed recurring tweet hell on themselves.

  The demand for recurring tweets has not suddenly magically
  disappeared. Let me repeat that. Hopefully someone in Twitter will
  take notice. The demand for recurring tweets has not suddenly
  magically disappeared.

  Dewald

  On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
  I dunno. It'd be nice. I personally like rearranging deck chairs like this.
  It was civil and, hopefully, productive.

  On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:

   I often wonder whether our non-API musings here on these forums have
   any effect on anything, or are we just amusing ourselves by
   rearranging deck chairs?

   Dewald

   On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
If duplicate tweets are the concern, then why are RT's on their way to
being a feature?

Abuse is the concern. Not duplicate content, right?

So a local restaurant can't setup a tweet to go out on Wednesdays to
remind their followers of 1/2 off appetizers? There's no ill intent
here, and they have businesses to run. Doesn't twitter want businesses
to foster it's platform? There's valid uses for recurring content
within reason. It's not realistic to ask users to come up with 52
unique headlines, hunt down the associated link and fire up the laptop
prior to happy to hour every Wednesday at 6:00 in order to get a
message out to people who opted to follow them.

What's the happy-medium here?

On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:

 They already do that ... in SOME cases. Pharmacies are required (or
   maybe
 simply strongly encouraged) to sell OTC meds like Sudafed behind the
   counter
 because some people use that to make crystal meth. The government
   requires a
 waiting period on guns because some people use guns to murder people.

 Rightly or wrongly -- and I seriously believe you did this with no
   abusive
 intent -- you provided a tool that made it very easy for users to 
 post
 duplicate tweets. They didn't shut you down. They gave you a stern
   warning.

 On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
   wrote:

  Now there is an excellent analogy, which begs the question, Where 
  is
  the user's responsibility in this?

  I have very clearly warned my users, every time they enter a tweet,
  that they must adhere to the Twitter Rules, with hyperlinks to 
  those
  rules. That was not good enough.

  So, with your analogy in mind, should the authorities pull over
  speeders, or should they shut down manufacturers that make vehicles
  that can exceed the speed limit? Or, in a different analogy, should
  the government shut down Home Depot because they sell chain saws 
  and
  box cutters, and some people use chain saws and box cutters to 
  murder
  other human beings?

  Dewald

  On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
   Yes, and should be treated as such. I personally detest all those
   stupid
   twitter-based games. Point is, with Twitter's userbase, some get
   through
  the
   cracks. Don't like it, report it. This is like complaining that
   cops only
   pull over SOME speeders. Yeah, some are going to get 

[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Justyn Howard

Thanks for the response Chad. Hoping we can find measures to curb abuse
while still allowing responsible use of recurrence as a useful tool for
publishers, businesses and their followers who benefit from the
consistency/timeliness of the communications.


On 10/13/09 8:28 PM, Chad Etzel c...@twitter.com wrote:

 
 Believe it or not, I've been reading every post on this thread with
 great intent. I have been proxying major points to powers that be
 and started an internal discussion on the topic at hand. The resulting
 decisions and policies that may be made/enforced from these
 discussions is, how do you say, above my pay grade.
 
 We do listen to these threads as long as the discussion remains
 constructive, which this one has.
 
 -Chad
 
 On Tue, Oct 13, 2009 at 9:08 PM, Dewald Pretorius dpr...@gmail.com wrote:
 
 The only Twitter participation we've had thus far on this unfortunate
 matter was Chad aging 10 years in 10 seconds over the idea that
 someone can write a desktop or browser script that scrapes the login
 page and then do whatever the hell it pleases (you know, like posting
 something awful like recurring tweets).
 
 The sad thing is this. Selected people at Twitter are very familiar
 with my level of cooperation with them. Believe it or not, there are
 people in Twitter who actually view me as one of the good guys.
 
 With my users having a recurring tweet feature available to them, and
 with the cooperation of Twitter and suitable information from Twitter,
 I could have contained the matter programmatically.
 
 But, with what essentially amounts as a flat-out rejection of my offer
 to cooperate and change my system to prevent duplicate tweets, they
 have now sent all those users off somewhere else, into the loving arms
 of people who couldn't give a shit about working with Twitter, and
 have in essence unleashed recurring tweet hell on themselves.
 
 The demand for recurring tweets has not suddenly magically
 disappeared. Let me repeat that. Hopefully someone in Twitter will
 take notice. The demand for recurring tweets has not suddenly
 magically disappeared.
 
 Dewald
 
 On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
 I dunno. It'd be nice. I personally like rearranging deck chairs like this.
 It was civil and, hopefully, productive.
 
 
 
 On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:
 
 I often wonder whether our non-API musings here on these forums have
 any effect on anything, or are we just amusing ourselves by
 rearranging deck chairs?
 
