Hello All,
Is there anyone have an experience to hijack a twitter account?
well, the story is really weird. There is a celebrity's account
hijacked (password stolen, etc), and then he created a new account,
the told the world that he could do something in his old account, e.g.
sending a new
On Tue, 13 Oct 2009 23:48:13 -0700 (PDT)
ruckuus ruck...@gmail.com wrote:
Is there anyone have an experience to hijack a twitter account?
The security profile of a Twitter account is no different than that of
many other on-line services. The major weaknesses are signing in over
HTTP, accepting
I thought the new terms sorted this out
Get each user's consent before sending Tweets or other messages on
their behalf. A user authenticating with your application does not
constitute consent to send a message.
On Oct 9, 10:22 am, Sam Street sam...@gmail.com wrote:
Please don't forget the Ive
Nalin, I appreciate the ideas. Remember, you can’t DM somebody who
isn’t following you. I want to maintain a fairly complete collection
of filters for the common “noise tweets,” and use it in TalkingPuffin
under user control, and invite other application developers to use it
as well.
Maybe as
On Oct 14, 2:46 pm, Chris Babcock cbabc...@kolonelpanic.org wrote:
On Tue, 13 Oct 2009 23:48:13 -0700 (PDT)
ruckuus ruck...@gmail.com wrote:
Is there anyone have an experience to hijack a twitter account?
The security profile of a Twitter account is no different than that of
many other
Tokens should never expire. However, you can only make that request once.
If you try to make it again with the same request request token, then you
will get the expired token error.
On Wed, Oct 14, 2009 at 12:02 AM, BlueSkies scarter28m-goo...@yahoo.comwrote:
When my application requests an
Here's another question.
User Bob installs OAuth App Foo on his desktop, and he authorizes
access to it.
Then he installs the app on his laptop and authorizes access to it.
Does User Bob see two separate entries for OAuth App Foo in his list
of authorized apps in Twitter, or only one?
If he
Ok, this is really starting to screw with me. On Sunday, I received
this error. I put in code to send the content length when making a
status update. It worked on Sunday. On Monday, the POST request
started hanging. For two days, I tried to figure out what the problem
was. So last night, I
Regex isn't that tough, but it IS one of those things you need to get
into the rhythm of, and it's very easy to fall out. Every time I
heavily dive back in though, after lots of frustration, you eventually
end up with a lot of elegance and power.
∞ Andy Badera
∞ +1 518-641-1280
∞ This email is:
Does User Bob see two separate entries for OAuth App Foo in his list
of authorized apps in Twitter, or only one?
Its only one.
If he sees only one, how will he know that Phishing Dude has also
authorized his own slimy copy of OAuth App Foo to work on User Bob's
account?
AFAIK there is no way
So this is a problem with web apps as well then.
If User Bob authorized Web App to work on his account, and Phishing
Dude also authorizes his Web App account to work on User Bob's Twitter
account because he phished User Bob's Twitter username and password,
User Bob is blissfully unaware of that?
Yes. The risk is high with Desktop apps as Consumer secret/keys are
distributed.
On Wed, Oct 14, 2009 at 8:04 PM, Dewald Pretorius dpr...@gmail.com wrote:
So this is a problem with web apps as well then.
If User Bob authorized Web App to work on his account, and Phishing
Dude also
Is it possible to add a simple Starts with token for the Search API?
(and maybe an ends with token if people want that, as well).
For example, it'd be nice to be able to do ^overheard and only catch
those tweets that specifically start with the word instead of having
the word appear anywhere in
You may just be hitting different servers in the Twitter server farm,
and some of them may be setup to require length and others not to.
Dewald
On Oct 14, 9:56 am, eclipsed4utoo ryanalford...@gmail.com wrote:
Ok, this is really starting to screw with me. On Sunday, I received
this error. I
Can you post your code snippet (in something like pastie or pastebin)?
Content-length should almost always be required for POSTs (from HTTP
spec).
