[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Cameron Kaiser
> Part of it is DDOS response, part of it is API issues... as one of the > updates most recently noted with the "known issues" list. > And, by the way, if you're a deckhand on a submarine going down, you > think you would go to a movie because it's your time off, or do > whatever you can to help o

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread chinaski007
And, by the way, if you're a deckhand on a submarine going down, you think you would go to a movie because it's your time off, or do whatever you can to help out? On Aug 8, 11:47 pm, chinaski007 wrote: > Part of it is DDOS response, part of it is API issues... as one of the > updates most recen

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread chinaski007
Part of it is DDOS response, part of it is API issues... as one of the updates most recently noted with the "known issues" list. On Aug 8, 11:42 pm, Bill Kocik wrote: > On Aug 9, 2:28 am, chinaski007 wrote: > > > You're wrong. > > > If you check the tweets of the other main Twitter developers,

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread Chris Babcock
> Hmm, it shouldn't be spitting back HTML. How often are you seeing > this? I've seen it a couple times tonight and I'm not even doing any real testing, just trying a few variations manually to see if I might fine tune some of the calls in the library that I'm writing. Chris Babcock

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Chris Babcock
On Sat, 8 Aug 2009 16:11:29 -0700 (PDT) Fawkes wrote: > They can, but apparently they don't, otherwise Twitter wouldn't have > used it as a tactic. They're going through a very difficult time, we > need to be patient and supportive of them! In order for an attacker to respond to a 302, they ha

[twitter-dev] Re: ASP .NET Development Issue w/OAuth Callback Parameter

2009-08-08 Thread mistermaxx
So, uh...anybody got any working ASP.Net/VB.Net oAuth code that they don't mind posting? Help a brother out?

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Bill Kocik
On Aug 9, 2:28 am, chinaski007 wrote: > You're wrong. > > If you check the tweets of the other main Twitter developers, you will > see that they are doing sushi, rock concerts, weddings, watching > movies on Saturday afternoon, etc.  And while "getting married" is > certainly a legitimate excus

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread chinaski007
You're wrong. If you check the tweets of the other main Twitter developers, you will see that they are doing sushi, rock concerts, weddings, watching movies on Saturday afternoon, etc. And while "getting married" is certainly a legitimate excuse, some of the other activities, during this major

[twitter-dev] Re: PubSubHubbub and Twitter RSS

2009-08-08 Thread John Kalucki
Jesse, I've looked into PubSubHubHub, as have others at Twitter. It's not on our roadmap, because the Streaming API meets most of our developers' real-time and push needs. There are holes, to be sure, and we have features on the roadmap to plug those holes as priority and schedules permit. But, w

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Bill Kocik
On Aug 8, 6:33 pm, Dewald Pretorius wrote: > However, I would hope that Twitter engineers are all in force at the > office on a day like this to solve this issue and get our applications > back up and running, regardless of whether it is Saturday, Sunday, or > Christmas Day. I think you're ma

[twitter-dev] Re: Weird oAuth behavior

2009-08-08 Thread Bill Kocik
Are you passing a callback_url parameter when you retrieve the request token? On Aug 8, 8:56 pm, Andy wrote: > My web app now thinks it's a desktop app and gives me a numeric code. > I've tried switching the setting from one to the other, and then back > again to see if that would help. > > No

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread chinaski007
As other media have noted, when Twitter goes down, people swap to FriendFeed, Facebook, etc. The same thing happens when Twitter apps go down. The problem with this outage is that it largely effects third-party Web-based apps. And so when our apps go down, for whatever reason, people swap to de

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread chenyuejie
My app works well locally(use OAuth), but does not work in AppEngine, seem they are still restrict large request from same IP. Yes, Twitter missed a chance to propagate OAuth, but they didn't ruin it :) On Aug 9, 8:07 am, chinaski007 wrote: > I should have taken my own advice when I ranted abou