 Dewald
 
 On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
 If duplicate tweets are the concern, then why are RT's on their way to
 being a feature?
 
 Abuse is the concern. Not duplicate content, right?
 
 So a local restaurant can't setup a tweet to go out on Wednesdays to
 remind their followers of 1/2 off appetizers? There's no ill intent
 here, and they have businesses to run. Doesn't twitter want businesses
 to foster it's platform? There's valid uses for recurring content
 within reason. It's not realistic to ask users to come up with 52
 unique headlines, hunt down the associated link and fire up the laptop
 prior to happy to hour every Wednesday at 6:00 in order to get a
 message out to people who opted to follow them.
 
 What's the happy-medium here?
 
 On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:
 
 They already do that ... in SOME cases. Pharmacies are required (or
 maybe
 simply strongly encouraged) to sell OTC meds like Sudafed behind the
 counter
 because some people use that to make crystal meth. The government
 requires a
 waiting period on guns because some people use guns to murder people.
 
 Rightly or wrongly -- and I seriously believe you did this with no
 abusive
 intent -- you provided a tool that made it very easy for users to post
 duplicate tweets. They didn't shut you down. They gave you a stern
 warning.
 
 On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
 wrote:
 
 Now there is an excellent analogy, which begs the question, Where is
 the user's responsibility in this?
 
 I have very clearly warned my users, every time they enter a tweet,
 that they must adhere to the Twitter Rules, with hyperlinks to those
 rules. That was not good enough.
 
 So, with your analogy in mind, should the authorities pull over
 speeders, or should they shut down manufacturers that make vehicles
 that can exceed the speed limit? Or, in a different analogy, should
 the government shut down Home Depot because they sell chain saws and
 box cutters, and some people use chain saws and box cutters to murder
 other human beings?
 
 Dewald
 
 On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
 Yes, and should be treated as such. I personally detest all those
 stupid
 twitter-based games. Point is, with Twitter's userbase, some get
 through
 the
 cracks. Don't like it, report it. This is like complaining that
 cops only
 pull over SOME speeders. Yeah, some are going to get through the
 cracks.
 

[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

Chad,

Perhaps it will behoove the powers that be to actually speak to some
of us developers to discover the ways people are using Twitter. When
decisions are made from the isolation of the glass bubble of the
Twitter Head Office, without really knowing what the USERS want, stuff
like this ensues.

Dewald

On Oct 13, 10:28 pm, Chad Etzel c...@twitter.com wrote:
 Believe it or not, I've been reading every post on this thread with
 great intent. I have been proxying major points to powers that be
 and started an internal discussion on the topic at hand. The resulting
 decisions and policies that may be made/enforced from these
 discussions is, how do you say, above my pay grade.

 We do listen to these threads as long as the discussion remains
 constructive, which this one has.

 -Chad

 On Tue, Oct 13, 2009 at 9:08 PM, Dewald Pretorius dpr...@gmail.com wrote:

  The only Twitter participation we've had thus far on this unfortunate
  matter was Chad aging 10 years in 10 seconds over the idea that
  someone can write a desktop or browser script that scrapes the login
  page and then do whatever the hell it pleases (you know, like posting
  something awful like recurring tweets).

  The sad thing is this. Selected people at Twitter are very familiar
  with my level of cooperation with them. Believe it or not, there are
  people in Twitter who actually view me as one of the good guys.

  With my users having a recurring tweet feature available to them, and
  with the cooperation of Twitter and suitable information from Twitter,
  I could have contained the matter programmatically.

  But, with what essentially amounts as a flat-out rejection of my offer
  to cooperate and change my system to prevent duplicate tweets, they
  have now sent all those users off somewhere else, into the loving arms
  of people who couldn't give a shit about working with Twitter, and
  have in essence unleashed recurring tweet hell on themselves.

  The demand for recurring tweets has not suddenly magically
  disappeared. Let me repeat that. Hopefully someone in Twitter will
  take notice. The demand for recurring tweets has not suddenly
  magically disappeared.

  Dewald

  On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
  I dunno. It'd be nice. I personally like rearranging deck chairs like this.
  It was civil and, hopefully, productive.

  On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:

   I often wonder whether our non-API musings here on these forums have
   any effect on anything, or are we just amusing ourselves by
   rearranging deck chairs?

   Dewald

   On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
If duplicate tweets are the concern, then why are RT's on their way to
being a feature?

Abuse is the concern. Not duplicate content, right?

So a local restaurant can't setup a tweet to go out on Wednesdays to
remind their followers of 1/2 off appetizers? There's no ill intent
here, and they have businesses to run. Doesn't twitter want businesses
to foster it's platform? There's valid uses for recurring content
within reason. It's not realistic to ask users to come up with 52
unique headlines, hunt down the associated link and fire up the laptop
prior to happy to hour every Wednesday at 6:00 in order to get a
message out to people who opted to follow them.

