Browse Source

add info about restriction from twitter dev terms

Carsten Porth 5 years ago
parent
commit
da1e9795bd
2 changed files with 8 additions and 1 deletions
  1. 7 0
      thesis/bib/bibliography.bib
  2. 1 1
      thesis/content/06-discussion/threat-model.tex

+ 7 - 0
thesis/bib/bibliography.bib

@@ -481,4 +481,11 @@
   note         = {Online, accessed 22.03.2019},
 }
 
+@Misc{twitterXXXXdev-terms,
+  author       = {Twitter},
+  title        = {{Developer terms - More about restricted uses of the Twitter APIs.}},
+  howpublished = {\url{https://developer.twitter.com/en/developer-terms/more-on-restricted-use-cases}},
+  note         = {Online, accessed 22.03.2019},
+}
+
 @Comment{jabref-meta: databaseType:bibtex;}

+ 1 - 1
thesis/content/06-discussion/threat-model.tex

@@ -6,7 +6,7 @@ Hybrid \ac{OSN} users can be easily identified by the service provider Twitter,
 
 For using the Twitter \ac{API}, it is essential to register an app to get an app token. This app token is attached to all requests sent to the Twitter API. When logging in on Hybrid \ac{OSN} for the first time, the user accepts to use the app to access Twitter.
 
-So far not implemented, but theoretically possible is that each user creates an app for the use of the \ac{API} on their own. The obtained app token could then be stored in the Hybrid \ac{OSN} app, and the use of the application could be obscured. In this case, the identification possibility via the Hybrid \ac{OSN} app token is omitted, and the passive use would be possible without danger.
+So far not implemented, but theoretically possible is that each user creates an app for the use of the \ac{API} on their own. The obtained app token could then be stored in the Hybrid \ac{OSN} app, and the use of the application could be obscured. In this case, the identification possibility via the Hybrid \ac{OSN} app token is omitted, and the passive use would be possible without danger. However, the Twitter developer terms forbid the use of multiple applications for a single use case \cite{twitterXXXXdev-terms}. This restriction is primary for a single developer trying to bypass the request limits. It has to be further evaluated if this rule also applies to multiple developers with only one application each.
 
 Active use requires a public tweet and a reference in the profile description for the distribution of the public key history. Although the contents are inconspicuous, they are still sufficient for the identification of a Hybrid \ac{OSN} user.