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Adam Cloud
Some of us program because we love to do it, not because of the revenue we could make off the third-party app we use. Man up and just tell your users to be patient, it's not like they're going to stop using your app because of some well publicized downtime, and if they are, then it wasn't that gre

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Kyle Mulka
A forged source IP address is a good reason for doing 302s. Thanks for the explanation. Now... if only OAuth worked... -- Kyle Mulka http://twilk.com On Aug 8, 10:45 pm, John Kalucki wrote: > In a simplified sense, the redirect nullifies a pernicious class of > attack where the source IP addres

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Adam Cloud
third-party app we created* On Sat, Aug 8, 2009 at 9:40 PM, Adam Cloud wrote: > Some of us program because we love to do it, not because of the revenue we > could make off the third-party app we use. > > Man up and just tell your users to be patient, it's not like they're going > to stop using y

[twitter-dev] Re: Can't change application settings

2009-08-08 Thread thedriverpicks
I've also had this problem since Friday, but I also added a Twibbon late Thursday or early Friday. I can't change any settings, upload a new photo, nor can I post a twitter directly on twitter.com (I can post through my Twhirl app...odd) On Aug 8, 2:33 am, "Jonathan Joyce (Storm ID)" wrote: > I

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Dewald Pretorius
A secret key will help at application level. But the first defense in DOS is at network gear level where you cannot check secret keys against db tables. On Aug 9, 12:01 am, Scott Haneda wrote: > Can someone point me to the details on the attack? I am a little out   > of the loop. I've heard Twit

[twitter-dev] PubSubHubbub and Twitter RSS

2009-08-08 Thread Jesse Stay
I know Twitter has bigger priorities, so if you can put this on your "to think about" list for after the DDoS problems are taken care of, I'd appreciate it. Perhaps this question is for John since it has to do with real-time. Anyway, is there any plan to support the PubSubHubbub protocol with Twi

[twitter-dev] Re: Error code: 200, "OK: 200" ... what is it?

2009-08-08 Thread chinaski007
(Okay, in those I am seeing a header with "read timeout"... the empty ones are still coming fast and furious.) On Aug 8, 8:59 pm, chinaski007 wrote: > I am now getting "OK: 200" errors after requesting, e.g., friends > ids.  The response returned is the 200 error, and a prematurely ending > jso

[twitter-dev] Re: Error code: 200, "OK: 200" ... what is it?

2009-08-08 Thread chinaski007
I am now getting "OK: 200" errors after requesting, e.g., friends ids. The response returned is the 200 error, and a prematurely ending json of id numbers. wtf? On Aug 8, 7:17 pm, Chad Etzel wrote: > We have asked Ops about what these responses mean. Waiting on a > definitive answer from them

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Jesse Stay
Perhaps someone should set up a wiki page for this with basic info we can all collaborate on so we can know how to adapt to the new changes in our own language. I'm sure that's something we can all work together on. Does Twitter want to take the initiative to at least just start this so we can al

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dewald Pretorius
If spoofing of white-listed IP addresses is a concern to Twitter (and it probably is), I have a proxy infrastructure in place with already white-listed IP addresses that can make API calls from IP addresses that are not the same as my website IP address. It will take one hell of a lucky guess by

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Scott Haneda
Can someone point me to the details on the attack? I am a little out of the loop. I've heard Twitter only uses around 200Mbit/s of data. From a net ops perspective, why is this challenging to detect and block? I'm not trying to degrade the efforts of the engineers, this is a genuine que

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Scott Haneda
I agree. I also think it is very important to recognize Twitter made a strong move with such an open API. As a result, it is just as important to recognize, Twitter very well may not be where it is today were it not for third party apps. I may go as far as to say the API should be a higher

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Vignesh
Can anyone guess how long it will take for this problem to be fixed.. Apps totally dependent on the api are suffering very badly... lot of revenue loss also... On Aug 8, 6:37 pm, Neeraj Mathur wrote: > I just can't believe this is for real... > > On Aug 8, 2009, at 5:07 PM, Dossy Shiobara wrote:

