Re:Twitter starts to require login to view tweets
by dhosek on Tuesday August 24, 2021 @11:49AM
(#28290432)
One option would be to just allow people to view public tweets without requiring sign in.
Re:Twitter starts to require login to view tweets
by rkeene2 on Tuesday August 24, 2021 @11:58AM
(#28290564)
It doesn't achieve the stated goal of rate-limiting individual people, which sounds like an instrumental goal for an actual (unstated) business objective.
Re:Twitter starts to require login to view tweets
by IX-103 on Tuesday August 24, 2021 @12:35PM
(#28291167)
Currently federated identity providers do not provide a separate identity to each site you are authenticated on. At that point any collaborating sites can pull together all the information you give to any one of them. Hell, in most cases your "identity" is your email address, so every site you authenticate with can spam you directly.
"Trust tokens" was built to deal with these issues just for this use case: https://developer.chrome.com/docs/privacy-sandbox/trust-toke...
Re:Twitter starts to require login to view tweets
by nick__m on Tuesday August 24, 2021 @12:53PM
(#28291508)
The Shibboleth Idp also support per SP opaque nameID but nobody like SAML based protocol and as far as I know outside the academical identity federations, no one deploys Shibboleth ...
Re:Twitter starts to require login to view tweets
by rkeene2 on Tuesday August 24, 2021 @12:55PM
(#28291551)
Shibboleth is terrible -- so terrible it was easier for me to write my own SAML IdP from the specification than try to make it useful. Lots of people use Active Directory Federated Services (ADFS), which has a SAML IdP.
Another option might be to rate-limit by things which don't require accounts, which won't strictly rate-limit individuals, but it's unlikely that's the terminal goal here. It's not actually clear what they are trying to accomplish. Reducing the amount of resources wasted on scraping bots ?