[twitter-dev] Re: OAuth whitelisting?

2009-04-23 Thread Doug Williams
Your application's IP-based whitelisting will apply to all calls originating from the IP address. This includes unauthenticated and authenticated methods, regardless of user. Additionally, your application's authenticated calls made on behalf of a user will not count toward their 100 credits elsew

[twitter-dev] Re: Anyone updating email address from API?

2009-04-23 Thread Arik Fraimovich
We at Topify thought of using that method, but decided not to. It seems to be too intrusive to change someone's email that way. I prefer the user does that on his own. Actually, I think they should deprecate this method - never seen an application that uses it and don't want to stumble at one tha

[twitter-dev] Re: OAuth whitelisting?

2009-04-23 Thread Bill Kocik
Thanks. I realize it isn't available yet; my question could more simply have been stated as "what will OAuth whitelisting mean, exactly?", but since after I posted my question I realized I had a fundamental misunderstanding of the effect whitelisting has on the rate limits of app users (i.e., none

[twitter-dev] Problems with Followers data

2009-04-23 Thread Malcolm
http://twitter.com/statuses/followers.json http://twitter.com/statuses/followers.xml The data in these two calls are drastically different. The json version seems to be missing quite a bit of information. Also I am developing in php for a site twitterworth.net . I grab the data in json format and

[twitter-dev] Re: friends_timeline and following

2009-04-23 Thread Doug Williams
This is still being worked on. Follow issue 419 for status updates. @dougw On 4/23/09, Don Park wrote: > > I don't think this is fixed, at least based on responses I am seeing. > If it was fixed then cache/cluster issues are delaying the results I > am expecting. As to the value type, I am seei

[twitter-dev] Re: friends_timeline and following

2009-04-23 Thread Don Park
I don't think this is fixed, at least based on responses I am seeing. If it was fixed then cache/cluster issues are delaying the results I am expecting. As to the value type, I am seeing following value of 0 instead of true/false.

[twitter-dev] Re: OAuth whitelisting?

2009-04-23 Thread Doug Williams
Whitelisting by OAuth is currently not available. You will need a static IP address if you are running an EC2 applicaiton. Doug Williams Twitter API Support http://twitter.com/dougw On Thu, Apr 23, 2009 at 8:35 PM, Peter Denton wrote: > Hi Bill, > Whitelisting is done per IP, related to the num

[twitter-dev] Re: OAuth whitelisting?

2009-04-23 Thread Peter Denton
Hi Bill, Whitelisting is done per IP, related to the number of requests by your server. -Peter On Thu, Apr 23, 2009 at 1:58 PM, Bill Kocik wrote: > > > I was just looking at the form use to apply for whitelisting, which > says you must fill it out while logged in as the account you want the > r

[twitter-dev] Re: What does "following" in user information do?

2009-04-23 Thread Doug Williams
Please star Issue 419 [1] so you will be notified when the fix is shipped. 1. http://code.google.com/p/twitter-api/issues/detail?id=419 Doug Williams Twitter API Support http://twitter.com/dougw On Thu, Apr 23, 2009 at 8:11 PM, Carlos wrote: > > Still not working from the results I'm seeing.

[twitter-dev] Re: What does "following" in user information do?

2009-04-23 Thread Carlos
Still not working from the results I'm seeing. Has this issue been re- opened? On Apr 19, 9:07 pm, Dossy Shiobara wrote: > On 4/19/09 11:34 AM, Arnaud wrote: > > > And thank you for the update. > > Unfortunately, it still doesn't seem to be fixed. > > I still receive a lot of incorrect "followin

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Bill Robertson
Thanks for the clarifications Doug. On Apr 23, 1:30 am, Doug Williams wrote: > Bill, > The majority of our developers find OAuth sufficient because they are > writing a Web applications. We are pleased that the deprecation of the > source parameter lowered our support load and continues to drive

[twitter-dev] Re: Freelance Twitter API Dev directory?