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread John Kalucki
In a simplified sense, the redirect nullifies a pernicious class of attack where the source IP address is forged. A redirect cannot be followed with a false source address. The attacks that remain are those where the source IP address is valid. You can then imagine other techniques that than can b

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Neeraj Mathur
I just can't believe this is for real... On Aug 8, 2009, at 5:07 PM, Dossy Shiobara wrote: > > On 8/8/09 8:03 PM, chinaski007 wrote: >> If Twitter.com itself were down, you know that they would stay there >> until it was back up. >> >> But since it is just a large number of third party apps that

[twitter-dev] Weird oAuth behavior

2009-08-08 Thread Andy
My web app now thinks it's a desktop app and gives me a numeric code. I've tried switching the setting from one to the other, and then back again to see if that would help. No luck, I'm still given a code rather then being re-directed back to our web app. Anyone else with this issue?

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Josh Roesslein
Well I must be lucky then. :) I'll probably add redirect support into my library anyway. Shouldn't be too hard to implement. On Sat, Aug 8, 2009 at 9:25 PM, Chad Etzel wrote: > > No, they are not limited to only oauth related calls. > -Chad > > On Sat, Aug 8, 2009 at 10:22 PM, Josh Roesslein > w

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Chad Etzel
No, they are not limited to only oauth related calls. -Chad On Sat, Aug 8, 2009 at 10:22 PM, Josh Roesslein wrote: > Are the redirects only occuring with oauth? I've yet to run into them, but > I'm not really using oauth much so that might be why. > > On Sat, Aug 8, 2009 at 7:09 PM, Howard Siegel

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Josh Roesslein
Are the redirects only occuring with oauth? I've yet to run into them, but I'm not really using oauth much so that might be why. On Sat, Aug 8, 2009 at 7:09 PM, Howard Siegel wrote: > I support them wholeheartedly and appreciate everything they've done to > thwart the DDOS attack. > > While it i

[twitter-dev] Re: Error code: 200, "OK: 200" ... what is it?

2009-08-08 Thread Chad Etzel
We have asked Ops about what these responses mean. Waiting on a definitive answer from them. -Chad On Sat, Aug 8, 2009 at 9:10 PM, chinaski007 wrote: > > > Now getting a ton of these errors... empty body, and nothing > meaningful in headers. > > What are they?? >

Re: Possibly curmudgeonly thoughts about the DDoS and architecture... (was Re: [twitter-dev] Re: The silence is deafening....)

2009-08-08 Thread Dewald Pretorius
Nick, Yes, they have very competent people. My criticism is not leveled against the API team. They are not the ones responsible for the edge defenses. But this thing has happened every single time so far. Twitter comes under attack, and the response is to simply swing the machine gun in a 360 de

Possibly curmudgeonly thoughts about the DDoS and architecture... (was Re: [twitter-dev] Re: The silence is deafening....)

2009-08-08 Thread Nick Arnett
On Sat, Aug 8, 2009 at 5:40 PM, Dewald Pretorius wrote: > > Twitter needs to realize that our apps are NOT still down because of > the ongoing denial-of-service attack. That's a cop-out to blame the > attack. > > Our apps are still down because they cannot allow known, white-listed > IP addresses

[twitter-dev] Search API confusion

2009-08-08 Thread Joseph
If I do a search request, and I include the following: &ors=%23wine+%23winery I Only get results for #wine Wouldn't this request be the same as doing a search with any of the words: #wine or #winery? or is the search API intercepting every hash tag, and if I have more than one hash tag, it ign

[twitter-dev] Error code: 200, "OK: 200" ... what is it?

2009-08-08 Thread chinaski007
Now getting a ton of these errors... empty body, and nothing meaningful in headers. What are they??