What's the happy-medium here?

On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:

 They already do that ... in SOME cases. Pharmacies are required (or
   maybe
 simply strongly encouraged) to sell OTC meds like Sudafed behind the
   counter
 because some people use that to make crystal meth. The government
   requires a
 waiting period on guns because some people use guns to murder people.

 Rightly or wrongly -- and I seriously believe you did this with no
   abusive
 intent -- you provided a tool that made it very easy for users to 
 post
 duplicate tweets. They didn't shut you down. They gave you a stern
   warning.

 On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
   wrote:

  Now there is an excellent analogy, which begs the question, Where 
  is
  the user's responsibility in this?

  I have very clearly warned my users, every time they enter a tweet,
  that they must adhere to the Twitter Rules, with hyperlinks to 
  those
  rules. That was not good enough.

  So, with your analogy in mind, should the authorities pull over
  speeders, or should they shut down manufacturers that make vehicles
  that can exceed the speed limit? Or, in a different analogy, should
  the government shut down Home Depot because they sell chain saws 
  and
  box cutters, and some people use chain saws and box cutters to 
  murder
  other human beings?

  Dewald

  On Oct 13, 5:31 pm, JDG ghil...@gmail.com wrote:
   Yes, and should be treated as such. I personally detest all 

[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

With communication like that, we can together figure out ways to give
the users what they want in a manner that does not put undue strain on
your system.

Pissing developers off is NOT the right way to do it.

Dewald

On Oct 13, 10:58 pm, Dewald Pretorius dpr...@gmail.com wrote:
 Chad,

 Perhaps it will behoove the powers that be to actually speak to some
 of us developers to discover the ways people are using Twitter. When
 decisions are made from the isolation of the glass bubble of the
 Twitter Head Office, without really knowing what the USERS want, stuff
 like this ensues.

 Dewald

 On Oct 13, 10:28 pm, Chad Etzel c...@twitter.com wrote:

  Believe it or not, I've been reading every post on this thread with
  great intent. I have been proxying major points to powers that be
  and started an internal discussion on the topic at hand. The resulting
  decisions and policies that may be made/enforced from these
  discussions is, how do you say, above my pay grade.

  We do listen to these threads as long as the discussion remains
  constructive, which this one has.

  -Chad

  On Tue, Oct 13, 2009 at 9:08 PM, Dewald Pretorius dpr...@gmail.com wrote:

   The only Twitter participation we've had thus far on this unfortunate
   matter was Chad aging 10 years in 10 seconds over the idea that
   someone can write a desktop or browser script that scrapes the login
   page and then do whatever the hell it pleases (you know, like posting
   something awful like recurring tweets).

   The sad thing is this. Selected people at Twitter are very familiar
   with my level of cooperation with them. Believe it or not, there are
   people in Twitter who actually view me as one of the good guys.

   With my users having a recurring tweet feature available to them, and
   with the cooperation of Twitter and suitable information from Twitter,
   I could have contained the matter programmatically.

   But, with what essentially amounts as a flat-out rejection of my offer
   to cooperate and change my system to prevent duplicate tweets, they
   have now sent all those users off somewhere else, into the loving arms
   of people who couldn't give a shit about working with Twitter, and
   have in essence unleashed recurring tweet hell on themselves.

   The demand for recurring tweets has not suddenly magically
   disappeared. Let me repeat that. Hopefully someone in Twitter will
   take notice. The demand for recurring tweets has not suddenly
   magically disappeared.

   Dewald

   On Oct 13, 9:22 pm, JDG ghil...@gmail.com wrote:
   I dunno. It'd be nice. I personally like rearranging deck chairs like 
   this.
   It was civil and, hopefully, productive.

   On Tue, Oct 13, 2009 at 17:39, Dewald Pretorius dpr...@gmail.com wrote:

I often wonder whether our non-API musings here on these forums have
any effect on anything, or are we just amusing ourselves by
rearranging deck chairs?

Dewald

On Oct 13, 8:03 pm, Justyn justyn.how...@gmail.com wrote:
 If duplicate tweets are the concern, then why are RT's on their way 
 to
 being a feature?

 Abuse is the concern. Not duplicate content, right?

 So a local restaurant can't setup a tweet to go out on Wednesdays to
 remind their followers of 1/2 off appetizers? There's no ill intent
 here, and they have businesses to run. Doesn't twitter want 
 businesses
 to foster it's platform? There's valid uses for recurring content
 within reason. It's not realistic to ask users to come up with 52
 unique headlines, hunt down the associated link and fire up the 
 laptop
 prior to happy to hour every Wednesday at 6:00 in order to get a
 message out to people who opted to follow them.

