n0where

GET /v1/checkins?geohacc=10000.0 HTTP/1.1
User-Agent: com.joelapenna.foursquared 2010011401
Host: api.foursquare.com
Connection: Keep-Alive
Authorization: Basic [REDACTED]

Totally unnecessary. I don’t care if it is going over the wireless carrier’s network — it’s poor practice. Oh right, it also goes over WiFi when enabled. “Awesome.”

Update [201001312024]: Opened an issue at the foursquared Google Code page — http://code.google.com/p/foursquared/issues/detail?id=163

It also occurs to me there’s a bit of lol-arity in the Foursquare API docs:

For most methods, we require either Basic Authentication or OAuth Authentication. OAuth is the method we prefer you use so that clients do not have to hang on to usernames and passwords but can initiate requests on a user’s behalf via a special token.

Rich Mogull (@rmogull) - Audacious, long-winded, and startlingly brainy, this fellar dropped his pants at DEFCON just to…uh…you know, I don’t even remember why he dropped his pants, but damned if that doesn’t get ‘em some recognition (bonus: he seems to know a thing or two about “sekuritee”). Chris Hoff frequently refers to Rich as “brother from another mother”, but some of us suspect these two are actually the prototypes from a secret experiment, designed to create the ultimate cynics, funded by the governments of New Zealand and the Republic of Uzbekistan. HERE’S TO YOU, RICH!