2009-04-23 Thread explicious
Please add me to the list. Twitter ID: autodrool Name: Waitman Gobble Location: Los Altos, California Site: www.maximumheaddistortion.com Email: wait...@waitman.net Developing: www.tangytweets.com Pet projects and experimentation with possibly no commercial potential.

[twitter-dev] Re: Follow Limit Issues today?

2009-04-23 Thread Jesse Stay
Okay, you can ignore this - I know the problem now. Nothing like a thread talking to yourself. :-) (my ratio was off) On Thu, Apr 23, 2009 at 7:38 PM, Jesse Stay wrote: > Just as additional info, I got it to happen to me, after not following > anyone for the day, unfollowed and re-followed my

[twitter-dev] Re: Follow Limit Issues today?

2009-04-23 Thread Jesse Stay
Just as additional info, I got it to happen to me, after not following anyone for the day, unfollowed and re-followed my wife's account from our socialtoo account a couple times to test some of our code, and now I'm getting the "you are unable to follow more people at this time" message. I know @a

[twitter-dev] Follow Limit Issues today?

2009-04-23 Thread Jesse Stay
I'm seeing a lot of people that aren't even following 1,000 people run into limits where they can't follow any more today out of the blue. Is Twitter having issues with this right now? Thanks, @Jesse

[twitter-dev] help with oauth status update utf8 issue

2009-04-23 Thread alon
hello, i've successfully managed to login to my webapp using twitter oauth and updated my status on twitter. problem is that it only works fine with english. when i tried updating my twit with hebrew utf8 it posted the utf8 char as is on the profile page. http://twitter.com/Laylathedog/status/159

[twitter-dev] oAuth problem.

2009-04-23 Thread Tmeister
Hi. I'm trying login via oAuth. Everything works until i want to make calls to the api, in my callback script, i get the oauth_token and the result is something like this. Array ( [oauth_consumer_key] => 2hWU5PbEV9N0IQZVUVBZA [oauth_token] => 1798551-6WnyNJhqtFJZm2idwPeSvRaWfiQ6EEvuyC3

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread dean.j.robinson
I posted this yesterday, but the post appeared to vanish into the ether, during the OAuth 'outage' my dev version of Hahlo 4 (which uses OAuth) continued to work fine, is this because I was already logged in and the token was still valid? I'm guessing if I'd logged out/ unauthorized then I wouldn'

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Abraham Williams
This is something else that would be good for a development best practice page on the apiwiki. On Thu, Apr 23, 2009 at 17:47, Phil Nash wrote: > That's a great idea, thanks for sharing! I was just wondering what to do > now that oauth_callback won't work. > > Thanks! > Phil > -- > Phil Nash > >

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Phil Nash
That's a great idea, thanks for sharing! I was just wondering what to do now that oauth_callback won't work. Thanks! Phil -- Phil Nash Web development: http://www.unintentionallyblank.co.uk Musical stylings: http://www.hammervsthesnake.co.uk Twitter: http://twitter.com/philnash On Thu, Apr 23,

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Jochen Kaechelin
Am 24.04.2009 um 00:29 schrieb Paul Kinlan: > Hi, > > During development I tend to modify my hosts file to point the > callback URL domain to my box for instance. This is quite good > because all it affects is my box. > I just had the same idea ... ;-) Works as expected now!!! Thanx >

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Julio Biason
On Fri, Apr 24, 2009 at 12:14 AM, djMax wrote: > What does this really mean these days?  Clearly your desktop app is > connected to the internet in some way at some point, Well, my *console*, *non-graphical* application is connected to the internet, yes. Also, if that makes it clear, think about

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread Doug Williams
Nic, We are aware that the current lack of dynamic callback is limiting for development. In the meantime, we wanted to get OAuth support restored while we (and the OAuth consortium) develop a fix for this vulnerability. We intend to address this constraint in the near future. Thanks, Doug Williams