 What's the happy-medium here?

 On Oct 13, 4:00 pm, JDG ghil...@gmail.com wrote:

  They already do that ... in SOME cases. Pharmacies are required (or
maybe
  simply strongly encouraged) to sell OTC meds like Sudafed behind 
  the
counter
  because some people use that to make crystal meth. The government
requires a
  waiting period on guns because some people use guns to murder 
  people.

  Rightly or wrongly -- and I seriously believe you did this with no
abusive
  intent -- you provided a tool that made it very easy for users to 
  post
  duplicate tweets. They didn't shut you down. They gave you a stern
warning.

  On Tue, Oct 13, 2009 at 14:39, Dewald Pretorius dpr...@gmail.com
wrote:

   Now there is an excellent analogy, which begs the question, 
   Where is
   the user's responsibility in this?

   I have very clearly warned my users, every time they enter a 
   tweet,
   that they must adhere to the Twitter Rules, with hyperlinks to 
   those
   rules. That was not good enough.

   So, with your analogy in mind, should the authorities pull over
   speeders, or should they shut down manufacturers that make 
  

[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread PJB


Chad:

Sorry, I didn't see you had posted in here, and not sure if my
subsequent posts properly answered you.

I mean that Desktop apps, not being bound by a whitelisted IP,
wouldn't be limited by restrictions limiting API access to OAUTH
only.  Namely, a desktop client could use a Mozilla user-agent, scrape
Twitter.com, grab an authenticity_token, and then do a simple HTTP
form submission with plaintext username/password.  From there, the
client could do whatever outlawed actions aren't possible from Web
apps.

While you could presumably find some commonalities with these logins
for a time, probably the only effective way to counter this approach
is to introduce login captchas.  And that's an ugly barrier to entry
for the average user.

Restricting Web-based apps will presumably shift the policed behavior
to such desktop apps, where it would probably morph into something
even more destructive.

As a web-based developer, I've previously asked for guidelines on what
our responsibilities are in terms of self-policing.  No answer.  And
it's really disheartening to hear that carte blanche limitations are
now being imposed.

There are obvious legitimate uses for recurring dynamic tweets (e.g.,
NBC announcing show schedules/guests, or fitness apps tweeting how
many miles you ran).  Blocking such behavior across the board seems
incredibly short-sighted and limits further important business-
oriented development in this area.

PB

On Oct 13, 12:47 pm, Chad Etzel c...@twitter.com wrote:
 On Tue, Oct 13, 2009 at 3:38 PM, PJB pjbmancun...@gmail.com wrote:

  Wrong.  Basic Authentication will obviously ALWAYS be an option for
  desktop clients, regardless of whether or not it is via API.

 Please explain this statement?
 -Chad

  Furthermore, the app in question explicitly offered the option of a
  recurring tweet which is a violation of the TOS. Regardless of whether or
  not that provides a useful service -- I'm not going to start debating that
  -- the fact of the matter is it *is* a violation of the TOS. Plain and
  simple. Why shouldn't they be allowed (as if we have a say what a private
  company does with their own resources) to ban an app that violates the TOS
  with one of their own options?

  I see, so then sites like mapmyrun and others that, for example, tweet
  Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
  hour, and other templated text, are also in violation of the terms?
  Or what about hootsuite where I can queue up 100 tweets with the exact
  same text to fire off every hour, perhaps interspersed with a second
  tweet?

  The bottom line is that this situation isn't as black and white as you
  think, and Twitter's approach is wrong-headed.




[twitter-dev] Re: Noise-tweet regex repository

2009-10-13 Thread Nalin Savara

also , there should be a way for people whose tweets are wrongly
marked as spam to remove their reg -exes from the system- and the
system can perhaps send a direct message to sender for every 100 or so
noise tweets blocked.

Just a thought..

N. S

On 10/14/09, Dave Briccetti da...@davebsoft.com wrote:

 The regexes can be pulled into an application at runtime, or at any
 other time by humans, machines, and perhaps beasts.

 For now I am happy to take the submitted noise-tweet candidates and
 create the regexes from them.

 I’m thinking of expanding the filtering to include application names
 (the “source” from the status). Like “foursquare.” But then we get
 into an area where many Twitter users will want to see those, so this
 brings to mind client features where users can select which of these
 repository filters to use.


[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread Dewald Pretorius

I've previously asked for guidelines on what our responsibilities are
in terms of self-policing.  No answer.

Add to that the clear and unambiguous definition of things. Yeah sure,
Twitter cannot clearly define things because that will aid the
spammers. Bullshit. It is their responsibility to define what exactly
is acceptable to them. That will not assist the spammers. It will
assist us to not inadvertently, through wrong interpretation or
assumption, provide a platform that spammers can leverage.

