[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Dmitriy V'jukov
On Jul 28, 3:27 pm, chinaski007 wrote: > I suppose this is not so weird.  Users are accustomed to giving user/ > pass information even to "foreign" apps. Agree. Anyway, if user just setups desktop app to his computer, he already gives it much more than just login/password to some service. And

[twitter-dev] Re: [Twitter4J] Twitter4J 2.0.9 released - introduces tons of bugs, and lots of new features including Android support

2009-07-30 Thread Yusuke Yamamoto
Versoin 2.0.9 is not meant to introduce tons of bugs, it actually *fixes* tons of bugs of course. -- Yusuke Yamamoto yus...@mac.com this email is: [x] bloggable/tweetable [ ] ask first [ ] private follow me on : http://twitter.com/yusukeyamamoto subscribe me at : http://yusuke.homeip.net/blog/

[twitter-dev] Re: Search API: since_id is now unreliable

2009-07-30 Thread Brooks Bennett
Doug, Is there any status update on this issue? Users are really starting to get frustrated with results and wondering what the status is on things getting back to being consistent... Thanks! Brooks On Jul 21, 3:45 pm, Doug Williams wrote: > Chad,Your assessment is spot on. > > At the hear

[twitter-dev] Where did Advanced Search go?

2009-07-30 Thread Joseph
>From twitter.com. I'm pretty sure it was there a couple of days ago. Am I not caffeine'ated enough, or is the feature really gone?

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Bradley S. O'Hearne
All, Just a question along the same lines as Dmitriy's, and forwarding no opinion one way or the other -- but I'm curious, as security discussions often end up being debates about one particular facet of a security scheme while not considering the big picture. What is the breach that OAut

[twitter-dev] Re: OAuth URLEncode for VB.NET Libraries

2009-07-30 Thread Ney Garcia
Hi guys, I have gone into the same problem : my app uses OAuth to post tweets and went ok over the weekend but on Monday, Twitter started refusing OAuth posts. My app then tries to post using basic method, and it works. I also implemented OAuth using Shannon Whitley's example, which I transformed

[twitter-dev] Preventing Twitter from interpreting "@" characters

2009-07-30 Thread Bradley S. O'Hearne
Hello all, I am trying to post a URL to a Twitter status that has a "@" character in it. The problem is probably obvious -- anyone know how to prevent Twitter from interpreting the "@" as a username? Thanks, Brad

[twitter-dev] Re: Twitter + OAuth for iPhone

2009-07-30 Thread Marneo
One more I also cannot see this location OAuth_ObjC_Test_App/ Example/ . Thanks! On Jul 30, 1:50 am, Ben Gottlieb wrote: > Okay, sendUpdate is now working with spaces again. > > On Jul 29, 10:41 am, Ben Gottlieb wrote: > > > Update: it's not working if you have %-escaped characters in your > >

[twitter-dev] Re: Where did Advanced Search go?

2009-07-30 Thread Vincent Nguyen
Yes, me too! Dunno where it went?? 2009/7/30 Joseph > > From twitter.com. I'm pretty sure it was there a couple of days ago. > Am I not caffeine'ated enough, or is the feature really gone?

[twitter-dev] Re: twitter api server seems to be down (getting invalid signature) since 5.15 pm pst

2009-07-30 Thread Andreu
I read this discussion carefully and I cannot extract a conclusion... The question is why a set of API methods are working and others aren't working properly, returning a 'Incorrect signature' error. Methods working now: - posting a tweet (statuses/update). Works fine - extract user timeline (st

[twitter-dev] Re: Twitter + OAuth for iPhone

2009-07-30 Thread Marneo
Ben, It says in the read me file that: Use the key and secret info provided there to modify the constants at the top of YHOAuthTwitterEngine.m You should also set up your callback url at the top of the YHTwitter.m But I cant find these files. Where can I find these files and edit them for my inf

[twitter-dev] Re: Where did Advanced Search go?