-Chad
On Wed, Oct 14, 2009 at 8:56 AM, eclipsed4utoo ryanalford...@gmail.com wrote:
Ok, this is really starting to screw with me. On Sunday, I
I know this is a feature that many people would like to see (including
myself). It may be on the Search team's roadmap, but please create a
Google Code ticket for it so we can track it:
http://code.google.com/p/twitter-api/issues/list
-Chad
On Wed, Oct 14, 2009 at 10:58 AM, Jonathan Snook
On Wed, Oct 14, 2009 at 11:17 AM, ryan alford ryanalford...@gmail.com wrote:
Here is the code...
http://pastebin.com/m7ea04ea2
Last night, that code worked(with the content length being commented out).
This morning, it gives me the length required error.
Ryan
I am not extremely familiar
Hello,
I found the problem... the Twitter API does return XML, but on my LAMP
system, the PHP
var_dump($variable) method strips away the XML tags! This seems
ridiculous to me, but
then the documentation on var_dump is skimpy...
Thanks again for your help.
,
On Oct 13, 9:51 pm, Scott Haneda
On Wed, Oct 14, 2009 at 11:30 AM, ArnieLapinig arnie.lapi...@gmail.com wrote:
Hello,
I found the problem... the Twitter API does return XML, but on my LAMP
system, the PHP
var_dump($variable) method strips away the XML tags! This seems
ridiculous to me, but
then the documentation on
Other code uses this snippet also.
Now this is even more hilarious. I am testing right now. I am sending the
ContentLength no matter what.
I now can't post status updates again. If I give it the ContentLength, it
just hangs. If I don't give it the ContentLength, I get the error.
If I give it
I don't know if I got that information here or somewhere else, but
somebody pointed out a location where I could get some Twitter icons.
Is there some sort of request.toString() method that will dump the
actual request that is being sent? Or is that what you see is only the
Content-Type?
-chad
On Wed, Oct 14, 2009 at 11:58 AM, ryan alford ryanalford...@gmail.com wrote:
Other code uses this snippet also.
Now this is even more
Another question is, what has changed? This code has been working fine
since September 24th(sending the ContentLength). Then on October 11th, I
start having issues.
Ryan
On Wed, Oct 14, 2009 at 11:58 AM, ryan alford ryanalford...@gmail.comwrote:
Other code uses this snippet also.
Now this is
Here is a screenshot right before make the request.
http://yfrog.com/8d10142009115958amp
You can see that there is only the Content-Type header. But you can
also see that the ContentLength is set(to 6...length of my status
update).
.Net doesn't allow me to add the header manually if the
Great, thanks for your response. More questions:
- Is twitter.com/verified a complete list of all verified accounts?
- It looks I'll have to crawl that account. Is there a simple flat
list that gives the full real name of the user, plus the twitter
account name?
Thanks in advance!
On Oct
Hi All,
I am curious if there is any Twitter data set already available for research
or academia? If it is already not there then can one crawl through the users
and build one and release it to the research community without any charge?
What would be Twitter's official policy on this?
I am sure
Many people in academia / research have used TwapperKeeper service to
capture tweets of interest (that are tagged) and export for analysis.
Let me know if you have any questions.
v/r,
John
http://TwapperKeeper.com
jobr...@ob3solutions.com
@jobrieniii
On Oct 14, 2009, at 12:39 PM, Atul
Thanks, John. I am not only looking at hash tags, but also other things that
go along with tweets. I will keep in mind. I was actually curious about
Twitter's policy on this. What is there take on releasing a certain dataset
of say some random X number of users. Is it violation of any of their
Anyone having issues logging in for apps via the api but no issues at
all using the twitter web site?
What happened to twitter saying they were going to eat their own dog
food and use a common system so that issues like this wouldn't happen.
Cheers,
Dean
Hello all,
I pass text from a POST variable from a form on my site to Twitter and
I save this message on my own site. When I view the entry on my site
it is absoultly fine. However, in some cases when there is an
apostrophe in the message twitter updates the status of a user but
escapes the
Hi All,
I am hitting the following url:
/statuses/show/4843243649.xml
And i get:
Rate limit exceeded. Clients may not make more than 150 requests per
hour.
Note that before and after that i can hit any other url without
problems with the same user - so i am
logged in my application and
Is Twitter crazy?! Have they even looked at their own user, market,
and competitor information?