Up until the first email I received from Twitter on October 8th, I was
monitoring the level of duplicate tweet rejection that the API was
giving, and I consequently concluded that the users of my service was
not producing a large amount of duplicate tweets. Seems like their
internal definition of duplicate content is far wider than the
interpretation of the Platform Team when they wrote the code to reject
duplicate tweets.

I still do not know exactly what is duplicate content and what is
not. Do you? I guess not. Nobody knows.

Dewald

On Oct 13, 11:07 pm, PJB pjbmancun...@gmail.com wrote:
 Chad:

 Sorry, I didn't see you had posted in here, and not sure if my
 subsequent posts properly answered you.

 I mean that Desktop apps, not being bound by a whitelisted IP,
 wouldn't be limited by restrictions limiting API access to OAUTH
 only.  Namely, a desktop client could use a Mozilla user-agent, scrape
 Twitter.com, grab an authenticity_token, and then do a simple HTTP
 form submission with plaintext username/password.  From there, the
 client could do whatever outlawed actions aren't possible from Web
 apps.

 While you could presumably find some commonalities with these logins
 for a time, probably the only effective way to counter this approach
 is to introduce login captchas.  And that's an ugly barrier to entry
 for the average user.

 Restricting Web-based apps will presumably shift the policed behavior
 to such desktop apps, where it would probably morph into something
 even more destructive.

 As a web-based developer, I've previously asked for guidelines on what
 our responsibilities are in terms of self-policing.  No answer.  And
 it's really disheartening to hear that carte blanche limitations are
 now being imposed.

 There are obvious legitimate uses for recurring dynamic tweets (e.g.,
 NBC announcing show schedules/guests, or fitness apps tweeting how
 many miles you ran).  Blocking such behavior across the board seems
 incredibly short-sighted and limits further important business-
 oriented development in this area.

 PB

 On Oct 13, 12:47 pm, Chad Etzel c...@twitter.com wrote:

  On Tue, Oct 13, 2009 at 3:38 PM, PJB pjbmancun...@gmail.com wrote:

   Wrong.  Basic Authentication will obviously ALWAYS be an option for
   desktop clients, regardless of whether or not it is via API.

  Please explain this statement?
  -Chad

   Furthermore, the app in question explicitly offered the option of a
   recurring tweet which is a violation of the TOS. Regardless of whether or
   not that provides a useful service -- I'm not going to start debating 
   that
   -- the fact of the matter is it *is* a violation of the TOS. Plain and
   simple. Why shouldn't they be allowed (as if we have a say what a 
   private
   company does with their own resources) to ban an app that violates the 
   TOS
   with one of their own options?

   I see, so then sites like mapmyrun and others that, for example, tweet
   Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
   hour, and other templated text, are also in violation of the terms?
   Or what about hootsuite where I can queue up 100 tweets with the exact
   same text to fire off every hour, perhaps interspersed with a second
   tweet?

   The bottom line is that this situation isn't as black and white as you
   think, and Twitter's approach is wrong-headed.


[twitter-dev] Famous Personality Twitter Accounts

2009-10-13 Thread Yogesh Mali
Hello
This might be naive, but I was checking out many Hollywood, sports
personalities twitter accounts. So how does Twitter authenticate these users
from fake accounts? Initially I thought verified accounts will be the way,
but then I saw there are many people whose accounts are not verified , but
still they have many followers and also verified accounts say it is for
avoiding duplicate names. Does twitter actually avoid fake stuff compared to
other social networking sites?


Thanks
Yogesh


[twitter-dev] Re: Famous Personality Twitter Accounts

2009-10-13 Thread Atul Kulkarni
did you want this - http://twitter.com/verified ?

On Tue, Oct 13, 2009 at 10:13 PM, Yogesh Mali yomali1...@gmail.com wrote:

 Hello
 This might be naive, but I was checking out many Hollywood, sports
 personalities twitter accounts. So how does Twitter authenticate these users
 from fake accounts? Initially I thought verified accounts will be the way,
 but then I saw there are many people whose accounts are not verified , but
 still they have many followers and also verified accounts say it is for
 avoiding duplicate names. Does twitter actually avoid fake stuff compared to
 other social networking sites?


 Thanks
 Yogesh




-- 
Regards,
Atul Kulkarni
www.d.umn.edu/~kulka053


[twitter-dev] Re: Famous Personality Twitter Accounts

2009-10-13 Thread Atul Kulkarni
anyway, ignore my previous response.

