January 16th, 2010
I've noticed a lot of Facebook privacy creep recently. I intend to go into more detail in my next post, but this week saw a new Facebook feature worth a special mention because some are commenting that it breaks Facebook's privacy model. I ran my own test to see for myself that [-Spoiler warning-] it does a bit, but not as much as you might have feared. Read on and decide for yourself whether they are breaking their privacy assurances.
Tags: facebook, privacy
2 Comments »
December 21st, 2009
Well I did buy it in 1992, or rather I bought the album; but in 2009 I did not buy it as part of the ratm4xmas campaign to keep Joe McElderry (read: Simon Cowell) from the UK Christmas No.1 spot. Here's why …
Read the rest of this entry »
Tags: music, ratm4xmas, social media protest
12 Comments »
November 29th, 2009
I woke up this morning to the apparent viral spread of the TweetCloud app that unoriginally, but very nicely displays your most tweeted words of the year, or month, or .. you get the idea. Here's mine ->
Read the rest of this entry »
Tags: OAuth, spam, twitter, viral
2 Comments »
November 14th, 2009
After nearly two years I've finally gotten around to releasing my PHP JavaScript parser, although documentation is still thin on the ground.
The library has been split in two:
- jTokenizer – A JavaScript tokenizer designed to mimic the PHP tokenizer.
- jParser - The fully blown JavaScript syntactical parser which generates a parse tree.
Read the rest of this entry »
Tags: JavaScript, jParser, parsing, php, rainy day
4 Comments »
October 18th, 2009
- or – "Confessions of a Google Wave N00b"
After scrounging myself a B-list Google Wave preview, I've been playing around with it for a week or so. Rather than read more and think deeply about it, I thought I'd blurt out my half-formed opinions now. In fact, this is one of those posts I'll probably regret in a year's time. It might look as naive as some of my early thoughts on Twitter when I didn't quite get it, but that's blogging for you… so here goes.
Tags: google, google wave, realtime web
4 Comments »
October 14th, 2009
Two things happened today that inspired me to write this post tonight.
- A brief back-and-forth on Twitter with @kaigani where I outlandishly claimed that Facebook Connect is a phishing scam waiting to happen
- The warning of another Twitter scam that typically exploits the layman's inability to spot a fake URL.
Facebook and Twitter both offer authentication services arguably known as "single sign-on". Facebook Connect is a proprietary system, and Twitter offers a system based on the OAuth standard. These services do something quite marvellous – They allow you to authenticate with a another website without the third party ever seeing your password. What's makes it even more handy is that you're probably already signed in to these popular services, so you may not need to enter your password at all. The problem is when you do.
Read the rest of this entry »
Tags: facebook, OAuth, phishing, twitter
No Comments »
September 19th, 2009
Last week a another change to Twitter caused me problems with my personal project TwitBlock. For the impatient, see my Google groups post about it. (It didn't go down very well).
If you're a Twitter user, you're probably familiar with this image:

It is/was the default profile image for users that have not uploaded a custom avatar. You may also have noticed last week that Twitter has introduced a new version. Actually they they made seven of them in different colours:

At least I think they made seven; I can't find any more, but I can't find any official document stating how many are out there either.
Read the rest of this entry »
Tags: rant, twitblock, twitter
8 Comments »
August 29th, 2009
There is a kind of spambot that I call a Sleeper. It poses as a legitimate account by "stealing" arbitrary tweets from the public timeline and tweeting them as its own. As it follows people, a proportion will follow back. Eventually this account will have built a matureĀ following and can "wake up". i.e. it can start tweeting its cargo and even send DMs.
These bots are usually easy to spot because their tweets all show as being "From API", meaning that the update wasn't sent by a registered app using OAuth. If I was a spammer, I'd be wanting to fix that because it's a dead give away. I've also seen other services such as HelloTxt being used by these bots, but just now I spotted something new. – Tweets from Tweetie.
Read the rest of this entry »
5 Comments »
August 28th, 2009
I just installed the WPTouch WordPress plugin which gives iPhone and Android visitors a tailored mobile UI.
It' s great, here's a pic of the iPhone interface (courtesy of @pepijndevos)
Read the rest of this entry »
Tags: android, iphone, mobile, wordpress
No Comments »
August 24th, 2009
I made a major change to TwitBlock the other night. The change was made to protect people who are heavily blocked, but are not "spam". Of course that depends on your definition. (A topic for another day)
Originally each block on account would yield 10 points. Then I became aware of just how murky this issue is. Barack Obama is blocked by many accounts (Republicans no doubt) plus some people with extreme right wing views were being blocked heavily. Then the complaints started. People whose businesses survive on a huge Twitter following accused me of destroying their reputations, and generating further blocks on their account by showing the number of existing blocks.
So now two things have changed for the time being:
1. Clicks on "not spam" are deducted from blocks;
2. Blocks are diluted by the size of a user's following. 10 points are added for every 1%. So, if you're blocked by 40 people, but are followed by 8,000 this will only yield 5 points.
Although this has stemmed the complaints, the scanner is less aggressive and lots of real spam accounts are not showing up with high enough scores. I am struggling to find the balance in the face of all of this and may have to tweak it again.
Tags: blocking, twitblock, twitter
6 Comments »