Hello everyone! This is the new official account of the Debirdify app. It helps you finds out which of the people you follow on Twitter are on Mastodon/in the Fediverse already and follow all of them easily.

Try it: https://pruvisto.org/debirdify

We recommend to keep checking it every few days to see if there are new people.

Debirdify

@debirdify @digitalcourage Is this a fork of #twitodon /what are the differences ? (https://twitodon.com)
Twitodon - Find your Twitter friends on Mastodon

@n3Rdia @debirdify @digitalcourage No, it works in a very different way and is completely unrelated. Twitodon only knows associations of Twitter accounts and Mastodon accounts of people who used Twitodon before, which is, sadly almost no one.

Debirdify instead searches through the profiles of the people you follow for things that look like Mastodon IDs, which, in my opinion, works much better.

A very similar tool is also Fedifinder.

@pruvisto @debirdify @digitalcourage Thanks for clarifying! I was not aware of the difference. Indeed #Debirdify sounds like a good approach!

@pruvisto @n3Rdia @debirdify

Thank you! Any idea of the safety of any of these apps .. feeling traumatized by the last 7 years and afraid to log into anything, hahaha!

#TwitterMigration #TwitterRefugee

@SameGirlie When you authenticate you do so on the Twitter website itself (you can check that by looking in the address bar, it says ‘api.twitter.com’). What happens then is that Twitter creates a kind of one-time password that gets handed to the app, e.g. Debirdify or Fedifinder. Twitter tells you what this one-time password is good for, e.g. Debirdify/Fedifinder request read-only access.

This means that they can use that password to read your tweets, timeline, lists, followers, etc. They cannot read your DMs and they cannot change anything, write tweets in your name, etc. But in principle they *could* look at your private lists, the people you blocked, etc. and save that information somewhere, email it to someone, etc. But that's the worst they could potentially do.

Also note that you can revoke the access immediately after using the app in your Twitter settings.

@SameGirlie Both Debirdify and Fedifinder are open-source software, which means that anyone could potentially look at what they do exactly. Debirdify is very privacy-friendly: it does not save your requests or the results on its server. Even the one-time password is only saved as a cookie on your computer.

Side note: Even though it is open software, there is technically no guarantee that the version that runs on the server actually is the same "harmless" code as the one that is made public. So if you care about the privacy of your private lists, block lists, etc. you do have to trust us at least a little bit.

@SameGirlie I am happy to answer any further questions on privacy/security details.

But the short answer is: We promise to not collect any personal data, and even if you do not trust us the damage we could potentially do is very much limited by the fact that we only ask for read-only Twitter permissions.

@debirdify

Thanks, appreciate the info

Did you find a better server for @debirdify, @pruvisto or is it good enough?
I had no problems, worked well.
https://twitter.com/pruvisto/status/1586747105988812800
Manuel Eberl (@[email protected]) on Twitter

“@Sonstwer Ernsthaft, wenn irgendjemand sich bereit erklärt, das zu hosten, der einen vernünftigen Server hat und Ahnung davon, wie man sowas robust hostet: Gerne! Ich bin Elfenbeinturm-Akademiker und hab keine Ahnung mehr, wie man Software schreibt.”

Twitter
@ChristianKuhn @debirdify Not yet, no. But it seems there are no performance problems so far. Unfortunately the Apache server hangs once a day or so until I restart it by hand. No idea what that is about.
@ChristianKuhn @debirdify I am very much not an ops person. I'm not even a web developer. Actually I hardly do any real-world programming at all.
@ChristianKuhn @debirdify Also I just realised I tooted from my Esperanto account again. I really have to learn to keep my accounts in order... 😅

@debirdify

Debirdify is coming along really beautifully. Thanks for all the hard work on it!

@debirdify Debirdify is great! Thanks so much for it. Suggestion: maybe add a rel link to the site so it shows up as a verified link?
@harris Uh, sure. Do you have a link that explains how to do that?
@debirdify tldr put a link to your mastodon url on the website with <a href=“PROFILEURL” rel=“me”> (for documentation go to edit your profile and scroll down to “verification” and it’ll give you the exact code).
@debirdify
One tool I haven't found is something to scrape and save the profile pages and pinned comments of the people I follow. There are links and other things it would be nice to have if the fail whale returns. Do you know of anything that does that?
@rszasz No, and I have to say I would consider that a bit out of scope for Debirdify (although it should not be hard to do). Sorry.
@debirdify Thanks for setting up debirdify! Just one potential bug: it doesn't seem to follow webfinger redirects. So my account `[email protected]` should connect to `amok.recoil.org` as the server that hosts it (but debirdify is trying to connect to recoil.org directly, which has a webfinger pointer in place)