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread CaMason
To confirm, I am also seeing this behaviour. Some output I've received on numerous occasions this evening: -bash-3.2# curl --interface eth0 http://twitter.com/account/rate_limit_status.xml http://www.w3.org/ TR/1999/REC-html401-19991224/strict.dtd"> -Craig On Aug 8, 11:25 pm, Chad E

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dewald Pretorius
Twitter needs to realize that our apps are NOT still down because of the ongoing denial-of-service attack. That's a cop-out to blame the attack. Our apps are still down because they cannot allow known, white-listed IP addresses through the defenses. And that is why I am getting frustrated, becau

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Howard Siegel
I support them wholeheartedly and appreciate everything they've done to thwart the DDOS attack. While it is true that many of the tools used in the attack do not appear to follow the 302s right now, you can be your bottom dollar that they will very quickly be updated to do just that, perhaps even

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dossy Shiobara
On 8/8/09 8:03 PM, chinaski007 wrote: If Twitter.com itself were down, you know that they would stay there until it was back up. But since it is just a large number of third party apps that are down... well, hey, it's a weekend in August! Uh, my ability to access Twitter.com has been severely

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread chinaski007
I should have taken my own advice when I ranted about Basic Auth being far more reliable than OAuth. On Aug 8, 3:37 pm, Josh Roesslein wrote: > Oauth has been on and off through out this DoS attack. Sometimes it work > sometimes not. > Only work around right now is to fall back to basic auth. I

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread chinaski007
If Twitter.com itself were down, you know that they would stay there until it was back up. But since it is just a large number of third party apps that are down... well, hey, it's a weekend in August! Grrr. On Aug 8, 4:55 pm, Dossy Shiobara wrote: > Seriously, anyone who has worked an Ops gig

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dossy Shiobara
Seriously, anyone who has worked an Ops gig and hasn't worked a 30+ hour day when a serious outage occurred just doesn't deserve respect. On 8/8/09 6:44 PM, Dewald Pretorius wrote: When my app is down, that is exactly what I do to get it up and running again. On Aug 8, 7:40 pm, Cameron Kais

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dossy Shiobara
On 8/8/09 6:23 PM, Chad Etzel wrote: I'm not supposed to be working today, but in the interest of developer relations, I have been responding to occasional dev-list emails while I was out today. That's funny - as unpaid consumers of Twitter, we work 24/7 and do it with zest. Become an emplo

[twitter-dev] Re: Time out to twitter.com

2009-08-08 Thread JDG
they're still seeing the DDoS attack. it's been well documented. On Sat, Aug 8, 2009 at 10:23, pmduque wrote: > > Suddenly everything started to work again... wonder what happened... > > On Aug 8, 2:13 pm, pmduque wrote: > > Requests fro our IP are getting time out. Even a telnet to twitter > >

[twitter-dev] Re: 302s are NOT the solution

2009-08-08 Thread Fawkes
They can, but apparently they don't, otherwise Twitter wouldn't have used it as a tactic. They're going through a very difficult time, we need to be patient and supportive of them! Dave http://twitter.com/DavidHaber On Aug 8, 8:53 am, Kyle Mulka wrote: > An attacker can just as easily follow a

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dewald Pretorius
When my app is down, that is exactly what I do to get it up and running again. On Aug 8, 7:40 pm, Cameron Kaiser wrote: > > However, I would hope that Twitter engineers are all in force at the > > office on a day like this to solve this issue and get our applications > > back up and running, reg

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Cameron Kaiser
> However, I would hope that Twitter engineers are all in force at the > office on a day like this to solve this issue and get our applications > back up and running, regardless of whether it is Saturday, Sunday, or > Christmas Day. Make sure they work all night too. --

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread Josh Roesslein
Oauth has been on and off through out this DoS attack. Sometimes it work sometimes not. Only work around right now is to fall back to basic auth. It might not be a bad idea having basic auth in place of emergency of OAuth going offline. Sure the user will need to supply username/pass, but at least

