Chad (disclaimer: I work for Balanced https://www.balancedpayments.com/ and we handle the payment processing for gittip. I mainly focus on fraud). It's wonderful you are doing this. It enable forms of donation other than via github. Not sure, what information you collect via twitter login, but I would watch out for:
1. Twitter account creation date
2. Number of followers/following
3. Location information (if available)
4. # of tweets
Esp. (1) and (2) would be very useful.
When I last analyzed the github accounts, almost all fraudsters had relatively recent github accounts and (unsurprisingly) zero/almost zero followers for their repos. As with most things related to fraud, these do not guarantee fraud protection, but serve as very strong signals.
Thanks npcomplete. With the current volume of growth I'm able to keep up with Gittip's fraud review dashboard pretty easily. As we scale let's start looking at more signals in an automated fashion.
The long-term vision is for Gittip to be general-purpose. Of course, with only a few hundred active users, Gittip has barely scratched the surface of the open source world, and it's possible that now wasn't the ideal time to cast the net wider. I committed Gittip to Twitter support when I threw together a half-baked implementation ahead of the XOXO festival a few months ago. Then I got side-tracked by fraud and other things and just now was able to really land this. For better or for worse, it's there now.
The next big feature is non-U.S. payouts. That's becoming a critical problem, because it means that Gittip is stuck holding money that belongs to other people. My goal is to solve that in the coming months, and then we'll be in a much better position to aggressively pursue growth. Where to focus those efforts in terms of communities will be part of the discussion.
I still think the brand around "tipping" can be preserved. I'd love to be able to use gittip to pay the guy who sings and plays guitar at my subway station every morning. But yes, twitter integration moves this away from devs only.
We decided (in part) that "gittip" doesn't mean anything at all to non-geeks. "All names are stupid until you become rich and famous with it." http://barry.warsaw.us/software/laws.html
We'll reopen the name discussion when either GitHub or Oprah complains.
However, the primary distinctive is that Gittip is funded on itself, whereas Flattr is for-profit and takes a hefty cut. I don't see that gap closing anytime soon.
1. Twitter account creation date 2. Number of followers/following 3. Location information (if available) 4. # of tweets
Esp. (1) and (2) would be very useful. When I last analyzed the github accounts, almost all fraudsters had relatively recent github accounts and (unsurprisingly) zero/almost zero followers for their repos. As with most things related to fraud, these do not guarantee fraud protection, but serve as very strong signals.