[2618] in BarnOwl Developers
Re: BarnOwl Twitter support is temporarily broken because Twitter is dicks.
daemon@ATHENA.MIT.EDU (Nelson Elhage)
Fri Sep 10 22:42:59 2010
From: Nelson Elhage <nelhage@nelhage.com>
To: barnowl-users@mit.edu
In-Reply-To: <87hbi8t405.fsf@mit.edu>
Date: Fri, 10 Sep 2010 22:42:55 -0400
The Twitter.par in ~nelhage/Public/BarnOwl should work again, by
impersonating Twitter's Android client. I'm still investigating better
long-term solutions here.
- Nelson
On Thu, 02 Sep 2010 14:05:46 -0400, Nelson Elhage <nelhage@nelhage.com> wrote:
>
> Twitter doesn't ... really support open source clients any more, because
> their engineers don't understand security at all.
>
> I'm going to attempt to figure out a way to let BarnOwl Twitter continue
> working, but I don't have a good workaround right now.
>
> - Nelson
>
> ## Please do not write below this line ##
>
> #1170786 Twitter Support: update on "Notice of Twitter API Keys Posted Publicly"
>
> ----------------------------------------------
> Ekdromos, Sep 02 10:30 am (PDT):
>
> Hello,
>
> It has recently come to our attention that an application registered to you, BarnOwl, has had its Consumer Secret and Key pair posted publicly online here: http://github.com/nelhage/barnowl-twitter/tree/1eafdfaa641575186dfaf8f9310b6105b08f8d92
>
> If an application's keys are posted publicly, it allows for external parties to hijack the application's API access and interact with the API on behalf of every user who has authorized that application. This presents an enormous abuse risk, and as such we've reset your API keys and ask that in the future you ensure these are not posted publicly. Moreover we've been forced to revoke the xAuth access your application was given in order to protect the integrity of the accounts that had authorized the use of your application.
>
> You can respond to this message by replying from the address this email was sent to. If you respond from a different forwarding address or email alias (i.e. username+alias@gmail.com) your email will not be seen by our support staff.
>
> If you have a Twitter account associated with this email address, you can also update and review this ticket online by clicking the ticket link above.
>
> Thanks,
> Twitter API Policy
>
>
> --------------------------------
> This email is a service from Twitter SupportNon-text part: text/html
