Comments on: Warning Twitter Users! Do Not Use Twply.com!

By: Brent Billock

Brent Billock — Mon, 19 Jan 2009 16:03:48 +0000

Hey Cliff-

You’re absolutely right that there’s no reason you need to surrender your password for the sake of an emailed reply service.

I’m getting good results from tweetreplies.com, and all they asked for was Twitter username, and the email where I wanted replies sent.

Thanks for the warning on Twply.

By: Cliff Ravenscraft

Cliff Ravenscraft — Fri, 02 Jan 2009 18:46:18 +0000

@Amy – Not a bad idea to change those passwords every now and then anyway.. But with the way that Twitter’s API works, it stinks that when you change the password, it breaks about five other useful twitter tools that we do trust.

@JoeLampl & @John – It’s an easy one to fall for. Hopefully some other method of verification can be worked out as mentioned by @RyanPrice above.

@RyanPrice & @R. Alexander Spoerer – I’m totally with you! They need to wake up and smell the coffee!

@KimFenolio – Thanks for the info on another possible service!

By: Kim Fenolio

Kim Fenolio — Fri, 02 Jan 2009 18:38:49 +0000

Cliff, many Twitter 3rd party sites use tactics like this. I don’t like it nor will I choose to “support” one that does.

A year or so ago I found a site called http://www.TwitterMail.com/ and they do a fine job of keeping me up on my @replies. It’s not as timely as I’d like, but I tend not to miss anything this way. It emails me a daily summary of those who @kFenolio me with the full tweet and other person’s username.

By: R. Alexander Spoerer

R. Alexander Spoerer — Fri, 02 Jan 2009 16:50:42 +0000

This is ridiculous. When will Twitter close these holes and either add some of these features in or provide a way for 3rd party services to interact with Twitter without having to give our user name and password?

By: Ryan Price

Ryan Price — Fri, 02 Jan 2009 14:58:11 +0000

What you’ve really uncovered here is a fundamental problem with twitter. By failing to support authentication methods like OAuth (works a lot like the Flickr authentication for 3rd party services, or FireEagle if you’re familiar with that), Twitter forces all these sites to gather usernames and passwords, and leaves holes open for the bad guys or people who just want to spam your friends. Several twitter sites I’ve seen recently all have that “support X” feature.

Any site you give your username and password to has full permission to do whatever they want – including change your password. Don’t give out your password to anyone – anywhere – ever. It’s that simple.

By: John

John — Fri, 02 Jan 2009 14:23:14 +0000

Thanks Cliff! I would of probably used this service had you not warned me. I love twitter applications like tweetlater.com

By: Joe Lamp'l

Joe Lamp'l — Fri, 02 Jan 2009 13:09:32 +0000

What a great heads-up Cliff. Thanks so much for bringing this to our attention. I for one might have taken the bait had it not been for your timely advice! Keep up the great work!

By: Amy

Amy — Fri, 02 Jan 2009 11:55:21 +0000

Thank you Cliff! I have changed my password immediately!