The large swath of discussion seems to be focusing on App Development, which is probably the hardest hit.
However, there's another area that has gotten me wondering, non-app, non-client based websites using the API, in reference to the Display Guidelines..er Rules.
This is the bit specifically.
"Users must have a consistent experience wherever they interact with Tweets, whether on Twitter.com, a mobile client, website, or in an application developed with the Twitter API"
So lets say that I go to GitHub and grab a little jQuery plugin to pull in my tweets on my personal portfolio. Does that also mean I have to make sure I include my own avatar, my username, Tweet actions, and twitter branding, among other things? What if those elements are unnecessary to the design or intention of what I'm doing on the site?
And then there's the fact that all of these jQuery plugins are going to have to start implementing authenticated access (if they weren't already, which many seem to not be.) I don't have access to data on the matter, but I would surmise that there's a significant number of personal and portfolio sites out there pulling in tweets that are either not authenticated, or are modifying the tweet display in some way. All the ones I've interacted with have settings for turning avatar display on or off, or unlinking hash tags or links, etc.
Part One (When Patents Attack): http://www.thisamericanlife.org/radio-archives/episode/441/w...
Part Two (When Patents Attack): http://www.thisamericanlife.org/radio-archives/episode/496/w...