Twitter has said they are actively pursuing businesses (and bloggers)
and doing away with recurring tweets does away with key business
value. Besides, there are technical solutions to this problem, so
The situation in this scenario is that Mallory phished Bob's Twitter
credentials and used them to authorize access for himself with an OAuth
App that Bob also uses. Mallory can only be detected by the changes he
makes in the account; He cannot be detected by viewing the list of
OAuth apps with
On the heels of adding a Report as spam button to twitter.com
(http://blog.twitter.com/2009/10/help-us-nail-spammers.html), you can
now also simultaneously block and report a user as a spammer via the
API.
The documentation for the report_spam resource can be found here:
What kept me up at night is wondering what is coming down the pike...
who knows if feature X, Y, or Z in your new Twitter app might get a
stop-work order from Twitter. That's really scary.
On Oct 14, 11:13 am, Neicole neic...@trustneicole.com wrote:
Is Twitter crazy?! Have they even looked at
Here is Twitters logo: https://twitter.com/about#download_logo
https://twitter.com/about#download_logoAbraham
On Wed, Oct 14, 2009 at 11:02, John Meyre john.l.me...@gmail.com wrote:
I don't know if I got that information here or somewhere else, but somebody
pointed out a location where I
I'm encouraged to know that someone from Twitter is reading the posts
on this group. Perhaps this post will come to the attention of
someone in Twitter who will start a discussion with their legal
advisors.
When I signed up for Twitter I read the TOS presented carefully
(sorry, I used to be a
I'm looking for a simple way to count tweets over specific time
periods, and I have little concern for the tweet contents at this
time. I've taken a quick look at the Search API and I'm not sure this
is possible without transferring the tweet contents and counting them
based on their timestamps.
I am creating a mathematical model based on some results from
Twitter's API, but I am missing one critical number in the model. I
need to estimate the number of total tweets in the USA each day. The
better an estimate I get and the less assumptions I make, the more
useful the model will be (it
There was a post on this group called API Method for checking if a
user exists? a while ago. The method for checking if a user exist
described there no longer works. Is there a way for me to use the API
to verify if an email address is associated with a twitter account?
Thanks.
On Oct 13, 4:09 pm, EastSideDev eastside...@gmail.com wrote:
I am using the streaming search API. If I have more than one term to
search, do I need to separate those terms with commas? If these are
hash tags, do I include the hash symbol? (#test1, #test2, #test3) I
am experiencing some
Atul,
I am in the same boat as you. I am currently using the APIs that
Twitter offers to gather data. However, the more data I have access
to, the fewer assumptions I have to make and the better my results.
Twitter is very popular though and access to their data from 3rd
parties consumes a lot
Hi Atul,
There is a fairly significant corpus of tweets available, although it is
fairly old - see here:
http://www.mail-archive.com/twitter-development-talk@googlegroups.com/msg05715.html.
I believe that the second part has expired, but you should be unable to use
the first part - it is several
You may be conflating the Streaming API, which requires commas between
keywords, and the search API, which does not.
-John Kalucki
http://twitter.com/jkalucki
Services, Twitter Inc.
On Oct 14, 9:19 am, Kyle B kylebarn...@gmail.com wrote:
On Oct 13, 4:09 pm, EastSideDev eastside...@gmail.com
no.
On Wed, Oct 14, 2009 at 09:50, HAR HAR harsocialme...@gmail.com wrote:
There was a post on this group called API Method for checking if a
user exists? a while ago. The method for checking if a user exist
described there no longer works. Is there a way for me to use the API
to verify if
The track parameter on the Streaming API will give you all statuses
that match a keyword. When rate-limited, you'll get an accurate count
of the limited statuses. You'll only get accurate results for sets of
keywords if your stream is not limited.
-John Kalucki
http://twitter.com/jkalucki
On Oct 14, 2009, at 8:38 AM, Kyle B wrote:
I am creating a mathematical model based on some results from
Twitter's API, but I am missing one critical number in the model. I
need to estimate the number of total tweets in the USA each day. The
better an estimate I get and the less assumptions I
On Wed, Oct 14, 2009 at 8:38 AM, Kyle B kylebarn...@gmail.com wrote:
1. How are tweet IDs incremented? Do they increase by a factor of 1,
2, 5, 10...?
