[twitter-dev] Re: Dev.twitter.com - your apps
Bout 10mins or so before the original email. I can see my apps now :-D Not to figure out the oauth error :-D Thanks for the response On Apr 28, 1:08 am, Matt Harris thematthar...@twitter.com wrote: Hey Barry, Thanks for this. Sometimes when the system is seeing a lot of traffic there can be a delay in the new records being created and the cache getting update. It shouldn't be for a long time though - how long ago did you create the apps? Best, @themattharris Developer Advocate, Twitterhttp://twitter.com/themattharris On Wed, Apr 27, 2011 at 4:18 PM, BarryCarlyon barrycarl...@gmail.comwrote: Just created a new twitter account for a project. So went to make a application so I can oauth in and a tweet with Abraham's lib. The lib was throwing a Incorrect signature so I went to check I got all the keys right. However in your apps (https://dev.twitter.com/apps) I find no apps. And I am unable to create a application with the same name. So my app exists I am unable to see if application entry. I created three under the user @minecraftfmnow and cannot see any. The third and final app is call minecraftfmnow. Please advise. -- Twitter developer documentation and resources:http://dev.twitter.com/doc API updates via Twitter:http://twitter.com/twitterapi Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list Change your membership to this group: http://groups.google.com/group/twitter-development-talk -- Twitter developer documentation and resources: http://dev.twitter.com/doc API updates via Twitter: http://twitter.com/twitterapi Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list Change your membership to this group: http://groups.google.com/group/twitter-development-talk
[twitter-dev] Re: dev.twitter.com sends consumer secret in clear text
This has been discussed quite a bit previously, and is something the Twitter folks are aware of: http://code.google.com/p/twitter-api/issues/detail?id=1665 Cheers -N On Sep 21, 6:54 pm, ManuelZ m...@alumni.sfu.ca wrote: When you register your Twitter app athttp://dev.twitter.com, you get an api key, a consumer secret and other awesome goodies. The secret is necessary so that you can validate signatures of stuff coming from Twitter (confirm it's from Twitter) and generate signatures for stuff you're sending to Twitter (confirm it's from your application). All application settings are sent in clear text (http) if you follow the links on dev.twitter, which is an attack vector: the interception of the secret can compromise the app. (1) It's been puzzling me for a while why the dev.twitter.com/apps (or at least the app settings page) is not restricted to https only. Granted, Twitter can only be affected through a slightly more sophisticated attack (incl. spoofing the app) + they likely have efficient ways to reverse damage from one compromised application, but as the app developer, you're in a pretty bad spot. (2) Suggestion: if you go tohttps://dev.twitter.com/appsfor all your app settings business, you can protect your secret... with one small problem: certificate error: dev.twitter.com uses an invalid security certificate. The certificate is only valid for the following names: www.twitter.com, twitter.com If anyone from Twitter is listening -- it may be a good idea to fix this. (3) On the bright side, Twitter is way better than Facebook, where even if you go to your app settings over https (it works!), it will redirect you to http after it's re-generated your key. -- Twitter developer documentation and resources: http://dev.twitter.com/doc API updates via Twitter: http://twitter.com/twitterapi Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list Change your membership to this group: http://groups.google.com/group/twitter-development-talk?hl=en
Re: [twitter-dev] Re: dev.twitter.com sends consumer secret in clear text
We don't like it either. I can tell you with confidence that a SSL-based dev.twitter.com will be coming in the future though. If you're sensitive in this area, we still have the classic style app management available at https://twitter.com/apps -- doesn't have all the bells whistles, but gets the job done. Taylor On Wed, Sep 22, 2010 at 5:35 AM, Nik Fletcher nik.fletc...@gmail.com wrote: This has been discussed quite a bit previously, and is something the Twitter folks are aware of: http://code.google.com/p/twitter-api/issues/detail?id=1665 Cheers -N On Sep 21, 6:54 pm, ManuelZ m...@alumni.sfu.ca wrote: When you register your Twitter app athttp://dev.twitter.com, you get an api key, a consumer secret and other awesome goodies. The secret is necessary so that you can validate signatures of stuff coming from Twitter (confirm it's from Twitter) and generate signatures for stuff you're sending to Twitter (confirm it's from your application). All application settings are sent in clear text (http) if you follow the links on dev.twitter, which is an attack vector: the interception of the secret can compromise the app. (1) It's been puzzling me for a while why the dev.twitter.com/apps (or at least the app settings page) is not restricted to https only. Granted, Twitter can only be affected through a slightly more sophisticated attack (incl. spoofing the app) + they likely have efficient ways to reverse damage from one compromised application, but as the app developer, you're in a pretty bad spot. (2) Suggestion: if you go tohttps://dev.twitter.com/appsfor all your app settings business, you can protect your secret... with one small problem: certificate error: dev.twitter.com uses an invalid security certificate. The certificate is only valid for the following names: www.twitter.com, twitter.com If anyone from Twitter is listening -- it may be a good idea to fix this. (3) On the bright side, Twitter is way better than Facebook, where even if you go to your app settings over https (it works!), it will redirect you to http after it's re-generated your key. -- Twitter developer documentation and resources: http://dev.twitter.com/doc API updates via Twitter: http://twitter.com/twitterapi Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list Change your membership to this group: http://groups.google.com/group/twitter-development-talk?hl=en -- Twitter developer documentation and resources: http://dev.twitter.com/doc API updates via Twitter: http://twitter.com/twitterapi Issues/Enhancements Tracker: http://code.google.com/p/twitter-api/issues/list Change your membership to this group: http://groups.google.com/group/twitter-development-talk?hl=en
[twitter-dev] Re: dev.twitter.com
Why in peace? :P +1 on the positive sentiments. Looks great! --Robby On Apr 14, 3:16 pm, Josh Roesslein jroessl...@gmail.com wrote: Very nice! RIP apiwiki. Josh -- To unsubscribe, reply using remove me as the subject.