On Tue, Oct 13, 2009 at 10:13 PM, Yogesh Mali yomali1...@gmail.com wrote:

 Hello
 This might be naive, but I was checking out many Hollywood, sports
 personalities twitter accounts. So how does Twitter authenticate these users
 from fake accounts? Initially I thought verified accounts will be the way,
 but then I saw there are many people whose accounts are not verified , but
 still they have many followers and also verified accounts say it is for
 avoiding duplicate names. Does twitter actually avoid fake stuff compared to
 other social networking sites?


 Thanks
 Yogesh




-- 
Regards,
Atul Kulkarni
www.d.umn.edu/~kulka053


[twitter-dev] Re: OAuth wed desktop feedback

2009-10-13 Thread BlueSkies


When my application requests an OAuth token on behalf of a user trying
to login, I have been seeing some errors:

Frequently: /oauth/access_token Invalid / expired Token

What is the length of time that a token is supposed to be valid for?
Is this documented and can it be extended?  I'm sure that I probably
lose quite a few first time users when this happens.  I imagine that
they probably bring up my login page, get distracted and then run into
this problem when they eventually try to log in.


Occasionally: Twitter is over capacity.

Would it make any sense to prioritize token handling when Twitter is
at capacity?  This is also an issue with wanting to allow my new users
to login easily, even if they can't tweet right away (to avoid user
conversion loss).  My existing users probably never experience this
issue with tokens when Twitter is at capacity, since my application
caches credentials (as most other apps are probably also doing), so
they don't normally go through my OAuth login flow very often.


Not often: Unknown SSL protocol error in connection to twitter.com:
443

I'm not sure what causes this?  I don't see it too often.


- Scott





[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread BlueSkies


Chad,

Could you provide Twitter's official stance on what exactly is being
banned?  If the ban is limited to recurring tweets, it would help to
have a clear definition.

Can I assume that this means that Twitter is no longer allowing a
single user to publish the substantially same content to their stream
more than once whether by automated or manual means?  That the
separation in time or number of tweets between occurences is not
considered in the determination?

Can I also assume that two tweets with substantially the same content
on *different* user's streams (essentially retweets with or without
RT) either manually or via application IS alllowed and is not a
violation?

A clarification would be very much appreciated in order to allow
myself and other developers to plan new features accordingly.

Thanks,

Scott





[twitter-dev] /users/show.xml? doesn't return xml string

2009-10-13 Thread ArnieLapinig

Hello,

I hope someone can help my query with the REST API /users/show.xml
doesn't seem to be returning an xml string...

I'm getting strange data back from my query. Here's the code:

 $twitterHost = 'http://twitter.com/users/show.xml?
screen_name=' . urlencode($lookforname);

 $curl = curl_init();

 curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 2);
 curl_setopt($curl, CURLOPT_HEADER, false);
 curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
 curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
 curl_setopt($curl, CURLOPT_USERPWD, $username:
$password);
 curl_setopt($curl, CURLOPT_HTTP_VERSION,
CURL_HTTP_VERSION_1_1);
 curl_setopt($curl, CURLOPT_URL, $twitterHost);

 $query = curl_exec($curl);

and here's what i'm getting:


$twitterHoststring(59) http://twitter.com/users/show.xml?
screen_name=mandarine_one

$query

string(2023)  32432559 anton mandarine_one Neuburg an der Donau
Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
die Arbeit. http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
http://www.grizzlyfear.de false 159 EBEBEB 33 99 F3F3F3 DFDFDF
238 Fri Apr 17 14:49:15 + 2009 23 3600 Berlin
http://a1.twimg.com/profile_background_images/41257908/8edd7_014-sergeypoluse.jpg
true 2129 false false false false Tue Oct 13 17:19:41 + 2009
4839657896 @_Schnucki_ madame sie gruseln mir die scheisse aus dem
leid. du schreibst von stromschlag und bei mir geht das licht aus
#scary a target='_blank' href=http://www.atebits.com/;
rel=nofollowTweetie/a false 4839540863 50962463 false _Schnucki_


when i paste http://twitter.com/users/show.xml?
screen_name=mandarine_one into the browser, i get an xml string:

user
id32432559/id
nameanton/name
screen_namemandarine_one/screen_name
locationNeuburg an der Donau/location
description
Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
die Arbeit.
/description
profile_image_url
http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
/profile_image_url
urlhttp://www.grizzlyfear.de/url
protectedfalse/protected
 etc etc etc etc...

Am I making some sort of basic mistake?

Thanks for helping...



[twitter-dev] Re: Duplicate Tweets

2009-10-13 Thread menro

I use a service called localbunny that allows people to pull content
on request, will this type of service be effected as well:

Example: a user types @TwitterName keyword this returns 1- 5 tweets.
Multiple people tweet that syntax per day and prior to a meeting 100's
of people might make this same request. The returned results are
always the same, but they are addressed to different people. To
minimize the noise in the stream the service also users a listener
(@BDNT) and a responder (@BDNT_AR).

thoughts?


