Twitterank Creator Speaks

Twitterank Creator Speaks

Summary: After my post yesterday afternoon about Twitterank, its creator Ryo Chijiiwa contacted me by email to ask if I'd like to hear his side of the story: I offered him a guest post. Over to Ryo:I blame the Family Guy.

SHARE:

After my post yesterday afternoon about Twitterank, its creator Ryo Chijiiwa contacted me by email to ask if I'd like to hear his side of the story: I offered him a guest post. Over to Ryo:

I blame the Family Guy. There I was in my hotel room, where I'm staying while in NY for business, watching episodes of The Family Guy on my laptop like any other Joe the Coder on a Tuesday night. But then I ran out of episodes. None of this would've happened if there were enough Family Guy episodes to watch on Hulu.

Hi. My name is Ryo, and I'm the developer of Twitterank, which is not some grand scheme to steal thousands of Twitter accounts, but a casual experiment gone horribly horribly right. Here's my side of the story:

With no more tales of Peter and Co. to entertain me, I turned to Twitter. I was browsing through a day's worth of tweets from my friends, when something or another got me thinking about @replies. As many of you are aware, I'm sure, @replies allow users to essentially "send" tweets to other users, which effectively turns Twitter into one giant semi-public conversation. In my head, these @replies started looking like edges in a hidden graph. Hidden, because while you can see @replies directed at you, you can't necessarily see @replies that other people are receiving. Yet, it seemed like this information would reveal quite a bit about the user. Who's talking to them? How often?

That, is the "secwet" behind Twitterank. Similar to how Google's PageRank algorithm judged a web page based on the number of inbound links and the origin of those links, Twitterank attempts to quantify a Twitter user by analyzing their incoming @replies. In essence, the more people talk to you, the higher your score. So yes, the number you'll get may not necessarily reflect the number of followers you have, how often you tweet, or even how big your ego is. That also brings us to passwords. In order to analyze your @replies, I need to make a web service request to Twitter, which requires your user name and password. As I've mentioned in my blog, there are alternative authentication mechanisms out there, but for whatever reason, Twitter hasn't adopted them yet. So I went ahead and hacked together a simple app, which asked for a user name and password. Those of you who used the site early on might've seen a big red box with a rather lengthy warning about how "you should be afraid." That text, which someone later found commented out and then misinterpreted, was there to prompt users to think twice before entering their passwords. If people were turned away by it, that would've been fine by me. Frankly, I only expected a few of my friends to use it.

All in all, from inception to launch, Twitterank took me about 5 hours to build. I finished around 4:30am, posted my Twitterank to Twitter, and went to bed. The next morning, I sent a single tweet to my friends asking them to check out Twitterank, and the beast was unleashed. One hour I had 8 new users. The next hour I had 109. The next 400. Then 1500. Then 2400. All this happened while I was at work, and my primary concern was keeping the site up (my hosting service got overwhelmed, so I eventually switched to a friend's dedicated server). Unfortunately, it wasn't until much later that I fully grasped the extent of the rumors, and was able to begin addressing some of the concerns people had.

That's my story. Who'da thunk a silly idea and a few hours of hacking would turn into... this? But this ain't over yet. As I write this, Twitterank is less than a day old, and there's more work to do. We don't even know if it's any good. This episode also started some conversations about phishing, about authentication, and social behaviors. There are many ways this story can play out, but it's far from over. If you want to talk, I'll be on Twitter.

Topics: Social Enterprise, Security

About

Oliver Marks & Associates provides seasoned, technology agnostic independent consulting guidance to companies on effective Digital Enterprise Transformation business strategy, tactics, infrastructure & technology decisions, roll out and enduring use models and management.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

4 comments
Log in or register to join the discussion
  • Not necessarily ...

    [i]In order to analyze your @replies, I need to make a web service request to Twitter, which requires your user name and password.[/i]

    Uh, not really. You could have used search.twitter.com - except you wouldn't see replies from users with protected timelines.

    This all goes to further highlight why Twitter not implementing either an API key or OAuth is a big disappointment.
    dossy
  • Um, what's a TwitterAnk?

    Must be this: http://twitpic.com/lez1

    My TwitterAnk is still rt/1.4219e+33!

    ;)

    Lyell E. Petersen
    @93octane
    http://twitter.com/93octane
    93octane
  • RE: Twitterank Creator Speaks

    So what makes this more scary than the other Twitter apps that you supply password to?

    Signing up for the web is really fraught with risks that 'password' is really just a key to unlock door, except that the keyhole is some kind of portal where the person/s behind lurking can either be grandma herself or some big bad wolf.

    Best.
    alain
    @friarminor
    Alain_Yap
  • Twitterank Creator answers Questions

    Had a Chat with Ryo (german and english):
    http://www.phishmail.de/2008/11/twitterank-das-interview/
    phishmailde