2009-07-30 Thread Doug Williams
You can access advanced search here: http://search.twitter.com/advanced Thanks, Doug On Thu, Jul 30, 2009 at 10:01 AM, Vincent Nguyen wrote: > Yes, me too! Dunno where it went?? > > 2009/7/30 Joseph > >> >> From twitter.com. I'm pretty sure it was there a couple of days ago. >> Am I not caffeine

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Andrew Badera
On Thu, Jul 30, 2009 at 11:40 AM, Bradley S. O'Hearne < brad.ohea...@gmail.com> wrote: > > *snip* A ... have you missed the last 12 months of Twitterverse drama? You can't trust random third party apps who demand your credentials. How do we know what they'll do with it? There was a breach ju

[twitter-dev] Re: Search API: since_id is now unreliable

2009-07-30 Thread Doug Williams
Brooks,As I stated previously, it is a large problem (much deeper than the API) that will take some time to fix. The search team is growing aggressively, and the new engineers are quickly getting up to speed. One of their tasks is to make progress on the bottleneck causing this problems. That said,

[twitter-dev] Re: Preventing Twitter from interpreting "@" characters

2009-07-30 Thread JDG
put a space after the @ sign? On Wed, Jul 29, 2009 at 22:11, Bradley S. O'Hearne wrote: > > Hello all, > > I am trying to post a URL to a Twitter status that has a "@" character > in it. The problem is probably obvious -- anyone know how to prevent > Twitter from interpreting the "@" as a usernam

[twitter-dev] Re: OAuth URLEncode for VB.NET Libraries

2009-07-30 Thread Duane Roelands
Here's TwitterOAuth.vb, the OAuth class I'm using for my Twitter client. http://dpaste.com/73411/ This is a VB.NET port of Shannon Whitley's C# class, with a few tweaks and extensions. My client's still a 0.5 alpha, so it's entirely possible that there are still holes in this. If you find any,

[twitter-dev] Re: Preventing Twitter from interpreting "@" characters

2009-07-30 Thread Howard Siegel
Which will destroy the URL. ;-O - h On Thu, Jul 30, 2009 at 10:50, JDG wrote: > put a space after the @ sign? > > > On Wed, Jul 29, 2009 at 22:11, Bradley S. O'Hearne > wrote: > >> >> Hello all, >> >> I am trying to post a URL to a Twitter status that has a "@" character >> in it. The problem

[twitter-dev] Pending follow requests for protected users

2009-07-30 Thread Bill Kocik
If a user is protected, any attempt to follow them creates a request they must approve. Is there any API for retrieving these pending requests, and approving or denying them? I don't see anything in the docs, so I'm guessing not, but thought it couldn't hurt to ask. Thanks...

[twitter-dev] Re: Application statistics

2009-07-30 Thread droidin.net
Oh my goodness! Thank you, thank you, thank you! I didn't know you can do that! Not that is serves my purpose for the question I asked but it's a gem - I already have a fantastic idea for a killer app :) On Jul 29, 9:34 pm, Abraham Williams <4bra...@gmail.com> wrote: > You can also use the Spritz

[twitter-dev] Re: Preventing Twitter from interpreting "@" characters

2009-07-30 Thread JDG
OH. missed the url part. Could you URL-escape it? That is, instead of using @, use %40? On Thu, Jul 30, 2009 at 12:27, Howard Siegel wrote: > Which will destroy the URL. ;-O > > - h > > > On Thu, Jul 30, 2009 at 10:50, JDG wrote: > >> put a space after the @ sign? >> >> >> On Wed, Jul 29, 2009

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Duane Roelands
Brad, Encryption on disk and encryption over the wire are not the issues and really don't have very much to do with the Basic vs. OAuth decision. The most important issue I see is that Basic Auth requires you to give your Twitter credentials to a person you do not know. This is a BAD IDEA. Bas

[twitter-dev] Re: Pending follow requests for protected users

2009-07-30 Thread Abraham Williams
Planned: http://code.google.com/p/twitter-api/issues/detail?id=8 On Thu, Jul 30, 2009 at 13:39, Bill Kocik wrote: > > If a user is protected, any attempt to follow them creates a request > they must approve. Is there any API for retrieving these pending > requests, and approving or denying them?