On Oct 13, 8:46 pm, Dewald Pretorius dpr...@gmail.com wrote:
 I've previously asked for guidelines on what our responsibilities are
 in terms of self-policing.  No answer.

 Add to that the clear and unambiguous definition of things. Yeah sure,
 Twitter cannot clearly define things because that will aid the
 spammers. Bullshit. It is their responsibility to define what exactly
 is acceptable to them. That will not assist the spammers. It will
 assist us to not inadvertently, through wrong interpretation or
 assumption, provide a platform that spammers can leverage.

 Up until the first email I received from Twitter on October 8th, I was
 monitoring the level of duplicate tweet rejection that the API was
 giving, and I consequently concluded that the users of my service was
 not producing a large amount of duplicate tweets. Seems like their
 internal definition of duplicate content is far wider than the
 interpretation of the Platform Team when they wrote the code to reject
 duplicate tweets.

 I still do not know exactly what is duplicate content and what is
 not. Do you? I guess not. Nobody knows.

 Dewald

 On Oct 13, 11:07 pm, PJB pjbmancun...@gmail.com wrote:



  Chad:

  Sorry, I didn't see you had posted in here, and not sure if my
  subsequent posts properly answered you.

  I mean that Desktop apps, not being bound by a whitelisted IP,
  wouldn't be limited by restrictions limiting API access to OAUTH
  only.  Namely, a desktop client could use a Mozilla user-agent, scrape
  Twitter.com, grab an authenticity_token, and then do a simple HTTP
  form submission with plaintext username/password.  From there, the
  client could do whatever outlawed actions aren't possible from Web
  apps.

  While you could presumably find some commonalities with these logins
  for a time, probably the only effective way to counter this approach
  is to introduce login captchas.  And that's an ugly barrier to entry
  for the average user.

  Restricting Web-based apps will presumably shift the policed behavior
  to such desktop apps, where it would probably morph into something
  even more destructive.

  As a web-based developer, I've previously asked for guidelines on what
  our responsibilities are in terms of self-policing.  No answer.  And
  it's really disheartening to hear that carte blanche limitations are
  now being imposed.

  There are obvious legitimate uses for recurring dynamic tweets (e.g.,
  NBC announcing show schedules/guests, or fitness apps tweeting how
  many miles you ran).  Blocking such behavior across the board seems
  incredibly short-sighted and limits further important business-
  oriented development in this area.

  PB

  On Oct 13, 12:47 pm, Chad Etzel c...@twitter.com wrote:

   On Tue, Oct 13, 2009 at 3:38 PM, PJB pjbmancun...@gmail.com wrote:

Wrong.  Basic Authentication will obviously ALWAYS be an option for
desktop clients, regardless of whether or not it is via API.

   Please explain this statement?
   -Chad

Furthermore, the app in question explicitly offered the option of a
recurring tweet which is a violation of the TOS. Regardless of whether 
or
not that provides a useful service -- I'm not going to start debating 
that
-- the fact of the matter is it *is* a violation of the TOS. Plain and
simple. Why shouldn't they be allowed (as if we have a say what a 
private
company does with their own resources) to ban an app that violates the 
TOS
with one of their own options?

I see, so then sites like mapmyrun and others that, for example, tweet
Bob ran 10 miles today in 2 hours, Bob ran 12 miles today in 1
hour, and other templated text, are also in violation of the terms?
Or what about hootsuite where I can queue up 100 tweets with the exact
same text to fire off every hour, perhaps interspersed with a second
tweet?

The bottom line is that this situation isn't as black and white as you
think, and Twitter's approach is wrong-headed.


[twitter-dev] Re: /users/show.xml? doesn't return xml string

2009-10-13 Thread JDG
How are you showing $query? If you're just doing print $query in a browser,
the XML wouldn't show up in the window. You could either set the
Content-type: text/plain before outputting $query, or by checking view
source.

On Tue, Oct 13, 2009 at 22:37, ArnieLapinig arnie.lapi...@gmail.com wrote:


 Hello,

 I hope someone can help my query with the REST API /users/show.xml
 doesn't seem to be returning an xml string...