[twitter-dev] First Twitter App

2009-08-08 Thread AaronG
Hi, OK, I'm not sure if twitter is the right platform for my needs, and after many hour searching around, still cant find if it will meet my needs. So, basically, I need users of my app, to be able to both post and see 'tweets' posted by others. Similar to a forum shoutbox. Is this possible? (pl

[twitter-dev] Re: a question about Rate limiting

2009-08-08 Thread Josh Roesslein
If you DO NOT supply authentication credentials (username/password OR OAuth token) it will be IP-based. If you DO supply credentials then it will be account-based. On Sat, Aug 8, 2009 at 11:55 AM, bang wrote: > > the documentation says that "The REST API does account- and IP-based > rate limitin

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dewald Pretorius
Chad, Thank you for your reply. However, I would hope that Twitter engineers are all in force at the office on a day like this to solve this issue and get our applications back up and running, regardless of whether it is Saturday, Sunday, or Christmas Day. Having the Twitter website operational

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Nick Arnett
Ask me "Are we there yet?" one more time and I'll turn this car around and you won't go to Disneyland at all! ;-) Nick On Sat, Aug 8, 2009 at 2:39 PM, Dewald Pretorius wrote: > > tick tock tick tock tick tock tick tock tick tock tick tock >

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread Chad Etzel
Hmm, it shouldn't be spitting back HTML. How often are you seeing this? -Chad On Sat, Aug 8, 2009 at 1:02 PM, Naveen Ayyagari wrote: > > Sometimes the rate_limit_status call is not returning a 302 to > redirect, or the rate_limit_status xml, but HTML with a meta refresh > in it (which curl doesnt

[twitter-dev] Re: JSON Response Is Not Properly Escaped

2009-08-08 Thread Chad Etzel
Are you sure it isn't being introduced by your PHP script? Have you tried running the tweet through stripslashes() before posting it? (This is a mistake I have made personally many times.) -Chad On Sat, Aug 8, 2009 at 5:45 PM, Joe McCann wrote: > > I'm trying to sort out a workaround, but for wha

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Chad Etzel
On Sat, Aug 8, 2009 at 5:39 PM, Dewald Pretorius wrote: > > tick tock tick tock tick tock tick tock tick tock tick tock To quote my last email: *** We will also be monitoring the situation and giving out new information as we have it. Please remain patient with us. As much as you want it

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Dewald Pretorius
If it is really important to you, how long does it take you to exclude known white-listed IP addresses from the defenses, if you put your mind and resources to it? On Aug 8, 6:42 pm, Cameron Kaiser wrote: > > tick tock tick tock tick tock tick tock tick tock tick tock > > I'm sure it's being wor

[twitter-dev] JSON Response Is Not Properly Escaped

2009-08-08 Thread Joe McCann
I'm trying to sort out a workaround, but for whatever reason I can't get the string: "I'm testing right now" to actually work. The posted tweet is: "I\'m testing right now". What gives? I'm posting values and using a server proxy via PHP to make the REST calls to the API, yet no dice on the

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread Adam Loving
I'm pulling my hair out. 1000s of Twibes users can't log in. Twibes uses oAuth from App Engine. Calls to http://twitter.com/oauth/request_token have been consistently timing out for 3 days now. Is there any work around or way to get approved access? On Aug 8, 11:51 am, AccountingSoftwareGuy wro

[twitter-dev] Re: DDoS Status Update

2009-08-08 Thread dwight wallace
Great job :) Hopefully you can crate a security environment to preclude future attacks. On Aug 7, 11:05 am, Ryan Sarver wrote: > I wanted to send everyone an update to let you know what has been happening, > the known issues, some suggestions on how to resolve them and some idea of > how to move

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread Naveen Ayyagari
Sometimes the rate_limit_status call is not returning a 302 to redirect, or the rate_limit_status xml, but HTML with a meta refresh in it (which curl doesnt understand to follow redirect/retry). Its not huge problem for us, but it can affect some throttling code people may or may not be imp

[twitter-dev] a question about Rate limiting

2009-08-08 Thread bang
the documentation says that "The REST API does account- and IP-based rate limiting". so twitter how to recognize which request is account-based and which is IP based? if I build a website like itweet.net, everyone login to use it, and then get someone's friends list, call http://twitter.com/statu

[twitter-dev] Re: Time out to twitter.com

2009-08-08 Thread pmduque
Suddenly everything started to work again... wonder what happened... On Aug 8, 2:13 pm, pmduque wrote: > Requests fro our IP are getting time out. Even a telnet to twitter > port 80 gets time out, although http request to other sites work > perfectly. > > Anyone else with that problem?