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread Matt Sanford
Hi Nic, For the time being, yes. As I stated in the announcement I'm working on a method to allow oauth_callback's again. Thanks; – Matt Sanford / @mzsanford Twitter API Developer On Apr 23, 2009, at 03:19 PM, Dr Nic wrote: If we cannot run-time configure the callback URI then

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Paul Kinlan
Hi, During development I tend to modify my hosts file to point the callback URL domain to my box for instance. This is quite good because all it affects is my box. Paul On 23 Apr 2009, at 23:16, Abraham Williams <4bra...@gmail.com> wrote: The oauth_callback parameter was just disabled d

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Jochen Kaechelin
Am 24.04.2009 um 00:16 schrieb Abraham Williams: > The oauth_callback parameter was just disabled do to security > issues. Currently only the registered callback works. If you need a > different callback location for development set up a second > application. > Ok, then I have to use my d

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread Dr Nic
If we cannot run-time configure the callback URI then we'll need multiple application registrations for development + production? (assuming the need for absolute URIs) Cheers Nic On Apr 24, 7:38 am, Matt Sanford wrote: > Hi there, > >      I totally forgot about that change. Since the oauth cal

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Abraham Williams
The oauth_callback parameter was just disabled do to security issues. Currently only the registered callback works. If you need a different callback location for development set up a second application. On Thu, Apr 23, 2009 at 17:12, Jochen Kaechelin wrote: > > > Am 22.04.2009 um 15:37 schrieb A

[twitter-dev] Re: Callback url during development

2009-04-23 Thread Jochen Kaechelin
Am 22.04.2009 um 15:37 schrieb Abraham Williams: > Also when you are building the authorize url to send users to > twitter.com you can add "&oauth_callback=http://localhost/callback"; > and that will override your applications registered callback. > OAuth::Consumer.new("xx", "x

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread Matt Sanford
Hi there, I totally forgot about that change. Since the oauth callback is unsigned it was too easy to forge that data. I'm trying to find a good way to include it but right now calling verify_credentials is the best work around. Thanks; – Matt Sanford / @mzsanford Twitter API

[twitter-dev] Re: oAuth is BACK!

2009-04-23 Thread mikehar
However, the callback no longer contains the user info. Why did this change? You can get the user info by calling account/ verify_credentials.format. On Apr 23, 2:20 pm, "@pud" wrote: > Great work @al3x and the rest of the Twitter crew! > > My oAuth seems to be working once again:http://fast140

[twitter-dev] Re: Changes for April 23, 2009

2009-04-23 Thread Pud
Thank you Doug!! Excellent work. On Apr 23, 2:10 pm, Doug Williams wrote: > Along with partial OAuth support restoration, the following API changes were > shipped: > >    - Fixed (REST): Basic authentication now works with passwords containing >    a colon. (http://code.google.com/p/twitter-api/

[twitter-dev] oAuth is BACK!

2009-04-23 Thread @pud
Great work @al3x and the rest of the Twitter crew! My oAuth seems to be working once again: http://fast140.com/oauth/authorize

[twitter-dev] OAuth whitelisting?

2009-04-23 Thread Bill Kocik
I was just looking at the form use to apply for whitelisting, which says you must fill it out while logged in as the account you want the rate limit raised for. In my case, my app will be used by arbitrary Twitter account holders, who will not be using my credentials, so whitelisting my Twitter l

[twitter-dev] Changes for April 23, 2009

2009-04-23 Thread Doug Williams
Along with partial OAuth support restoration, the following API changes were shipped: - Fixed (REST): Basic authentication now works with passwords containing a colon. (http://code.google.com/p/twitter-api/issues/detail?id=496) - Fixed (REST): Error message during downtime now matches doc

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Matt Sanford
Hi Everybody! (Dr. Nick voice) OAuth is once again live, and as described below the oauth_callback has been disabled. I've begun testing the replacement options for oauth_callback and will hopefully get something out soon to replace it. In the mean time successful authorization or aut