I've asked that question previously and the answer was a definitive We
aren't telling. It seems to be considered a significant enough
Awesome work! Let's make those spammers cry. :)
On Wed, Oct 14, 2009 at 2:46 PM, Marcel Molina mar...@twitter.com wrote:
On the heels of adding a Report as spam button to twitter.com
(http://blog.twitter.com/2009/10/help-us-nail-spammers.html), you can
now also simultaneously block and
It seems that the interface is not working very well because I hit the
Translate Everything button and click on one term and it takes me back
to the homepage. That happened on Chrome. It does not even work on IE
8.
Regards,
Antonio Lopez
Hello,
You probably want to use the Google Group for your particular
translator language:
http://groups.google.com/group/twitter-translators-italian
http://groups.google.com/group/twitter-translators-german
http://groups.google.com/group/twitter-translators-spanish
Thanks for the info. It helps a lot. Figuring out an accurate number
is essential to my model, so much so that I am determined to find some
method of estimating it to acceptable margins of error!
- Kyle
On Oct 14, 5:19 pm, Nick Arnett nick.arn...@gmail.com wrote:
On Wed, Oct 14, 2009 at 8:38
And you don't think the streaming API will answer that for you?
--
Scott * If you contact me off list replace talklists@ with scott@ *
On Oct 14, 2009, at 3:27 PM, Kyle B wrote:
Thanks for the info. It helps a lot. Figuring out an accurate number
is essential to my model, so much so that I
Wow, spam much?
∞ Andy Badera
∞ +1 518-641-1280
∞ This email is: [ ] bloggable [x] ask first [ ] private
∞ Google me: http://www.google.com/search?q=andrew%20badera
On Wed, Oct 14, 2009 at 5:45 PM, Bolaleman hull...@hotmail.com wrote:
Hello,
I am a hobby online affiliate marketer making
So any thoughts/ideas?
Ryan
On Oct 14, 12:09 pm, eclipsed4utoo ryanalford...@gmail.com wrote:
Here is a screenshot right before make the request.
http://yfrog.com/8d10142009115958amp
You can see that there is only the Content-Type header. But you can
also see that the ContentLength is
On Wed, Oct 14, 2009 at 3:27 PM, Kyle B kylebarn...@gmail.com wrote:
Thanks for the info. It helps a lot. Figuring out an accurate number
is essential to my model, so much so that I am determined to find some
method of estimating it to acceptable margins of error!
It occurs to me that
On Wed, Oct 14, 2009 at 3:56 PM, Scott Haneda talkli...@newgeo.com wrote:
And you don't think the streaming API will answer that for you?
It can't, can it? It isn't the complete stream, only a sampled subset.
There's no way to know which IDs were skipped in order to obfuscate the
actual
On Wed, Oct 14, 2009 at 4:10 PM, Nick Arnett nick.arn...@gmail.com wrote:
On Wed, Oct 14, 2009 at 3:27 PM, Kyle B kylebarn...@gmail.com wrote:
Thanks for the info. It helps a lot. Figuring out an accurate number
is essential to my model, so much so that I am determined to find some
Ok. nevermind. I have it fixed now.
Since I am using OAuth, I am not writing a stream to the request object
(like I would do with Basic Auth). So I changed the ContentLength to
0, and it works.
Could the response had been waiting for me to stream the content to it
since I told it the length?
I'm migrating my code now. I just pulled down 7000 users. If I get a
bad response to a call I'll retry it up to 5 times.
It took 20 mins and 1 hour, which is going to be troublesome.
Tim.
On Oct 7, 6:59 pm, jmathai jmat...@gmail.com wrote:
So a user comes to the site and I need to build
Hi'ya,
I'm migrating my code to use cursors at the moment. It's frustrating
that calls need to be synchronous rather than how paged calls could be
asynchronous. Retrieving 7000 followers just took 20 minutes for
me.
I filed an issue that proposes a solution here:
Thanks John.
I'm mostly interested in using a single keyword at present, but it
would be nice to not have rate-limiting issues with multiple keywords.
