Play PackRat on Facebook: our feverishly addictive new game

IconBuffet API

Is there any sort of API for Icon buffet?

Here is what I'd like to see (I know...you're busy...but):
1) An API...something simple. Just a web service that allows you to send a username/password and receive your stats (points, number of tokens, number of stamps)
2) The ability to have off-site Avatars (allow me to set my avatar to: mysite.com/path/to/my_avatar.php).

This way, I could have an auto-updating avatar that showed how many tokens or stamps I had, without having to manually change it (which I'm too lazy to do).

If this is already possible, let me know, and I'll just make the script to generate my avatar.

Posted by aaroncampbell on Apr 13, 2007 in Blab | 25 comments

Jen on Apr 13, 2007

Your profile page makes most of this possible. (getting your stats and updating your avatar.)

Why not just visit the Iconbuffet?

tamashii on Apr 13, 2007

I think what he’s trying to say is, that with an API, he could automate some of the things he does often without having to necessarily do those things manually through the interface provided here. In addition, he could obtain information that we are otherwise not able to see (like how many stamps are in circulation and such).

The problem with that is - if you can do it for yourself, you are likely to be able to do it for others without needing to be logged into their account. Want to know how many tokens UserX has, run the script on the user name and Presto! I could be completely mistaken, I usually am, but I see a lot of things being exploited in this manner.

aaroncampbell on Apr 13, 2007

No, You would still need a valid username/password (just like you do now). Even without the API, I could harvest the data I need from my profile page with a curl request, but I still need the ability to have an off-site avatar in order to have it update real-time with what I have.

Sly on Apr 13, 2007

This has been discussed before with the Chefs and I think there maybe something in the pipeline that is similar/related to what you are on about.

Nokiko on Apr 19, 2007

yeah with a serious API we didnt have to login to the webpage each timebut ill just make a small app that allows people to send icons to others without going into thsi site and dont have to ear a boss behind you :):)

whoisgregg on Apr 19, 2007

Actually, you could write a script that uploads an updated avatar file with curl. ;)

While an offsite avatar link would save IB the bandwidth and CPU usage of having automated programs uploading new avatars all the time, it could result in a poorer user experience. (Broken images, slow external sites, obnoxious/inappropriate images, hosting site "you've used up your bandwidth" avatars, etc.)

Also, although this is a minor issue, there have been some security issues in the past involving image files. I expect that when an IB user uploads an avatar there is a server process that "validates" the image. Offsite images could possibly expose IB users to files that would put their computers at risk.

X on Apr 26, 2007

I would love to see the IB API go live. Us developers would have a field day. ;)

electricnet Vip-micro on Apr 26, 2007

Yep, an IconBuffet API would definitely be awesome.

grantneufeld Vip-micro on Apr 26, 2007

Another vote for “IB API would be cool”. I’ll also echo the concerns about externally hosted avatars—there are security/privacy risks with that approach.

I suggest that the ability to post an avatar through the IB API would be a good approach to meet what is being asked for in avatar flexibility.

ajax on Apr 27, 2007

Definitely a cool idea!

soprano on Apr 27, 2007

yeah!

matthew on Jun 26, 2007

Come on chefs! Now we've got the IB Widget, give us the killer API that we're all waiting for! ;)

matthew on Jun 26, 2007

Hey folks, why not join the 'IB API' clan to register your interest...

Esherido on Jun 26, 2007

I would like an API too, and an ability to have offsite avatars would be nice.

grantneufeld Vip-micro on Jun 26, 2007

I am against any offsite elements being allowed in the profiles or anywhere else. It creates unnecessary security vulnerabilities.

If anyone can arbitrarily include an offsite element (such as a picture for an avatar, or include remote pictures in board posts) they can do at least a couple of things:
• Use a deliberately broken image which can cause certain older (& vulnerable) web browsers to crash.
• Use the accessing of that file by IconBuffet users to track those users (a violation of privacy).

aaroncampbell on Jun 26, 2007

Looks like there are 4 of us in there now...not nearly enough, since there are probably in excess of 100,000 users :|

aaroncampbell on Jun 26, 2007

However, it can also be used for plenty of good reasons, and if implemented properly It can mitigate any problems. For example, my leaderboard, clan standings, Stamps Calculators, etc would all be more accurate, simpler, and could be turned into widgets/plugins for a person to add to their blog, Google homepage, etc. As is, the scripts are rather intensive on IconBuffet, so I can't in good conscience pass them around. Code like that isn't dangerous, because anyone that wants to add it to their page could check the source code first.

Also, you can't really track users by their avatar. I suppose you could see what threads they posted in, but you get a hit on the avatar every time it's viewed by ANYONE, not just that person.

grantneufeld Vip-micro on Jun 26, 2007

I’m all for an API and have some thoughts on tools I could build if there was one. I’m just opposed to allowing offsite images (or other elements) to be embedded here (such as allowing offsite avatars).

matthew on Jun 26, 2007

IB API clan. 5 Members and counting!

Avatar-default-large

x5perte on Jun 27, 2007

Joined IB API with the goal to implement a Firefox a/o IE AddOn.

cartuning on Jun 28, 2007

Hi there, it would be nice if the actual tokens, stamps and refill date would be displayed. Not everybody has this in his profile - but trading might change then, when scripts can access the data.
My small IBPoints-Tool will be finished on the WE , unfortunately one can´t get referrals, diamond deliveries and stamps in bank without login, then points could be calculated automatically. This would help much. Cheers!

aaroncampbell on Jul 03, 2007

cartuning: They have stated regularly that stamp count is hidden "by design" and not knowing is part of "the game" as they have created it. I'm not sure what you need to calculate points for, are you talking about calculating possible points? If so, there are web based and Excel based ways to do this that other members have created. If you are trying to calculate points in the wild, those are available too, but you have to log in with your IB username and password.

However, my vote is still behind getting an API

Nokiko on Jul 03, 2007

Yeah if we canget a nice api we could start to make some very cool apps using Adobe AIR or Google Gears

Avatar-default-large

x5perte on Jul 03, 2007

Why waiting for a "full-API", as aaroncampbell (IB Stamps and keegan (OSX-widget) are using what's behind the game.

A bite of code for IE is comming soon.

aaroncampbell on Jul 06, 2007

Some things CAN be done without a "full-API" but it would be considerably better and more accurate if one existed.