@avsm It does follow redirects. But:

manuel@daedalus ~> curl -I "https://recoil.org/.well-known/webfinger?acct:[email protected]"
HTTP/2 404
alt-svc: h3=":443"; ma=2592000
server: Caddy
date: Mon, 07 Nov 2022 10:45:10 GMT

@debirdify aha! Thanks for checking -- I've only set up a .well-known/host-meta redirect. Looks like the newer method is to directly set up the webfinger endpoint.
@avsm Ah, I've never heard of a host-meta redirect. If you explain what that is and how it works I can maybe add support for it.
@debirdify I had to peer at the Mastodon source to see what's going on: the host-meta is queried first, and it contains a webfinger URI template which is then used. This makes it more compatible with Tor and other networks I think. https://github.com/mastodon/mastodon/blob/main/app/lib/webfinger.rb
@debirdify and just found this documentation (on a fork of Mastodon's own docs) which seems to agree https://github.com/felx/mastodon-documentation/blob/master/Running-Mastodon/Serving_a_different_domain.md#webfinger

@avsm That's helpful, thanks. I will implement that soon.

I was trying to find documentation on all of this but couldn't find any, so I just looked at some examples and tried to figure it out by myself.

This might also affect #Fedifinder, so, tagging @Luca

@debirdify @Luca yeah the info is in RFCs (webfinger RFC7033 and host-meta RFC6415) but it's difficult to figure out what's actually used in the wild and how they all tie together. Definitely worth a post once you get it all working to point people to best current practises
@avsm @[email protected] Thanks.l I hoped to get away with only checking the domains instead of looking for webfingers. New plan is to check the domain and if it fails, look for webfingers.
@debirdify small feedback: the CSV of blocked accounts is still named "following_accounts.csv" 😅 bit of a footgun there.
@flameeyes Oops, yes. If you have a Github account, please file an issue there so that I don't forget to fix this.
@debirdify will do! (Might try to send a pull request if I have the time.) I noticed yesterday at the airport, haven't had time to sit down with it yet!
@flameeyes Pull request would be awesome. But just issue is fine, too.

@debirdify hey I tend to use lists on twitter rather than following.

Is there anyway to use your site to get the ids of people I have on lists but don't follow?

@debirdify I tried it and it is excellent! Sensible suggestion to try again in a few days because I don’t know how fast people are moving across. #Debirdify
@debirdify
@Dilpickle1
Dilpickle this may also help
@debirdify @Jessicadscott09 This should help you find Twitter friends. I haven't tried it yet, so I can't verify its usefulness.
@debirdify Not sure if it's me or something wrong with the site but I keep getting "This site can't be reached"

@jonenge Yeah the Apache Webserver froze again. No idea what causes this. Pretty sure it's not load. This just happens every 1–2 weeks.

Fixed now (by restarting the webserver).

@debirdify It looks like the site isn't working anymore. Twitter is fighting back!

@walid Odd. Does this happen every time? Have you tried other browsers? Or private mode? (Switching off browser extensions etc)

There have been a number of cases where browser extensions, especially ad blockers, interfered with the Twitter authentication.

@walid I just tried it and it works for me. So I suspect the problem you experienced is either a temporary Twitter problem or some problem on your end (e.g. browser extensions).

I do not expect Twitter to be petty enough to go after small fry like #Debirdify. It's a small site of little consequence and I very much doubt we're on anyone's radar.

@debirdify when I try it it opens a Zoom meeting! ❓❓❓
@Xtina042 That's… odd. I have no idea what could possibly cause that. Some weird browser extension, perhaps?
@Xtina042 @debirdify I’ve got the same problem here (opened it via Metatext on an iPhone). Looks like this. Any ideas what to change?
@debirdify I had a go with your app- but it says error and that I clicked on too many things- will it be something to try again on a different day? I wasn't really sure what I was doing? Kate :)

@KateCushing If it's the rate limit error you got, that normally only happens if you repeatedly search your followers (and if you also have a lot of them).

The limit resets after at most 15 minutes.

@KateCushing Please just click the button once and then wait. You do have a lot of followers, so it might well take a while (perhaps even a full minute) before you get the results.
@debirdify Thank you- I’m a bit of a technophobe & cognitive issues with concentration & attention since unwell- so when something doesn’t work- I tend to think it’s something I’ve nit done correctly! 😊