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Doug Williams
Mobasoft, Rest assured we will make an announcement when OAuth support is restored. Doug Williams Twitter API Support http://twitter.com/dougw On Thu, Apr 23, 2009 at 12:42 PM, Mobasoft wrote: > > @mzsanford > > Thanks Matt, no matter what all these other Yahoo's are saying about > you, it's a

[twitter-dev] Re: 500s from http://search.twitter.com/trends/current.json

2009-04-23 Thread Matt Sanford
Hi Dave, I just checked the last hours worth of logs and I don't see any 500s. The logs messages might be getting dropped somewhere, can you try accessing with 'curl -v' and send the output when you can reproduce it? Thanks; – Matt Sanford / @mzsanford Twitter API Developer

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Mobasoft
@mzsanford Thanks Matt, no matter what all these other Yahoo's are saying about you, it's appreciated! (j/k to all you Yahoo's) ;^) -Michael p.s. Is OAuth back on yet? I'd hate to see it start getting the nickname of NOAuth. On Apr 23, 1:43 pm, Chad Etzel wrote: > On Thu, Apr 23, 2009 at 2:

[twitter-dev] Re: Anyone updating email address from API?

2009-04-23 Thread Mobasoft
Well, the criteria for email should be looked at either way. "email. Optional. Maximum of 40 characters. Must be a valid email address." alexander.h.wann...@mobility.domainisnothere.org (48 characters and could easily be valid) On Apr 23, 12:23 pm, Abraham Williams <4bra...@gmail.com> wrote: >

[twitter-dev] 500s from http://search.twitter.com/trends/current.json

2009-04-23 Thread Dave Dash
I was getting a number of itnermittend 500 errors from: http://search.twitter.com/trends/current.json Is there a box in rotation that's behaving badly?

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Chad Etzel
On Thu, Apr 23, 2009 at 2:35 PM, Dossy Shiobara wrote: > > On 4/23/09 11:33 AM, Chad Etzel wrote: >> >> On Thu, Apr 23, 2009 at 11:19 AM, Dossy Shiobara >> wrote: >>> >>> An attacker can't get in the middle of an >>> application communicating to Twitter using HTTP Basic Auth. >> >> WRONG. Anyon

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Dossy Shiobara
On 4/23/09 11:33 AM, Chad Etzel wrote: On Thu, Apr 23, 2009 at 11:19 AM, Dossy Shiobara wrote: An attacker can't get in the middle of an application communicating to Twitter using HTTP Basic Auth. WRONG. Anyone doing any sort of packet sniffing could easily get user/pass combos at will. Wir

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread djMax
I understand killing oauth_callback, but I would propose that you shouldn't kill the ability for the app to send info that will be returned to it upon redirecting. Is this possible? For example, you could simply pass oauth_callback back to the calling app even though you're not going to listen t

[twitter-dev] Re: replies url gone?

2009-04-23 Thread rhysmeister
Hi Matt, Had a close look at this. My bad. I have always been doing a POST for replies not GET as documented. I guess you tightened up on this recently. Thanks. Rhys On Apr 23, 5:09 pm, Matt Sanford wrote: > Hi Rhys, > >      Bas request is generally something like unescaped characters in   >

[twitter-dev] Re: Get Twitter users list(by screenname)

2009-04-23 Thread Beier
If your app is not whitelisted, then it subjects to 100 API call/hour/ IP, which means you can only call users/show 2400 times a day On Apr 23, 6:34 am, kkp <33spa...@gmail.com> wrote: > Hi, > > I am new to this group(Twitter API). > we have a requiremnt like ... > > we need to get the "Twitter"

[twitter-dev] Anyone updating email address from API?

