tag:blogger.com,1999:blog-8353696605063426251.post5051417474921692770..comments2023-09-23T10:44:35.234+03:00Comments on Techy Title Here: Botamba Owns Your Twitter AccountMBHhttp://www.blogger.com/profile/07293824491909131393noreply@blogger.comBlogger14125tag:blogger.com,1999:blog-8353696605063426251.post-18538039591532892912011-10-05T21:02:15.693+03:002011-10-05T21:02:15.693+03:00:):)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-90923057378185653692011-10-05T16:33:14.284+03:002011-10-05T16:33:14.284+03:00Quoting you: "The read access is OK because i...Quoting you: "The read access is OK because it does not give botamba more permission than what is already available (Public timeline and followers). And if the account is a private then the user would not want it to be mentioned next to his/her posts on twitter."<br /><br />This is a very valid assumption & thinking :)<br /><br />Thank you for responding and taking proper action into preserving the privacy of the users!MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-75930972362368551182011-10-05T12:24:47.545+03:002011-10-05T12:24:47.545+03:00I think it is easier to just let the user log to h...I think it is easier to just let the user log to his/her account instead of asking the user to send a message or status update. Since the user might already be logged and its a matter of one click to approve the access. The read access is OK because it does not give botamba more permission than what is already available (Public timeline and followers). And if the account is a private then the user would not want it to be mentioned next to his/her posts on twitter.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-56916265240579729262011-10-05T12:02:00.784+03:002011-10-05T12:02:00.784+03:00I have, and what I don't understand is why you...I have, and what I don't understand is why you want access to the account itself.<br /><br />You said that you wanted to verify that the user is the actual owner of the Twitter account, correct?<br />I explained that you could achieve that without access to the user's account.<br /><br />Quoting my previous comment:<br />"Why not generate an "activation code" and have the user message it to your Twitter account from theirs instead?<br /><br />This way you won't need access to their accounts, you won't need to follow each other.<br /><br />Owners of private accounts can switch to public, message you, then switch to private, or add you as a follower.<br /><br />This also saves you the headache of keeping Twitter's authentication up to date, as they do change their auth methods once in a while."MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-77942536708351289682011-10-05T11:51:06.922+03:002011-10-05T11:51:06.922+03:00Have you tried the twitter API?Have you tried the twitter API?Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-86331954366607479282011-10-04T21:22:33.856+03:002011-10-04T21:22:33.856+03:00Botamba,
Great work! but I still see that you req...<b>Botamba</b>,<br /><br />Great work! but I still see that you require authorization to the Twitter account.<br /><br />Why would you even need read access from the timeline?MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-87109251368850551372011-10-04T18:26:36.396+03:002011-10-04T18:26:36.396+03:00The new authentication system is live. Why don'...The new authentication system is live. Why don't you give it a try :)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-31273919305184936492011-09-30T21:32:30.347+03:002011-09-30T21:32:30.347+03:00Botamba,
I forgot to add that using the verificati...<b>Botamba</b>,<br />I forgot to add that using the verification code method, users would be able to add & verify multiple Twitter accounts, too!<br /><br />Maybe then you could have an option for them to choose which one to mention by default.MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-3024849867768856792011-09-30T21:31:03.432+03:002011-09-30T21:31:03.432+03:00Botamba, Now I understand your reason behind this,...<b>Botamba</b>, Now I understand your reason behind this, but you've invaded people's privacy for that process.<br /><br />Why not generate an "activation code" and have the user message it to your Twitter account from theirs instead?<br /><br />This way you won't need access to their accounts, you won't need to follow each other.<br /><br />Owners of private accounts can switch to public, message you, then switch to private, or add you as a follower.<br /><br />This also saves you the headache of keeping Twitter's authentication up to date, as they do change their auth methods once in a while.MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-35689056795043816392011-09-30T21:21:21.577+03:002011-09-30T21:21:21.577+03:00When I tweet a blog post I have the option to ment...When I tweet a blog post I have the option to mention the blog owner's twitter account. I didn't want users to give me false twitter names, so I used twitters authentication to add the name to the blog. (As a verification) also, I thought of integrating twitter's services in botamba but didn't yet.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-56422689027846984082011-09-30T02:12:02.047+03:002011-09-30T02:12:02.047+03:00Botamba,
When you say users wanted to use Botamba ...<b>Botamba</b>,<br />When you say users wanted to use Botamba Twitter service, how did they want to use it? Did they expect Botamba to retweet their posts?<br />If that's the case, then you could RT whatever you want using your account by only reading their blog feeds. You don't need access to their Twitter accounts!<br /><br />I still don't see why you need authorization to their Twitter accounts.MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-68834564302105502742011-09-27T21:35:36.034+03:002011-09-27T21:35:36.034+03:00The site was running on Windows Server using ASP ....The site was running on Windows Server using ASP .NET. Now it is running on linux server on django. (I had to remake the whole site). I used twitter oauth because many people wanted to use the botamba twitter service (tweeting posts on twitter) but there was no automated way to add the twitter users in the old site and with the manual way I could not verify that the twitter account belongs to the user. But it passed my mind that some people don't want to use twitter or have concern about their privacy.<br /><br />I will make sure to have read only access in the next version. I am already done with the function that links a twitter account to the user's account. And users will be able to add/remove many twitter accounts (And revoking the access will not change anything)<br /><br />Oh, and the next version will have arabic localization :)Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-87404211288633120592011-09-27T13:15:45.825+03:002011-09-27T13:15:45.825+03:00Botamba,
Thanks for replying.
From this post, I s...<b>Botamba</b>,<br />Thanks for replying.<br /><br /><a href="http://hishersq8.com/2010/02/botamaba-new-update/" rel="nofollow">From this post</a>, I see that you did have user based authentication in 2010 before using Twitter. So why did you change it?<br /><br />You could have simply provided a plugin to allow users to link their twitter account to their user, if they wanted. (even if they linked it in that case, your app would still be able to access their timelines).<br /><br />If you don't have everyone's emails, you'll have to force them to re-register, because the Twitter API doesn't provide you with their email.MBHhttps://www.blogger.com/profile/07293824491909131393noreply@blogger.comtag:blogger.com,1999:blog-8353696605063426251.post-72984791118091920402011-09-27T00:38:06.421+03:002011-09-27T00:38:06.421+03:00Thank you for contacting me and telling me about t...Thank you for contacting me and telling me about the post. You are absolutely correct on the above except that we don't sell or even give anyone any information related to the users.<br />When I started the twitter authentication I thought I could make a small twitter client inside botamba that a logged in user can use to send tweets. But I didn't start developing. Then I realized that the whole twitter authentication was a mistake. People were confused and some didn't want to add their twitter information.<br />I have worked for over a month to implement botamba's own user authentication system which took too long because it consists of all the authentication stuff that was handled by twitter. such as login, change password, sign up, ...etc.<br />I will release the new version soon but unfortunately that means removing all the user base (if you have any suggestion on how to convert the twitter users to botamba's users I will be glad to listen).<br />You can also revoke the access from botamba by removing it from the applications section on twitter but then you will not be able to log on botamba again.Anonymousnoreply@blogger.com