Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Cameron Kaiser
Yesterday I noticed a javascript prompt on one Tumblr blog asking for Twitter username/password I thought it was some kind of new phishing scam, I even wanted to report it to Twitter. Now I just saw the link sent from @twitterapi account and it also does the same thing - asking for

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Scott Wilcox
Hello, You're accessing an API resource that requires authentication in the URL, thats why you're being prompted for a username and password. I have no idea about the tumblr page you've seen but there are plenty of Basic auth applications still out there. Scott. On 11 Mar 2010, at 12:06,

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Raffi Krikorian
hi. yes - this is a legit API - its called the bulk user show API. it, for now, takes either oauth or basic auth, but as with all our other APIs, in june we will be removing the basic auth support. we'll be documenting this today. On Thu, Mar 11, 2010 at 4:06 AM, Dmitri Snytkine

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Dossy Shiobara
HOLY CRAP! Is that an API method that's equivalent to passing an array of IDs to /users/show? Is there a reason why it wasn't done right? /users/show.xml?user_id=12863272user_id=3191321user_id=9160152... And why does this method *require* authentication when /users/show doesn't? On 3/11/10

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Raffi Krikorian
HOLY CRAP! Is that an API method that's equivalent to passing an array of IDs to /users/show? Is there a reason why it wasn't done right? /users/show.xml?user_id=12863272user_id=3191321user_id=9160152... i think right is in the eye of the beholder :P i can stick that feature request

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Dossy Shiobara
On 3/11/10 9:54 AM, Raffi Krikorian wrote: HOLY CRAP! Is that an API method that's equivalent to passing an array of IDs to /users/show? Is there a reason why it wasn't done right? /users/show.xml?user_id=12863272user_id=3191321user_id=9160152... i think right is in

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Taylor Singletary
While it's a standard to use multiple values for the same key in this way, there are a gigantic amount of OAuth libraries out there that don't account for it and will botch the request as a result. Taylor Singletary Developer Advocate, Twitter http://twitter.com/episod On Thu, Mar 11, 2010 at

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Dossy Shiobara
So, poor OAuth implementations are forcing a poor technical design decision in Twitter's product? Tread carefully ... On 3/11/10 1:38 PM, Taylor Singletary wrote: While it's a standard to use multiple values for the same key in this way, there are a gigantic amount of OAuth libraries out

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Taylor Singletary
It wasn't a factor in this particular design decision, but the reality is that the vast majority of OAuth libraries out there are not to spec. Taylor Singletary Developer Advocate, Twitter http://twitter.com/episod On Thu, Mar 11, 2010 at 12:06 PM, Dossy Shiobara do...@panoptic.com wrote: So,

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread M. Edward (Ed) Borasky
Taylor, allow me to get on my soapbox again and recommend that Twitter start developing open source client libraries for the API, using the *proven* technologies of C/C++ (gcc for everything except Windows, Microsoft's compilers for Windows) and SWIG. This would neatly solve nearly all

Re: [twitter-dev] Is this legit Twitter API?

2010-03-11 Thread Raffi Krikorian
Taylor, allow me to get on my soapbox again and recommend that Twitter start developing open source client libraries for the API, using the *proven* technologies of C/C++ (gcc for everything except Windows, Microsoft's compilers for Windows) and SWIG. This would neatly solve nearly all