[twitter-dev] Re: Twitter + OAuth for iPhone

2009-07-30 Thread Ben Gottlieb
Sorry, I should have been more careful when prepending my read me content. I've updated the read me file on GitHub, but basically: Use the project in the Demo folder. You'll need to replace the strings in Demo/Src/OAuthTwitterDemoViewController.m with your own consumer key and consumer secret (v

[twitter-dev] My username capitalization appears wrong in twitter search

2009-07-30 Thread Jeff L
Hello, I'm almost 100% sure that this isn't the right place to post this, but: a) I've filed two twitter help tickets with no helpful response whatsoever b) The response to my latest ticket gave me a link to the Twitter API Wiki for some reason so here I am c) I'm hoping someone here, possibly a

[twitter-dev] Re: Twitter4J 2.0.9 released - introduces tons of bugs, and lots of new features including Android support

2009-07-30 Thread Amitab
Thanks a lot Yusuke, Did you do any major changes to Oauth aoart from fixing TFJ-187? I will get working with this for twaller.com /Amitab On Jul 30, 5:36 am, Yusuke Yamamoto wrote: > Versoin 2.0.9 is not meant to introduce tons of bugs, it actually   > *fixes* tons of bugs of course. > -- >

[twitter-dev] Re: twitter api server seems to be down (getting invalid signature) since 5.15 pm pst

2009-07-30 Thread Chris Kimpton
@noradio - thanks for the notification, belated though it was. FWIW I am using the OAuthConsumer Objective-C library - http://code.google.com/p/oauthconsumer/ Its already behind with the verifier change, but there are posts the FAQ on how to get it working with that and now this change. The fix

[twitter-dev] Re: My username capitalization appears wrong in twitter search

2009-07-30 Thread Abraham Williams
This is a known issue: http://code.google.com/p/twitter-api/issues/detail?id=626 On Thu, Jul 30, 2009 at 13:47, Jeff L wrote: > > Hello, I'm almost 100% sure that this isn't the right place to post > this, but: > > a) I've filed two twitter help tickets with no helpful response > whatsoever > b)

[twitter-dev] Re: Pending follow requests for protected users

2009-07-30 Thread Bill Kocik
Ahh - next time I'll be sure to look at the roadmap first. Thanks, Abraham. On Jul 30, 3:49 pm, Abraham Williams <4bra...@gmail.com> wrote: > Planned:http://code.google.com/p/twitter-api/issues/detail?id=8 > > On Thu, Jul 30, 2009 at 13:39, Bill Kocik wrote: > > > If a user is protected, any at

[twitter-dev] Re: twitter api server seems to be down (getting invalid signature) since 5.15 pm pst

2009-07-30 Thread AlbertC
I don't know if this will help at all, but I had the same problem...after hours spent on this stupid error, I realized that some of my request URLs were using http, and some https. After changing all the request URLs to https, everything's working perfectly (I'm using exactly the same client libra

[twitter-dev] Re: twitter api server seems to be down (getting invalid signature) since 5.15 pm pst

2009-07-30 Thread jonat...@scribblelive
I may be the only one to be this stupid, but when I looked at my POST request functions, I was appending some parameters like "Source", etc. that were common to all requests. But since they weren't there when the signature was generated, we were getting 401 errors as of 7/27. Removing those fixed

[twitter-dev] Re: twitter api server seems to be down (getting invalid signature) since 5.15 pm pst

2009-07-30 Thread Isaiah
After all this discussion, I'm a bit nervous that I may missed something that needs to be fixed. Does anyone know of a good testcase that will trigger the failures in the OAuthConsumer libs? I've checked POST, seems to work as expected. Tested odd encodings (like spaces and other things th