2009-04-23 Thread Abraham Williams
Are there many apps using the email parameter for update_profile? being able to change the email associated with an account seems to defeat some of the purpose of using OAuth. http://apiwiki.twitter.com/Twitter-REST-API-Method%3A-account%C2%A0update_profile Abraham -- Abraham Williams | http://

[twitter-dev] Re: befriending with non-existing account started to return status code 404, it used to be 403

2009-04-23 Thread Doug Williams
An HTTP 404 is the correct response because you are attempting to access a nonexistent resource. This behavior is correctly documented here [1]. 1. http://apiwiki.twitter.com/HTTP-Response-Codes-and-Errors Doug Williams Twitter API Support http://twitter.com/dougw On Thu, Apr 23, 2009 at 9:03 A

[twitter-dev] Re: Rate Limit Issue?

2009-04-23 Thread Matt Sanford
Hi there, The username:password in the URL is a shortcut but it sounds like the VBA library is ignoring it. Well, is stripping it and not creating and Authorization header. There is no way to specify these later in the URL. If the library lets you set headers you could try generating

[twitter-dev] Re: Rate Limit Issue?

2009-04-23 Thread DuBose Cole
Oh and just to add on, I'm utilizing the REST API as I'm aware of the current limit of search. Also, I've queried my existing rate limit status and the xml data returned showed a current limit of 100. Thanks once again, DuBose

[twitter-dev] Re: Rate Limit Issue?

2009-04-23 Thread DuBose Cole
Hi Matt, Thanks for such a quick response, I really appreciate the help. I think the way I'm using vba (kicking myself for not actually starting the project explicitly in .net/visual studio), my method won't allow the last workaround used. If I can ask, in the URL that is submitted to the RES

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread twitscoop
Glad you stepped in, Chad, because I felt really stupid for a second. And like I said, it's less harmful to have your oAuth session stolen (you can just unauthorize the application) than to have your plain twitter credentials exposed. Anyway this is not the subject of this thread, I'm just glad w

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Shannon Whitley
Thanks, Matt! Even though it kills my latest project, I'm still in agreement that turning oAuth back on without oauth_callback is preferable to leaving it off. oauth_callback is very important to me, though, so I would lobby for bringing it back in some form as quickly as possible. Apr 23, 9:

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Mobasoft
Please don't let this slow down Twitter's turning it back on. Just let everyone set it in the application and be done with it. If they want a different callback url, then simply create a MyApp_Test app and put in a different application return url. 100% working sure in the hell beats 0% implemen

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Andrew Badera
What, could you hear me groaning from all the way up in Albany? ;) On Thu, Apr 23, 2009 at 11:24 AM, Dossy Shiobara wrote: > > On 4/23/09 11:21 AM, Dossy Shiobara wrote: > >> >> On 4/23/09 10:04 AM, Andrew Badera wrote: >> >>> Corrected: "Overuse of the term by almost every web app since 2002,

[twitter-dev] Re: replies url gone?

2009-04-23 Thread Matt Sanford
Hi Rhys, Bas request is generally something like unescaped characters in the URL. Can you try with curl and send the URL causing the problem? Thanks; – Matt Sanford / @mzsanford Twitter API Developer On Apr 23, 2009, at 09:08 AM, rhysmeister wrote: Hi Matt, I'm getting "Er

[twitter-dev] Re: replies url gone?

2009-04-23 Thread rhysmeister
Hi Matt, I'm getting "Error: The remote server returned an error: (400) Bad Request." Definatly not rate limiting here. Rhys On Apr 23, 4:59 pm, Matt Sanford wrote: > Hi Rhys, > >      Both should work at the moment. We still have both configured and   > I just did some curl requests with my

[twitter-dev] Re: search API issue : "source:" doesn't work in some case

2009-04-23 Thread Yusuke
Thanks for the super quick response! I'll fit my testcase then. Cheers, Yusuke On 4月24日, 午前1:01, Matt Sanford wrote: > Hi Yusuke, > > Unfortunately the "source:" operator as it is currently > implemented has a few shortcomings. One is that it requires a query, > and the second is that

