full disclosure: scraping fleets from public accounts without triggering the read notification

the endpoint is: api.twitter.com/fleets/v1/user…
for auth you just use the same leaked consumer keys from official twitter app that lets you use firehose for free: gist.github.com/shobotch/51600…

ddg api.twitter.com/auth/1/xauth_p… for how to get a token
doing this or viewing the actual fleet via "media_url_https" does not trigger the read notification.

there is a separate endpoint "/fleets/v1/mark_read" for marking things as read, but it appears to be optional :^)
(instagram does this in a smart way and will only let you prefetch two images without marking one as read before locking you out)
brought to you by the cult of the beyond meat cow

hi @jack hi @dotMudge
i don't have a soundcloud.

protect trans kids: akt.org.uk/donate
to anyone still confused by what a "fleet" is and what the implications of this are.

they're supposed to self-destruct after 24h. this lets you archive them without the other person even knowing you've viewed it.
actually you don't even need to be logged in
i have also just confirmed that the media URLs don't expire after 24h, so you can view fleets after they're deleted
Source code for my WIP scraper: hastebin.net/yjyhecoceg.rs

I took down the public instance since you need to be logged in to fetch a list of fleets for a user now. It still doesn't mark them as read.
I'm not going to continue working on it, I've proven my point already.

Don't market your new feature on a higher expectation of privacy, if you can't deliver it.
All logs/data collected deleted.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with cathode gay tube

cathode gay tube Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @donk_enby

20 Nov
The US has just passed a new extraterritorial anti-doping law - the Rodchekov act
If you unknowingly give modafinil to someone who's a professional athlete, who then tests positive in an international competition, US can try to extradite and prosecute you. You face 10 years in prison and a $250k fine.
Even if it happened outside the US and none of the people involved were American. But the law does specifically exclude American college sport leagues :^)
Read 5 tweets
18 Nov
Show HN: Homelab – self-hosted website about my Homelab
14 points by ashitlerferad 3 hours ago | hide | 2 comments
"I'm gonna get a rack-mountable power strip, UPS and switch, then plug my raspberry pi and non-rackable Lenovo ThinkCenters into it"
I mean, it does look better than my old homelab, which was 2 HP DL180 G6s and a bunch of Meraki gear running under my bed
Read 4 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!