I've read the Streaming API page, and I guess I get the ideas there,
although I'm not familiar with the Twitter API terminology yet.
I was
I'm the author/maintainer of Net::Twitter, the perl library for the
Twitter API. I have an account, @net_twitter, I use to communicate
with the users of the Net::Twitter module. Several times (most
recently, today), the account has been reverted to its state on or
about May 30, 2009.
I'm
So now that you pulled down 7000 IDs, are you making 7000 user/show calls to
get the rest of the details? How's that working out?
On 10/14/09 5:03 PM, Tim Haines tmhai...@gmail.com wrote:
I'm migrating my code now. I just pulled down 7000 users. If I get a
bad response to a call I'll
I'm doing statuses/followers (100 at a time) and it's taking me 1.5
minutes per 1,000 followers. Really painful.
I implemented the other route using followers/ids and making a profile
call for each in as parallel a way as possible and the total time was
about the same. I am sticking with
No - I pulled down the 7000 followers using the cursor calls - not
just the ids.
Tim.
On Oct 15, 1:48 pm, Michael Steuer mste...@gmail.com wrote:
So now that you pulled down 7000 IDs, are you making 7000 user/show calls to
get the rest of the details? How's that working out?
On 10/14/09
Hi Tim,
You said Retrieving 7000 followers just took 20 minutes for me.
Can you explain what you meant by that?
Are you using the friends/ids, followers/ids methods or the
statuses/friends, statuses/followers methods?
-Chad
On Wed, Oct 14, 2009 at 8:12 PM, Tim Haines tmhai...@gmail.com
Hi Chad,
Statuses/followers.
I've just timed another attempt - it took 25 minutes to retrieve 17957
followers with statuses/followers.
Is there anything I can elaborate on in the filed issue to make it
clearer?
Tim.
On Oct 15, 2:42 pm, Chad Etzel c...@twitter.com wrote:
Hi Tim,
You said
If you are pulling down the entire social graph, why not use the
social graph calls which would deliver all 7000 ids in 2 calls?
You can also parallelize this process by looping through different
users on each thread instead of using each thread to grab a different
page/cursor of the same user.
Are you suggesting I should retrieve the 2k users 1 at a time from
users/show once I have the ids? I'd essentially like to do this, but
100 at a time.
I know I can get the 7000 ids in 2 calls (1 even without the cursors)
- but I actually want the whole user objects..
Tim.
On Oct 15, 2:56 pm,
Yeah we really need a way to bulk request user payloads by giving a list of IDs.
On Wed, Oct 14, 2009 at 9:19 PM, Tim Haines tmhai...@gmail.com wrote:
Are you suggesting I should retrieve the 2k users 1 at a time from
users/show once I have the ids? I'd essentially like to do this, but
100
I agree. I'm lobbying the team for something like this.
-Chad
On Wed, Oct 14, 2009 at 10:21 PM, Josh Roesslein jroessl...@gmail.com wrote:
Yeah we really need a way to bulk request user payloads by giving a list of
IDs.
On Wed, Oct 14, 2009 at 9:19 PM, Tim Haines tmhai...@gmail.com wrote:
Thanks Chad.
On Oct 15, 3:30 pm, Chad Etzel c...@twitter.com wrote:
I agree. I'm lobbying the team for something like this.
-Chad
On Wed, Oct 14, 2009 at 10:21 PM, Josh Roesslein jroessl...@gmail.com wrote:
Yeah we really need a way to bulk request user payloads by giving a list of
I'm retrieving the timeline for a specific user:
curl http://www.twitter.com/statuses/user_timeline/ev.xml
Within that timeline, I see retweeted_status fragment.
Is this normal behavior ?
Thanks - Martin
Maybe the new retweet functionality has been turned on?
Ryan
On Wed, Oct 14, 2009 at 10:45 PM, Martin martin.duf...@gmail.com wrote:
I'm retrieving the timeline for a specific user:
curl http://www.twitter.com/statuses/user_timeline/ev.xml
Within that timeline, I see retweeted_status
I think its been enabled for a select few for testing. I don't think
its gone public yet.