[twitter-dev] befriending with non-existing account started to return status code 404, it used to be 403

2009-04-23 Thread Yusuke
Hi, I noticed that now the API returns 404 status code when a client called /friendships/create/[non-existing-user].xml. The API used to be returning 403 status code. Will it be a permanent behavior? Or is it subject to change? I'll be nice if the status codes in exceptional cases are explicitly

[twitter-dev] Re: search API issue : "source:" doesn't work in some case

2009-04-23 Thread Matt Sanford
Hi Yusuke, Unfortunately the "source:" operator as it is currently implemented has a few shortcomings. One is that it requires a query, and the second is that it can only search the last 7 days. This is a known performance issue and we're still looking for a way we can remove the rest

[twitter-dev] Re: replies url gone?

2009-04-23 Thread Matt Sanford
Hi Rhys, Both should work at the moment. We still have both configured and I just did some curl requests with my test account and verified it. Are you getting any specific error? curl requests with headers (curl - v, but be sure to obscure the Authorization header) always help in times

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Matt Sanford
Hi Michael, We've been discussing that in the group of people dealing with the security issue. It seems like AuthSub tried that route and found it to be very problematic. More often than not people went with open redirectors to make it easy, and therefor bypassed all security. We're w

[twitter-dev] search API issue : "source:" doesn't work in some case

2009-04-23 Thread Yusuke
Hi, Today I noticed that my Twitter4J automated testcase for the search API started to fail. query: "thisisarondomstringforatestcase" returns 1 tweet. http://search.twitter.com/search?q=thisisarondomstringforatestcase But query: "source:web thisisarondomstringforatestcase" returns 0 tweet despi

[twitter-dev] replies url gone?

2009-04-23 Thread rhysmeister
I've just noticed some @reply functionality is not working in my app I was aware of the change to "mentions" but not that this involved a change in url to http://twitter.com/statuses/mentions.format is the old http://twitter.com/statuses/replies.format dead? Any chance of reinstating if so? http

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Michael Ivey
It would be nice to be able to set multiple allowed callbacks, if this is the case, and specify which one to use in the request. I use the callback on my dev environment so I don't have to maintain two applications. (Also, the URL verification on callbacks doesn't support port numbers, but that's a

[twitter-dev] Re: weird things on twitter

2009-04-23 Thread Doug Williams
Please see the post on http://status.twitter.com explaining this behavior. On 4/23/09, ytbryan wrote: > > hi all, > > i notice that a few people appeared under my "friends" pages. when > i click in to investigate further, i realised that i am not following > them. > > did anybody notice this

[twitter-dev] Re: How can I retrieve follower information

2009-04-23 Thread Nick Arnett
On Thu, Apr 23, 2009 at 6:02 AM, jey jey wrote: > > in this case there are 40 followes. How can we get all these Id's > Sounds like this issue: http://code.google.com/p/twitter-api/issues/detail?id=510 Nick

[twitter-dev] Re: Get Twitter users list(by screenname)

2009-04-23 Thread Mobasoft
Well, it's easy to get, just start with TwitterID 1001 and increment by 1 On Apr 23, 10:38 am, Nick Arnett wrote: > On Thu, Apr 23, 2009 at 6:34 AM, kkp <33spa...@gmail.com> wrote: > > > How can we get the twitter users list?. > > Sounds like you're asking for a list of all Twitter users, which

[twitter-dev] Re: Get Twitter users list(by screenname)

2009-04-23 Thread Nick Arnett
On Thu, Apr 23, 2009 at 6:34 AM, kkp <33spa...@gmail.com> wrote: > > > How can we get the twitter users list?. Sounds like you're asking for a list of all Twitter users, which is not available. And if it were, I doubt any client would want to download and store it. Nick

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Mobasoft
Good news, the oauth_callback parameter should /always/ be set in the application imho. Looking forward to your "flip the switch" celebrations today. On Apr 23, 9:59 am, Matt Sanford wrote: > Hi all, > >      We had to wait for the midnight deadline before giving too many   > details because we