[twitter-dev] 302s are NOT the solution

2009-08-08 Thread Kyle Mulka
An attacker can just as easily follow a 302 as can a legitimate API developer or user of Twitter. I don't understand why Twitter thinks this is a solution to the problem. Please stop 302ing. Thanks, -- Kyle Mulka http://twilk.com

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread Adam Loving
I'm seeing similar behavior on Twibes.com, where 100s if not 1000s of my users cannot log in. I can rarely get to the login page, what is concerning, is that I curl the URL, the page is returned immediately. Safari and Firefox spin for 30-60s before rendering the page (if ever). On Aug 8, 12:09

[twitter-dev] Re: The silence is deafening....

2009-08-08 Thread Cameron Kaiser
> tick tock tick tock tick tock tick tock tick tock tick tock I'm sure it's being worked on. -- personal: http://www.cameronkaiser.com/ -- Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com -- Anything that can be put into a nutshe

[twitter-dev] The silence is deafening....

2009-08-08 Thread Dewald Pretorius
tick tock tick tock tick tock tick tock tick tock tick tock

[twitter-dev] Re: 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread Rich
We've got a similar oAuth issue. My application can get as far as the login screen, but consistently.. and I mean 100% of the time fails on the Allow button. It doesn't even get as far as the redirect screen (so it's not a problem with us handling the redirect). If they want us to use oAuth ins

[twitter-dev] 408 Request Timeout on oAuth Calls to API

2009-08-08 Thread AccountingSoftwareGuy
Our app has been down for almost 2 days now...every call we make to the Twitter API returns a 408 Request Timeout. When can we expect this to be working normal again???

[twitter-dev] Re: SSL/HTTPS for widget

2009-08-08 Thread Abraham Williams
I don't think that the widgets support SSL. You might have to set up a simple SSL proxy on your own server that makes the unsecured request to Twitter. Abraham 2009/8/8 MFJ > > Hi all, I would really appreciate some help. I have an online store > and have created a widget there. After installin

[twitter-dev] Re: API Calls During DoS Attack

2009-08-08 Thread kabayan
Now I tested again, works well via docomo. On 8月8日, 午前1:53, kabayan wrote: > Failed IP 206.225.19.45 > Japan > Docomo > > On 8月8日, 午前1:15, Jonathan Joyce wrote: > > > > > We have seen the rates for our app go from 20,000 to 150 and back to 20,000 > > over a short interval. It is causing complet

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread Chad Etzel
Hmm, Unfortunately this 302 business will completely goof OAuth calls. If you are able to programmatically see that you are getting these redirects, try calling the account/rate_limit_status call [1] (it could be any call, but this one is "free" and is a GET). You should still get a 302 (I'm pre

[twitter-dev] Time out to twitter.com

2009-08-08 Thread pmduque
Requests fro our IP are getting time out. Even a telnet to twitter port 80 gets time out, although http request to other sites work perfectly. Anyone else with that problem?

[twitter-dev] Re: DDoS update: Friday 8PM PDT

2009-08-08 Thread tweezy-e
Chad, I'm hear to join the chorus of support for continuing to keep us informed and wish you well in the battle to restore service. My services are down with 408s, and I'd love to have them back, but as long as I know the why's and what's, that's a huge help. Thanks and good luck. Well handled.

