221–230 of 643 posts
Earlier quoted context omitted.
Which is not reassuring considering their past abuse of phone numbers provided for allegedly only security reasons. [0] [0] https://www.eff.org/deeplinks/2019/10/twitter-uninentionally...
It's worse: Twitter staff sold private user PII to the Saudi government (the one that assassinates journalists): https://www.buzzfeednews.com/article/alexkantrowitz/how-saud...
Earlier quoted context omitted.
I mean what do you want them to actually do instead? Like seriously I’ve implemented at a company I worked for and it’s the least invasive thing to actually rate limit people. Alternatives included: - pay a small fee but that requires a credit card - send us government documents which is worse - mine crypto for a while but it doesn’t stop people who are actually motivated - send a selfie and then do some face matchin…
One option might be to allow people to view tweets if they have accounts from reputable federated identity providers, then you have an identity of an individual person without having to do the validation yourself. You can then rate-limit based on that individual ID. Another option might be to rate-limit by things which don't require accounts, which won't strictly rate-limit individuals, but it's unlikely that's the t…
"Trust tokens" was built to deal with these issues just for this use case: https://developer.chrome.com/docs/privacy-sandbox/trust-toke...
When Reddit started doing this it effectively broke my redditing habit. I know these things are annoying but for anyone who is trying to use social media less... Twitter, Reddit, and Instagram are almost unusable without their apps. They are basically useless if you dont sign in on the browser on your phone. It's great if you want to get off them.
I almost hesitate to share these because I too found that Reddit's dark patterns were a large part of what helped me break that habit. I recently discovered teddit.net which is a frontend for reddit with all dark patterns removed. There is also an alternative front end for twitter called nitter.net that you can use the same way to avoid the app / login.
Earlier quoted context omitted.
Also Twitter had changed their policy regarding API keys. You no longer just ”get” them. You need to apply. I was rejected for getting key to export my own tweets. Of course, this means everyone is using web scrapers for what was used API keys before, because of you can use public internal API.
I prefer to just steal keys by reverse engineering mobile apps. So easy to get keys for just about anything and charge someone else for it that way.
Earlier quoted context omitted.
It's worse: Twitter staff sold private user PII to the Saudi government (the one that assassinates journalists): https://www.buzzfeednews.com/article/alexkantrowitz/how-saud...
Remind me again, why did we leave IRC?
Earlier quoted context omitted.
It's worse: Twitter staff sold private user PII to the Saudi government (the one that assassinates journalists): https://www.buzzfeednews.com/article/alexkantrowitz/how-saud...
Remind me again, why did we leave IRC?
How does this affect Twitter users that are publishing official tweets, like police departments announcing emergency situations? Am I going to miss a school shooting because I don't have a Twitter account? Some of these accounts have mandated public visibility
I would prefer open and standards-driven information dissemination (ActivityPub, RSS, et cetera) rather than publication into walled-gardens.
call your congress critters and tell them that their publicly funded agencies need to spin up a self-hosted Mastodon/Pleroma/PixelFed/PeerTube (or use WordPress with the AP plugin).
Earlier quoted context omitted.
I prefer to just steal keys by reverse engineering mobile apps. So easy to get keys for just about anything and charge someone else for it that way.
Interesting. As someone who hasn't done any mobile dev at all, is there a way to prevent something like this from happening? Can't you somehow encrypt such secrets in the app?
You can also send requests via your own server, which would allow you more control over the requests that get sent out to your 3rd party APIs and just restrict tokens as much as possible to the minimal set of features necessary for your application.