This community is no longer active.

Please visit www.atebits.com/contact/ for support
or view the archived content.

Get Satisfaction uses Javascript and cookies.

You'll need to enable Javascript and cookies to participate.

Create a new topic

happy

I’m happy

Use https instead of http for twitter.com

Edit Subject

Tweetie communication with twitter.com goes over http instead of https.. Which means the password can easily be hijacked.

81 people have
this problem +1

Solved

Official Response

EMPLOYEE

I’m sorry!

12

Demote

Remove

atebits (Official Rep) April 20, 2009 18:03

1.0.1 is out, fixes this.

Tweetie -> Check for Updates...

Sorry about that - really bad goof on my part.

Create a customer community for your own organization

Plans starting at $19/month

I’m angry

0

Edit

Delete

Remove

Official

Steve Streza April 20, 2009 15:09

This needs to be changed. I use Twitter at work and don't want my password getting sniffed.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

This needs to be changed. I use Twitter at work and don't want my password getting sniffed.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m Disappointed

0

Edit

Delete

Remove

Official

NetworkShadow April 20, 2009 15:11

Please fix, this is very important.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Please fix, this is very important.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m disappointed

0

Edit

Delete

Remove

Official

mkalmes April 20, 2009 15:21

I wouldn't use it w/o https. Please add SSL support.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

I wouldn't use it w/o https. Please add SSL support.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m disappointed

0

Edit

Delete

Remove

Official

elvo86 April 20, 2009 15:24

plaintext password being sent over http? yeah, i don't really like that

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

plaintext password being sent over http? yeah, i don't really like that

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m sad

0

Edit

Delete

Remove

Official

Jeff Adams April 20, 2009 15:41

My company blocks http so I can't even try it if I wanted to. Please add https support. Thanks.

good solution! good solution! (undo)
- view 1 more comment
- ceejayoz April 20, 2009 15:43
  
  Your company blocks HTTP but allows HTTPS?
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Jeff Adams April 20, 2009 15:45
  
  Yes, they do the same with Meebo and Gmail. Strange.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Jeff Adams April 20, 2009 15:46
  
  Clarification, they don't block all http connections just to some specific sites.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

My company blocks http so I can't even try it if I wanted to. Please add https support. Thanks.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m sad

0

Edit

Delete

Remove

Official

Ralph Whitbeck April 20, 2009 15:43

Back to TweetDeck till the next security release.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Back to TweetDeck till the next security release.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
1

Edit

Delete

Remove

Official

Chris Drackett April 20, 2009 16:03

OAuth! ;)

good solution! good solution! (undo)
- view 0 more comments
- Joseph McLaughlin April 20, 2009 17:54
  
  OAuth makes absolutely no sense on a desktop application. I'm sorry.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Pelle Wessman April 20, 2009 17:59
  
  I completely agree - OAuth should be used in this case - it suits desktop apps as well as web apps
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

OAuth! ;)

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m disappointed

0

Edit

Delete

Remove

Official

Jay April 20, 2009 16:32

I do most of my work in a cafe environment, so having any twitter traffic transmitted in the clear is really unacceptable. I'll continue to explore Tweetie for the Mac at home, where I control the network but for the bulk of my time Tweetie won't be usable because of this.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

I do most of my work in a cafe environment, so having any twitter traffic transmitted in the clear is really unacceptable. I'll continue to explore Tweetie for the Mac at home, where I control the network but for the bulk of my time Tweetie won't be usable because of this.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m anxious

0

Edit

Delete

Remove

Official

Sean April 20, 2009 17:04

Agreed this should be a priority fix.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Agreed this should be a priority fix.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m patient

0

Edit

Delete

Remove

Official

Jakob Heuser April 20, 2009 17:18

Definitely in agreement https needs to be used for security reasons. Given the polish the iPhone app got, I'd expect this will be updated soon enough.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Definitely in agreement https needs to be used for security reasons. Given the polish the iPhone app got, I'd expect this will be updated soon enough.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m certain this'll be fixed soon because loren is awesome ;)

0

Edit

Delete

Remove

Official

Clint Ecker April 20, 2009 17:35

Eek. Didn't know about this! Definitely don't like my twitter password's transmitted over non/ssl. I only work not-at-home 1ce a week, but I'm still concerned :)

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Eek. Didn't know about this! Definitely don't like my twitter password's transmitted over non/ssl. I only work not-at-home 1ce a week, but I'm still concerned :)

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m anxious

0

Edit

Delete

Remove

Official

MikeGrace April 20, 2009 17:52

If the password is being passed over plain text this is a major and shocking problem. If OAuth is being used that is a different story. Please make sure our communication is secure.

Comment

good solution! good solution! (undo)
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

If the password is being passed over plain text this is a major and shocking problem. If OAuth is being used that is a different story. Please make sure our communication is secure.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
EMPLOYEE
I’m sorry!

12

Edit

Delete

Remove

Official

atebits (Official Rep) April 20, 2009 18:03

1.0.1 is out, fixes this.

Tweetie -> Check for Updates...

Sorry about that - really bad goof on my part.

good solution! good solution! (undo)
- view 3 more comments
- CK April 20, 2009 18:08
  
  Awesome. Thanks for the quick fix!
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Jakob Heuser April 20, 2009 18:14
  
  Awesome feedback response atebits. Thanks for keeping us updated! I also noticed there's an auto-update added to 1.0.1. Good job on quickly squashing this issue!
  
  Edit
  
  Delete
  
  Remove
- Cancel
- MikeGrace April 20, 2009 18:17
  
  Way to fix that within 12 hours! AMAZING!!!! @atebits Rocks!!!
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Ralph Whitbeck April 20, 2009 18:47
  
  Thanks for being so responsive to this issue.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Jeff Adams April 20, 2009 19:46
  
  Fantastic thanks!
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

1.0.1 is out, fixes this. Tweetie -> Check for Updates... Sorry about that - really bad goof on my part.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m thankful

1

Edit

Delete

Remove

Official

Tony Piper April 20, 2009 18:07

how good is that - atebits fixed it within hours. One more bout of responsiveness like that and I'm going to pay for a license ;)

good solution! good solution! (undo)
- view -1 more comments
- Zack Kitzmiller April 20, 2009 21:44
  
  Agreed.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

how good is that - atebits fixed it within hours. One more bout of responsiveness like that and I'm going to pay for a license ;)

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel
I’m undecided

0

Edit

Delete

Remove

Official

Buran April 20, 2009 18:38

Great, thanks! I can confirm that it does connect to twitter.com on port 443, according to my logs. Is it only using this for initial login purposes, or are all communications with the site via https? I'd prefer the latter -- as much encryption as possible, even for something basic like Twitter.

good solution! good solution! (undo)
- view -1 more comments
- Jeff Adams April 20, 2009 19:44
  
  Using Little Snitch it looks like all traffic use https except for searching and some image storage stuff.
  
  Edit
  
  Delete
  
  Remove
- Cancel
- Cancel
Edit Your Reply (some HTML allowed)
Has the status changed?

Great, thanks! I can confirm that it does connect to twitter.com on port 443, according to my logs. Is it only using this for initial login purposes, or are all communications with the site via https? I'd prefer the latter -- as much encryption as possible, even for something basic like Twitter.

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited
Cancel

Reply to This Topic (some HTML allowed)
Has the status changed?

How does this make you feel? Add Image

I'm
e.g. kidding, amused, unsure, silly sad, anxious, confused, frustrated indifferent, undecided, unconcerned happy, confident, thankful, excited