[twitter-dev] Re: dev.twitter.com
+1. Yup, had a great evening here watching the live stream. Next year I'll be there (I hope). On Apr 14, 10:38 pm, Atul Kulkarni atulskulka...@gmail.com wrote: +1... this is nice. On Wed, Apr 14, 2010 at 4:27 PM, Dewald Pretorius dpr...@gmail.com wrote: Okay, this seriously rocks. Congrats to everyone who worked on making dev.twitter.com happen. -- To unsubscribe, reply using remove me as the subject. -- Regards, Atul Kulkarni
Re: [twitter-dev] Re: dev.twitter.com
What a cool stuff!!! Congrats, guys!!! On Wed, Apr 14, 2010 at 7:21 PM, Robby Grossman ro...@freerobby.com wrote: Why in peace? :P +1 on the positive sentiments. Looks great! --Robby On Apr 14, 3:16 pm, Josh Roesslein jroessl...@gmail.com wrote: Very nice! RIP apiwiki. Josh -- To unsubscribe, reply using remove me as the subject. -- Ernandes Jr. - ALL programs are poems. However, NOT all programmers are poets.
[twitter-dev] Re: dev.twitter.com
First of all I'd like to add my thanks for this to everyone else's - a much nicer and more self-contained setup than we've had before, if not an entirely unexpected development. One issue I'd like to query (and apologies if this has come up before, I've not been watching the chirp streams) is whether dev.twitter.com is architected to be likely to survive major Twitter downtime? I'm sure you'll appreciate my point that uptime information is unlikely to be useful if we can't get it when the main Twitter site is undergoing technical issues itself. Whilst I can't claim to be any sort of network engineer or even to have a particularly good knowledge of the DNS system I wonder if you could possibly set dev.twitter.com up externally - that is, with another hosting provider and/or in a different location, in order to make sure it stays up (though obviously this might not be reasonably economical). On Apr 14, 10:27 pm, Dewald Pretorius dpr...@gmail.com wrote: Okay, this seriously rocks. Congrats to everyone who worked on making dev.twitter.com happen.
Re: [twitter-dev] Re: dev.twitter.com
The status page is available on a completely different domain. The rest of the dev information is not all that critical during downtime. http://status.watchmouse.com/7617 http://status.watchmouse.com/7617Abraham On Wed, Apr 14, 2010 at 23:26, 46Bit m...@46bit.com wrote: First of all I'd like to add my thanks for this to everyone else's - a much nicer and more self-contained setup than we've had before, if not an entirely unexpected development. One issue I'd like to query (and apologies if this has come up before, I've not been watching the chirp streams) is whether dev.twitter.com is architected to be likely to survive major Twitter downtime? I'm sure you'll appreciate my point that uptime information is unlikely to be useful if we can't get it when the main Twitter site is undergoing technical issues itself. Whilst I can't claim to be any sort of network engineer or even to have a particularly good knowledge of the DNS system I wonder if you could possibly set dev.twitter.com up externally - that is, with another hosting provider and/or in a different location, in order to make sure it stays up (though obviously this might not be reasonably economical). On Apr 14, 10:27 pm, Dewald Pretorius dpr...@gmail.com wrote: Okay, this seriously rocks. Congrats to everyone who worked on making dev.twitter.com happen. -- Abraham Williams | Developer for hire | http://abrah.am PoseurTech Labs | Projects | http://labs.poseurtech.com This email is: [ ] shareable [x] ask first [ ] private. -- To unsubscribe, reply using remove me as the subject.
[twitter-dev] Re: dev.twitter.com
This is great. I love the twurl interface at http://dev.twitter.com/console Just a thought/suggestion, a link to the documentation when a method is chosen from the drop down list. Its not critical, i can look it up; it would just be a nice extra to save me a few extra clicks. --Naveen Ayyagari @knight9 @SocialScope -- To unsubscribe, reply using remove me as the subject.