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Chad Etzel
On Thu, Apr 23, 2009 at 11:19 AM, Dossy Shiobara wrote: > > An attacker can't get in the middle of an > application communicating to Twitter using HTTP Basic Auth. WRONG. Anyone doing any sort of packet sniffing could easily get user/pass combos at will. Wireless promiscuous mode + WireShark =

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Dossy Shiobara
On 4/23/09 11:21 AM, Dossy Shiobara wrote: On 4/23/09 10:04 AM, Andrew Badera wrote: Corrected: "Overuse of the term by almost every web app since 2002, including GMail, notwithstanding." "Web 2.0: It's Beta." (Forgive the pun, it's still early in the day ...) -- Dossy Shiobara

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Dossy Shiobara
On 4/23/09 10:04 AM, Andrew Badera wrote: Corrected: "Overuse of the term by almost every web app since 2002, including GMail, notwithstanding." "Web 2.0: It's Beta." -- Dossy Shiobara | do...@panoptic.com | http://dossy.org/ Panoptic Computer Network | http://panoptic.com/ "

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Dossy Shiobara
On 4/23/09 4:44 AM, twitscoop wrote: Anyways, even with this security flow, oauth is safer than providing twitter credentials to third parties... This is _absolutely_ NOT true! An attacker can't get in the middle of an application communicating to Twitter using HTTP Basic Auth. but they can

[twitter-dev] Re: Rate Limit Issue?

2009-04-23 Thread Matt Sanford
Hi DuBose, The account looks whitelisted. The most common issue when using authenticated requests is that you're calling a method that does not require authentication and your HTTP library is not sending it. I have seen some reports of this with .NET languages. Take a look at this old

[twitter-dev] Rate Limit Issue?

2009-04-23 Thread DuBose Cole
I was wondering if anyone else has encountered problems with the rate limit while whitelisted. I recieved whitelisting authorization for my app development, but my rate still shows up as 100 per hour. After running into this problem and reading about some database issues a while back, I applied ag

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Matt Sanford
Hi all, We had to wait for the midnight deadline before giving too many details because we're taking a slightly more active approach. The code for these changes was scheduled to go out yesterday but there was a problem with some unrelated changes and the whole thing was rolled back. I

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Andrew Badera
haha, agreed. On Thu, Apr 23, 2009 at 10:43 AM, Cameron Kaiser wrote: > > > Corrected: "Overuse of the term by almost every web app since 2002, > > including GMail, notwithstanding." > > s/GMail/*.google.com/ > > -- > personal: > http://www.cameronkaiser.com/

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Cameron Kaiser
> Corrected: "Overuse of the term by almost every web app since 2002, > including GMail, notwithstanding." s/GMail/*.google.com/ -- personal: http://www.cameronkaiser.com/ -- Cameron Kaiser * Floodgap Systems * www.floodgap.com * ckai...@floodgap.com -- Th

[twitter-dev] Re: How do I find all replies to a status?

2009-04-23 Thread Jason Wong
Doug, Isn't it possible to restrict protected updates when calling a specific user? This functionality would be similar to the statuses/user_timeline. And maybe a parameter to filter out replies only, not just all mentions. This would be similar to the Search API using t...@screen_name in the qu

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread djMax
What does this really mean these days? Clearly your desktop app is connected to the internet in some way at some point, otherwise you wouldn't need Twitter. So are you just saying that you never want to have to display an HTML page? What about a web based "activation stage" that yielded some cu

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Andrew Badera
Corrected: "Overuse of the term by almost every web app since 2002, including GMail, notwithstanding." On Thu, Apr 23, 2009 at 10:01 AM, Ed Finkler wrote: > > That is, in fact, what "Beta" typically means: "not suitable for > production use." Overuse of the term by a few popular web apps > not

