Today I learned that I'd actually been wrong although all the security glitches and workarounds that I've heard of from looking this up on Google appear to have since been fixed.
According to a 2009 LA Times story Google once (inadvertently) displayed protected tweets and it also seems to have been possible to view protected tweets through RSS feeds (again in 2009 but I think this was fixed back then) and Twitter no longer supports RSS anyway.
To the best of my knowledge it is now not possible to see the tweets of a protected account unless you're following them, or have stolen their password or the password of one of their authorised followers or some other morally and legally iffy technique (bad idea).
If someone doesn't want you to read their tweets, then it's much nicer if you just respect that. But here are some suggestions for ignoring that, written more in the spirit of warning people with protected accounts what to watch out for from sneaky folk than helping sneaky folk, though it obviously does help them. Think of it less as "how to annoy someone" and more as "how to thwart annoying people".
1. Follow them, if they'll let you
If someone has locked their account to make it private then it is not possible to see what they've said unless you follow them... so the obvious first step is to try and follow them.
Click the follow button and hope for the best.
1b(i). Create a secondary account
If they know who you are and don't want you to follow them then you'll not have much luck unless you change your name or create a new account. Simply changing your username is imperfect as it's pretty easy to see if you're still the same person they didn't want following previously
1b(ii). Make sure your email address doesn't give you away
Be aware that if they have your email address in their contacts and allow Twitter to 'find their friends' then your new account will show up, unless you untick the Discoverability setting which lets people find you via your email. I believe this is OFF by default.
An interesting conceptual equivalent to this is people who create anonymous blogs but use the same Google Analytics code as they do on their other (non-anon) sites. Given that Google Analytics codes are unique to one person's account, with modifications of a suffix for each different website, this can give them away.
1c(i). Password strength
If you've got a protected account you might want to make sure you've got a difficult-to-guess password as another obvious 'in' is to crack into your account by guessing or phishing for your password. If people can crack your email password that's another source of risk because then they can use the 'forgotten password' to get a reset link sent to the compromised email account.
1c(ii) Password strength of your followers
As Jon points out in the comments below I've missed out a fairly obvious opportunity, which is for someone to read your protected tweets by cracking the account of one of your approved followers.
2. Search for tweets sent to them - infer conversations from what others say to them
Tweets sent to people (often in reply to their own tweets) tell you one half of the conversation. As always it's your friends' responses to your protected tweets that would likely give you away ;)
Just search for their @name in the search bar - to see all tweets sent to me you can type @JoBrodie. There are obviously quite a lot because I've been on Twitter for five years but you can add in keywords to narrow things down a bit.
3. Storify / screenshots in blogs / manual retweets / look at their phone
See if you can find their tweets in Storify or other archiving places. Storify traps tweets even after they've been deleted so it seems reasonable to suspect that it will keep them even after someone's account goes private.
By contrast embedded tweets in blogs will generally disappear because the bit of code will stop working if the original tweet is deleted or the account made private. Any blog posts that used screenshots to reshare a tweet won't be affected of course.
*Embedding a tweet means that each time the blog post loads the tweet it calls on Twitter to display it and if it's no longer publicly available then it won't show up.
If your account is private then your followers cannot retweet you as the retweet button is not offered to them. However they can still see the text of your tweet and interact with it. If they want to there's nothing to stop them from copying and pasting the text and retweeting you manually. I have done this - with permission I hasten to add - when someone tweeted something really interesting that I thought deserved wider sharing.
Tweets viewed on any screen can also be snapped as a screenshot.
Jon (in comment below) also points out that someone just has to gain access to your phone to see your protected tweets or the tweets of any protected account that you're authorised to view.
4. What about authorised third-party apps?
I don't know if it's possible for people or companies who've created Twitter apps to access someone's protected tweets. To read Twitter on my iPhone I use an app (not the Twitter app) and of course when I'm logged in it shows me my private messages, so the app can obviously 'see' my DMs. The app can see my private messages so it's logical to think that the people who own it might be able to as well, though I doubt they'd bother. I mean more that I don't know how these things are kept separate.
Probably misusing an app for that purpose would be both against Twitter's terms and conditions not to mention possibly illegal under the Computer Misuse Act 1990 (UK) or Computer Fraud and Abuse Act (US).
5. Answers to specific questions people ask of Google
I have no idea who asked these questions, I just get a list of phrases that people used to search for information on Google and in which my blog appears to them in the search results.
- How can you tell if someones twitter acount is private?
Visit their account page (http://twitter.com/THEIRNAME) and if it says something like "Only confirmed followers have access to @THEIRNAME's Tweets and complete profile. Click the "Follow" button to send a follow request." that's your answer.
- How can someone find me on Twitter although I have private setting?
Only your tweets are private. Your Twitter name, bio and any web address details you've included in your bio are public.
- How can you block someone from reading your tweets even if your profile isn't private? // How do I make it so only confirmed followers can see my tweets but not be private?
You can't. Blocking someone stops YOU from seeing THEIR tweets in your timeline. You can still visit their page to view all their tweets. They can still visit yours.
- If I block someone on twitter and my profile isn't private can they still read my stuff?
Yes. They can just go to your profile, or search for tweets you've sent. Twitter previously displayed a "you can't read these tweets cos you're blocked" kind of message to people who'd been blocked. This was unfortunate as it led to a sense of false 'security'. All people had to do to see the tweets of someone who'd blocked them was to log out. This is because Twitter no longer knows that you're 'you' or whose tweets you're allowed to see.
- Can people still see at mentions if private? // Can people see tweets i'm mentioned in if my twitter is private?
Yes. All they need to do is search on Twitter for @YOURNAME to see all tweets sent to you. They cannot see any tweets sent FROM you unless they follow you.
- Can private account send mention // Can I still mention someone on twitter even though i'm private?
Yes, but if they're not following you I think they won't actually be able to see it.
- Can you block someone on twitter even when your tweets are private?
Yes, it just means that you won't see their tweets. They already can't see your tweets if you're private and not following you - there's no additional need to block them.
- Did this happen because my account is private? you have been blocked from following this account at the request of the user.
No, that just means that they've just blocked you.
- Even tho I'm private on twitter how can people retweet my stuff
Anyone who is following you is able to manually retweet you (by copying and pasting the words in your tweet). They might also take a screenshot. You can ask them not to but there's not much else you can do other than block them. It's also possible that the account of one or more of your followers has been compromised and someone else is seeing what they see and retweeting that (see 1c(ii) in the main list above).
- Even though your private should you still see your tweets in search do others
If you are logged in and search for things on Twitter then if your tweets contain them they'll show up to you, but not to other people. To check, log out of Twitter and search again - your tweets should not show up.
Don't assume that your private Twitter account is all that private (7 December 2012 - I only just noticed that I wrote that exactly a year ago!)
Three fairly cool things you can do on Twitter (apart from tweet obviously) (4 November 2013)