[twitter-dev] SSL/HTTPS for widget

2009-08-08 Thread MFJ
Hi all, I would really appreciate some help. I have an online store and have created a widget there. After installing my sales plummeted out! I realized that in IE7 & 6 (60% of my costumers) they get a security warning. After removing the widget my sales got back up. I love the widget. I communic

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread timwhitlock
I've seem the 302 Location headers having invalid URLs... i.e. two "?" symbols. The original query string and then an additional "?" for the token at the end. Following this redirect blindly has resulted in a Forbidden response. Also it is unclear whether the redirect location needs to be re- sig

[twitter-dev] Re: DDoS Status Update

2009-08-08 Thread Naveen Ayyagari
Chris , We implemented something like this "network status" using the rate_limit_status call (for the IP), while some of the numbers are sometimes wonky with this api right now we poll this every 5 minutes and set a flag to enable or disable all twitter requests from the server dep

[twitter-dev] Re: DDoS update: Friday 8PM PDT

2009-08-08 Thread Buzz
Thank you for leting us knowmore about the problem. I will translate your messagein french and add it to my blog because many users are wondering wat's going on. Cheers On 8 août, 07:42, James Salsman wrote: > On Aug 7, 8:20 pm, Chad Etzel wrote: > > > > > Here is the state of things as we kno

[twitter-dev] Re: Can't change application settings

2009-08-08 Thread Jelle De Laender
I don't know if it's related but I've created a new twitter account last night (personal usage), and I can't change my image (via de website). I had first an image (500x500px, 600KB) -> it tooks about 1 hour to load ('connecting...' ) and I aborted it. I've rescalled it to 300x300px and some

[twitter-dev] Re: PHP Code To Handle 30x Redirects

2009-08-08 Thread Dewald Pretorius
It makes a difference in $call_url = $remote_server.$call_url; further down if a partial redirect URL is returned that starts with '/'. On Aug 8, 11:55 am, JDG wrote: > there's no actual difference there. > > On Sat, Aug 8, 2009 at 08:43, Dewald Pretorius wrote: > > > Yikes, there's a small bug

[twitter-dev] Re: PHP Code To Handle 30x Redirects

2009-08-08 Thread JDG
there's no actual difference there. On Sat, Aug 8, 2009 at 08:43, Dewald Pretorius wrote: > > Yikes, there's a small bug. > > Replace: > > $remote_server = 'http://twitter.com/'; > $call_url = $remote_server . $api_url; > > with > > $remote_server = 'http://twitter.com'; > $call_url = $remote_se

[twitter-dev] Re: PHP Code To Handle 30x Redirects

2009-08-08 Thread Dewald Pretorius
Yikes, there's a small bug. Replace: $remote_server = 'http://twitter.com/'; $call_url = $remote_server . $api_url; with $remote_server = 'http://twitter.com'; $call_url = $remote_server .'/'. $api_url;

[twitter-dev] Streaming API -- Saturday Morning Status Update

2009-08-08 Thread John Kalucki
Nearly all clients are on the Streaming API successfully. There is one notable exception: clients that perform a large HTTP POST operation with the follow= or track= parameter. At some threshold size, requests are not making it into the Hosebird process. We're working on fixing this remaining Stre

[twitter-dev] PHP Code To Handle 30x Redirects

2009-08-08 Thread Dewald Pretorius
Since just setting CURLOPT_FOLLOWLOCATION on POSTs doesn't work because cURL follows with a GET, I thought I'd share the PHP code that I built yesterday to manually follow 30x's on POSTS (and it does follows on GETs as well). function APICall($api_url, $require_credentials = false, $http_post = f

[twitter-dev] Re: Continuous oAuth Issues

2009-08-08 Thread Pek
My app is still experiencing OAuth issues. I've cleared all cookies, and am on FF 3.5.2 Also, my app is no longer able to send out tweets. How can we fix this?