[twitter-dev] Help signing OAuth requests

2009-07-30 Thread Marcel Molina
For those who might be struggling to ensure their OAuth signatures are being generated correctly, this guide provides more hand holding with the process than the specification. It includes custom forms where you can fill out all the details of your request and see what the signature and its related

[twitter-dev] Re: Fetch multiple statuses by ID

2009-07-30 Thread Peter Denton
not possible. you have to store the tweets on your end and build your own query. On Wed, Jul 29, 2009 at 10:37 AM, Michael Mahemoff wrote: > > Greetings. Is there any way to fetch multiple statuses in a single > request, by passing in all the status IDs? As in: > > http://twitter.com/statuses/sho

[twitter-dev] 401 Unauthorized When Getting an Access Token

2009-07-30 Thread mattarnold1977
I am using ASP .NET (VB) to try and authenticate using oAuth. I have been able to get a request token and direct a user to Twitter's authentication page. Twitter then redirects back to my app. At that point I attempt to get an access token, but I continue to receive 401 "unauthorized" errors.

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Bradley S. O'Hearne
Duane, I understand the concern. But I think the conversation is moving closer to the actual issue. Your example of turning Twitter credentials to a stranger basically makes the application (or computer) that the user has already willfully chosen to use "a complete stranger". I would deba

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Andrew Badera
You can lead a horse to water ... On Thu, Jul 30, 2009 at 7:07 PM, Bradley S. O'Hearne wrote: > > Duane, > > I understand the concern. But I think the conversation is moving > closer to the actual issue. Your example of turning Twitter > credentials to a stranger basically makes the application

[twitter-dev] Trending Topic hashtag breaking

2009-07-30 Thread Beier
The query for the trending topic is "#HootSuite 2" but when you click on it, it says that no results were found. However if you just search #HootSuite 2 (no quotes) it returns all the appropriate results (mostly with the term HootSuite 2.0) . It appears that there is some confusion between the ter

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Duane Roelands
OAuth lets you access the Twitter service without giving your Twitter credentials to anyone but Twitter. Basic Auth requires you to give your Twitter credentials to someone other than Twitter. Therefore, OAuth is more secure than Basic Auth. This is not rocket science. On Jul 30, 7:07 pm, "B

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Jesse Stay
I understand the reasoning behind OAuth, and think it's a step in the right direction, but, does Twitter have plans to improve and move to a better Auth system than OAuth? With Facebook Connect I just have to click once, and if the user is already logged in and approved my app, they never see the

[twitter-dev] Follow up

2009-07-30 Thread MRWILLAN
I like to take this time to personally THANK Twitter Development for the work your doing and fixing in the line of spam follow up and tactical problems, I know there must be alot of hands full of JUNK! ON Twitter, So may Thanks for what you do!

[twitter-dev] Where to enter the pin number for desktop clients

2009-07-30 Thread mani
Hi, I got the token secret & aouth_token through http://oauth.googlecode.com/svn/code/javascript/example/requestToken.html And used the token i got to authorize with the username/password. I used following url. Where in i filled like below and put in the browser. It asked me username/password

[twitter-dev] Re: OAUTH: Basic Auth is simpler/more reliable/more secure/better received than OAuth!?

2009-07-30 Thread Abraham Williams
Personally I've found JavaScript based auth systems like Facebook Connect and Google Friend Connect to be very difficult to debug and use. I am also a lot more comfortable with PHP then JS. As far as UX. Sign in with Twitter has the same flow as FBC and GFC. Click a link on your site, jump to prov

[twitter-dev] Re: Where to enter the pin number for desktop clients

2009-07-30 Thread srikanth yaradla
just add the one more input parameter oauth_verifier for pin in accessToken.html (make sure you trim the extra space while pasting the value) It should work fine On Jul 31, 9:59 am, mani wrote: > Hi, > > I got the token secret & aouth_token > throughhttp://oauth.googlecode.com/svn/code/javascri