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Ed Finkler
That is, in fact, what "Beta" typically means: "not suitable for production use." Overuse of the term by a few popular web apps notwithstanding. -- Ed Finkler http://funkatron.com Twitter:@funkatron AIM: funka7ron ICQ: 3922133 XMPP:funkat...@gmail.com On Apr 23, 9:25 am, mikehar wrote: > Also

[twitter-dev] Get Twitter users list(by screenname)

2009-04-23 Thread kkp
Hi, I am new to this group(Twitter API). we have a requiremnt like ... we need to get the "Twitter" users list (to follow). After getting the list,user can select the user from the list and follow the twitter user. we are able to get the twitter users who are followed and whom i am following.But

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread mikehar
Totally agree with Pierre. I think we all understand the security issue. Why was twitter's approach so much more severe than other services? Why not just a warning on login? Can Doug or Alex shed some light on this? wrt the ETA, can we get an update? One blog post said yesterday, the posting on t

[twitter-dev] How can I retrieve follower information

2009-04-23 Thread jey jey
Hi I need to retrieve the entire ids of followers of a particular user, it works for me fine, in the case of small number of follwers. when its is a huge one its not working coming say "Twitter is over capacity. Too many tweets! Please wait a moment and try again. " http://twitter.com/followers/

[twitter-dev] Re: How do I find all replies to a status?

2009-04-23 Thread Chad Etzel
On Wed, Apr 22, 2009 at 2:10 PM, Doug Williams wrote: > It requires a non trivial change to our architecture which means that until > the product at large (twitter.com) adopts the idea of conversation threads, > the API will be unable to offer this feature. I call slight shenanigans here, as sea

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread Abraham Williams
Here is the official OAuth statement: http://oauth.net/advisories/2009-1 On Thu, Apr 23, 2009 at 03:44, twitscoop wrote: > > Hi guys, is there an ETA for it to be restored ? It seems Oauth's > recommended approach is to simply add a warning notice on > authorization until this is fixed (this is

[twitter-dev] Re: Twitter's official comment on our disabling of OAuth

2009-04-23 Thread twitscoop
Hi guys, is there an ETA for it to be restored ? It seems Oauth's recommended approach is to simply add a warning notice on authorization until this is fixed (this is what Google did). Anyways, even with this security flow, oauth is safer than providing twitter credentials to third parties... Tha

[twitter-dev] Re: Freelance Twitter API Dev directory?

2009-04-23 Thread Rob Banagale
Hello, I'd like to be added to this list please. Real Name: Rob Banagale Twitter Username: @neutrinosllc email: r...@neutrinosllc.com Social media consulting, development and design specializing in Ruby on Rails. Our strength is in creating integrations between services, including Facebook and

[twitter-dev] weird things on twitter

2009-04-23 Thread ytbryan
hi all, i notice that a few people appeared under my "friends" pages. when i click in to investigate further, i realised that i am not following them. did anybody notice this ?

[twitter-dev] Re: authenticating

2009-04-23 Thread ytbryan
i am using twitter4j now. it works perfectly On Apr 20, 2:16 am, ytbryan wrote: > Hello everyone.. > > I am using commons httpclient to authenticate twitter through REST. > > however, i haven't successfully authenticate using the below code: can > someone advise me what to fill in under Auth

[twitter-dev] OAuth API

2009-04-23 Thread Mobasoft
When is authentication going to be restored? Also, after reading "The Consumer will need this new extra parameter to exchange the Request Token for an Access Token, ensuring that the real user has to return to the application to complete the flow." what details can you provide about how Twitter i

[twitter-dev] 2nd Event for Twitter Developers

2009-04-23 Thread Jonathan Markwell
Hi Everyone, Next Thursday 30th April will see the second Twitter Developer Nest, an event bringing loads of us together in the real world to discuss our challenges and celebrate our achievements. The event, taking place at Sun Microsystems London HQ, starts at 6pm BST with sessions starting fro