[twitter-dev] Re: Continuous oAuth Issues

2009-08-08 Thread Mike Champion
I've noticed a similar issue. I was able to login to my OAuth-enabled app easily with Safari but had to manually clear my cookies in FireFox before it worked. -mike On Aug 8, 8:25 am, Derek Gathright wrote: > Oh, nice.  I was unable to get into my client over the last few days, but > followed t

[twitter-dev] Re: Continuous oAuth Issues

2009-08-08 Thread Derek Gathright
Oh, nice. I was unable to get into my client over the last few days, but followed the suggestion of clearing your cookies in Safari and it works fine now. Thanks On Sat, Aug 8, 2009 at 2:15 AM, Rich wrote: > > I still can't get mobile safari to oAuth, some people obviously are as > I can see t

[twitter-dev] Re: Unable to login to my twitter account since wednesday night

2009-08-08 Thread Sam Street
I haven't been able to login for the past few days either. Luckily using Firefox I was still logged in through a session so this is fine and apps like TweetDeck for iPhone seem to work (HTTP Auth API must have no problems logging in) I can not login through the twitter frontpage or through OAuth.

[twitter-dev] Re: DDoS update: Friday 8PM PDT

2009-08-08 Thread richardhenry
Thank you sincerely for the update. Good luck, and we're behind you 100%. Richard On Aug 8, 4:20 am, Chad Etzel wrote: > Hello all, > > Here is the state of things as we know them: > > - The DDoS attack is still ongoing, and the intensity has not > decreased at all. Because of this, interaction

[twitter-dev] Re: Can't change application settings

2009-08-08 Thread Jonathan Joyce (Storm ID)
I am not yet sure whether this is related, but over the last 24 hours we have had complaints from customers who cannot themselves update their profile image after we had unsuccessfully tried to overlay their image. The affected accounts are: legs501 dodgyscouse ava3leigh I do not see anything s

[twitter-dev] Re: DDoS Status Update

2009-08-08 Thread Chris Babcock
On Fri, 7 Aug 2009 11:05:32 -0700 Ryan Sarver wrote: > I wanted to send everyone an update to let you know what has been > happening, the known issues, some suggestions on how to resolve them > and some idea of how to move forward. This was really appreciated. When the dust clears, maybe one mor

[twitter-dev] Re: Can't change application settings

2009-08-08 Thread Abraham Williams
You can use the Sign in with Twitter process without having that setting checked in the application page. Just wait until the DDOS issues are over to update it. Abraham 2009/8/7 adamsinger > > I'm trying to enable "Use Twitter for login", but whenever I check the > box and click Save, my browse

[twitter-dev] Re: Rate limits: 20k -> 150 - known issue

2009-08-08 Thread Rich
My curl stuff was working fine, but not it appears to have been limited again. Sorry but this is getting s frustrating. 3 days later and things still aren't working On Aug 8, 1:13 am, Chris Corriveau wrote: > Thank you Chad. Details is really what we want and just next time as   > it happe

[twitter-dev] Re: Continuous oAuth Issues

2009-08-08 Thread Rich
I still can't get mobile safari to oAuth, some people obviously are as I can see the number of users occassionally go up in the oAuth clients page On Aug 8, 4:08 am, Chris Corriveau wrote: > Hi Mike what version of FF are you running? I'mable to use 3.5 now,   > but Twitter may have changed some

[twitter-dev] Re: How do I handle 302 redirects with curl?

2009-08-08 Thread Rich
Excellent our client now supports the 302's :) On Aug 8, 7:37 am, Chad Etzel wrote: > You may have to follow redirects more than once *wink wink nudge nudge* > > with curl you can add --location flag. There's a good bit of info in > the man page as well. > > If using curl with PHP, you can set:

[twitter-dev] Re: DDoS Status Update

2009-08-08 Thread Anupam
Hey good news, my apps seems to perform ok again.. thanks for the superb job twitter :) cheers, On Aug 7, 11:05 pm, Ryan Sarver wrote: > I wanted to send everyone an update to let you know what has been happening, > the known issues, some suggestions on how to resolve them and some idea of >