 I'm getting strange data back from my query. Here's the code:

 $twitterHost = 'http://twitter.com/users/show.xml?
 screen_name=' . urlencode($lookforname);

 $curl = curl_init();

 curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 2);
 curl_setopt($curl, CURLOPT_HEADER, false);
 curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
 curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
 curl_setopt($curl, CURLOPT_USERPWD, $username:
 $password);
 curl_setopt($curl, CURLOPT_HTTP_VERSION,
 CURL_HTTP_VERSION_1_1);
 curl_setopt($curl, CURLOPT_URL, $twitterHost);

 $query = curl_exec($curl);

 and here's what i'm getting:


 $twitterHoststring(59) http://twitter.com/users/show.xml?
 screen_name=mandarine_onehttp://twitter.com/users/show.xml?%0Ascreen_name=mandarine_one
 

 $query

 string(2023)  32432559 anton mandarine_one Neuburg an der Donau
 Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
 die Arbeit.
 http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
 http://www.grizzlyfear.de false 159 EBEBEB 33 99 F3F3F3 DFDFDF
 238 Fri Apr 17 14:49:15 + 2009 23 3600 Berlin

 http://a1.twimg.com/profile_background_images/41257908/8edd7_014-sergeypoluse.jpg
 true 2129 false false false false Tue Oct 13 17:19:41 + 2009
 4839657896 @_Schnucki_ madame sie gruseln mir die scheisse aus dem
 leid. du schreibst von stromschlag und bei mir geht das licht aus
 #scary a target='_blank' href=http://www.atebits.com/;
 rel=nofollowTweetie/a false 4839540863 50962463 false _Schnucki_
 

 when i paste http://twitter.com/users/show.xml?
 screen_name=mandarine_onehttp://twitter.com/users/show.xml?%0Ascreen_name=mandarine_one
 into the browser, i get an xml string:

 user
 id32432559/id
 nameanton/name
 screen_namemandarine_one/screen_name
 locationNeuburg an der Donau/location
 description
 Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
 die Arbeit.
 /description
 profile_image_url
 http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
 /profile_image_url
 urlhttp://www.grizzlyfear.de/url
 protectedfalse/protected
  etc etc etc etc...

 Am I making some sort of basic mistake?

 Thanks for helping...




-- 
Internets. Serious business.


[twitter-dev] Re: /users/show.xml? doesn't return xml string

2009-10-13 Thread Scott Haneda


I just ran your exact code, and was able to pull an xml string just  
fine, so I do not believe it is your code.  The only thing I can think  
is you may want to curl_close() the connection, perhaps there is some  
caching or other similar thing in effect, though that is a big long  
shot.


Maybe try curl on the command line, on the same host, and see what  
your results are, if that works, you can start looking at your code,  
otherwise, it may just be an temporary glitch in the API.


You may want to look into doing some more testing in your command  
though, return the headers, and look at the http responses, so you  
know when you have a 200 ok one, versus some of the others, in which  
case you will want to be abel to gracefully degrade your application  
in some way.


Sorry I could not be of more help.
--
Scott * If you contact me off list replace talklists@ with scott@ *

On Oct 13, 2009, at 9:37 PM, ArnieLapinig wrote:



Hello,

I hope someone can help my query with the REST API /users/show.xml
doesn't seem to be returning an xml string...

I'm getting strange data back from my query. Here's the code:

$twitterHost = 'http://twitter.com/users/show.xml?
screen_name=' . urlencode($lookforname);

$curl = curl_init();

curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 2);
curl_setopt($curl, CURLOPT_HEADER, false);
curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($curl, CURLOPT_USERPWD, $username:
$password);
curl_setopt($curl, CURLOPT_HTTP_VERSION,
CURL_HTTP_VERSION_1_1);
curl_setopt($curl, CURLOPT_URL, $twitterHost);

$query = curl_exec($curl);

and here's what i'm getting:


$twitterHoststring(59) http://twitter.com/users/show.xml?
screen_name=mandarine_one

$query

string(2023)  32432559 anton mandarine_one Neuburg an der Donau
Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
die Arbeit. http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
http://www.grizzlyfear.de false 159 EBEBEB 33 99 F3F3F3 DFDFDF
238 Fri Apr 17 14:49:15 + 2009 23 3600 Berlin
http://a1.twimg.com/profile_background_images/41257908/8edd7_014-sergeypoluse.jpg
true 2129 false false false false Tue Oct 13 17:19:41 + 2009
4839657896 @_Schnucki_ madame sie gruseln mir die scheisse aus dem
leid. du schreibst von stromschlag und bei mir geht das licht aus
#scary a target='_blank' href=http://www.atebits.com/;
rel=nofollowTweetie/a false 4839540863 50962463 false _Schnucki_


when i paste http://twitter.com/users/show.xml?
screen_name=mandarine_one into the browser, i get an xml string:

user
id32432559/id
nameanton/name
screen_namemandarine_one/screen_name
locationNeuburg an der Donau/location
description
Mediengestalter, Nerd, Comic- und Musikliebhaber, nörgelt gerne über
die Arbeit.
/description
profile_image_url
http://a3.twimg.com/profile_images/435301043/twitter_normal.jpg
/profile_image_url
urlhttp://www.grizzlyfear.de/url
protectedfalse/protected
etc etc etc etc...

Am I making some sort of basic mistake?

Thanks for helping...