On Wed, Oct 14, 2009 at 9:56 PM, ryan alford ryanalford...@gmail.com wrote:
Maybe the new retweet functionality has been turned on?
Ryan
On Wed, Oct 14, 2009 at 10:45 PM, Martin martin.duf...@gmail.com
Ahh..just noticed who he was looking at. I would assume that most of the
Twitter employees have it turned on for their accounts. Most certainly the
CEO of Twitter.
Ryan
On Wed, Oct 14, 2009 at 10:59 PM, Josh Roesslein jroessl...@gmail.comwrote:
I think its been enabled for a select few for
Most likely the content-type is not being set correctly. What is the
value of $new_image?
-Chad
On Wed, Oct 14, 2009 at 10:29 PM, TylerC tyle...@gmail.com wrote:
Hey all I am having trouble getting Twitter to update profile
avatars... From what I can tell I have the API calls straight but
How do I get the little twitter button I see on many blogs and sites?
I have set up FaceBook to work with our database of articles but I
cannot find on twitter what I need to do.
I don't think I need to use the Twitter API and I cannot find any
information on this issue.
Thanks
Dave
In this case it was /home/49090/domains/***/html/clients//
tools/avatars/city_ninja.png
On Oct 14, 11:10 pm, Chad Etzel c...@twitter.com wrote:
Most likely the content-type is not being set correctly. What is the
value of $new_image?
-Chad
On Wed, Oct 14, 2009 at 10:29 PM, TylerC
http://twitter.com/goodies/widgets
Is that what you are looking for?
Josh
On Wed, Oct 14, 2009 at 9:05 PM, Dawg ad...@sailinganarchy.com wrote:
How do I get the little twitter button I see on many blogs and sites?
I have set up FaceBook to work with our database of articles but I
cannot
It seems as neither is working. I tried #test1, #test2, #test3 and
#test1 #test2 #test3, but I got no data (streaming API), and I let it
run for hours. When I used only a single term #test1, I immediately
started getting data. Was there a change to prevent more than one term
from being used?
On
Try this..
curl_setopt($curl_handle, CURLOPT_POSTFIELDS, array(image =
@$new_image;type=image/png));
I have never tried this myself, but I have seen some other people say
that it is needed on some servers to set the proper content-type.
-Chad
On Wed, Oct 14, 2009 at 11:15 PM, TylerC
Thanks Chad it was the content type, I made a quick function to grab
the mime type as the avatar is randomly selected from a folder and
changed my postfields as follows:
curl_setopt($curl_handle, CURLOPT_POSTFIELDS, array(image = @
$avatar, type = $mime_type));
All seems to be working now,
On Thu, Oct 15, 2009 at 2:06 AM, Chris Babcock cbabc...@kolonelpanic.orgwrote:
The situation in this scenario is that Mallory phished Bob's Twitter
credentials and used them to authorize access for himself with an OAuth
App that Bob also uses. Mallory can only be detected by the changes he
Try track=#test1,#test2,#test3
You are searching for #test1, (space)#test2, etc. Nothing will
ever match (space)#test2.
-John Kalucki
http://twitter.com/jkalucki
Services, Twitter Inc.
On Oct 14, 8:38 pm, EastSideDev eastside...@gmail.com wrote:
It seems as neither is working. I tried
@chris
Okay. I was talking about different scenario (using oAuth apps to steal user
info)
But If credentials are stolen then its all over (it doesn't matter which
oAuth app you have authorized)
@sasongoko.
If Bob manages to change his password after Mallory used Bob's old
credentials to authorize
On Thu, Oct 15, 2009 at 11:15 AM, srikanth reddy srikanth.yara...@gmail.com
wrote:
@chris
Okay. I was talking about different scenario (using oAuth apps to steal
user info)
But If credentials are stolen then its all over (it doesn't matter which
oAuth app you have authorized)
@sasongoko.
Hello!
We regularly fetch feeds from the Twitter API and then take the max id
as the sinceid to subsequent calls.
The problem is that in the last two days, we suddenly are getting lots
of
Couldn't find Status with ID=XYZ
messages. We weren't seeing these before, but now multiple times a
day.
89 matches
Mail list logo
