They're super hard. Especially when you're dealing with Twitter's APIs. You've got to open a user stream with reverse authentication and then keep that stream open for every single user you want to deal with, then properly parse the text that's received in the stream and handle each case properly. And the code you write to deal with all this has to be performant and scalable on top of that to handle thousands and thousands of potential users.

Ugh.