Pages: [1] 2 3 4 :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
No Class
The Scope Gallente Federation
1
|
Posted - 2015.03.03 03:17:42 -
[1] - Quote
So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? |
Scipio Artelius
The Vendunari End of Life
34246
|
Posted - 2015.03.03 03:24:56 -
[2] - Quote
It's safe.
Just don't put anything personal or RL related in your eve mails and there's no problem.
If you have any concerns, ask the recruiter exactly what they are going to use it for.
Most of them will have no clue.
But they aren't a huge risk, just an inconvenience.
Come Win At Eve - Join The Vendunari
|
Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2045
|
Posted - 2015.03.03 03:26:34 -
[3] - Quote
Yes it's safe, however it's your information and you have the right to keep it private if you want to.
Moreover, if someone wants it with no expiry that is potentially suspect, there's little reason for anyone to want to continuously look into everything you're doing in game.
Personally I've always felt really dubious about people who want to be able to read your mails, as if it's totally normal to want to read other people's private communications. |
Nevyn Auscent
Broke Sauce
1937
|
Posted - 2015.03.03 03:27:13 -
[4] - Quote
If you haven't learnt to use the search function on the forum to answer this question, yes, bad things will come of giving people your API.
|
Zoe Athame
Black Fox Marauders Spaceship Bebop
214
|
Posted - 2015.03.03 03:27:35 -
[5] - Quote
API Keys only allow people to look, not interact. |
Zealous Miner
7
|
Posted - 2015.03.03 03:30:08 -
[6] - Quote
A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe.
If at any time you want to stop them from seeing your information you can delete the key in the API Key Management tool. You can also see what information is made available to the people you give the key to when you're setting up the API.
I voted for Sabriz Adoudel for CSM10. You should too.
www.minerbumping.com
|
No Class
The Scope Gallente Federation
1
|
Posted - 2015.03.03 03:33:10 -
[7] - Quote
Wow, thanks for the honest responses. I feel allot better about it now. |
Storm Novah
Yada Industries
26
|
Posted - 2015.03.03 03:40:03 -
[8] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this?
I agree with previous posters. Be careful of the information you share in game in any form. As for the API requests I honestly don't see any reason that a 100% full API is necessary for any corp. IMO it's nobody's business what is in the wallet or assets and as such I never include that information in my submitted APIs for any corp. If a corp "requires" that info I take that as a red flag... while it's not always the case there are corps out there that are more interested in looking for victims than seeking new contributing members.
Other than that the API key does NOT give anyone access to your account login information and you can control every aspect of the API key and the information it gives. Anyways... good luck. |
Claud Tiberius
Fidelas Constans
101
|
Posted - 2015.03.03 03:47:50 -
[9] - Quote
The reason Corps ask for full API is to mainly:
- Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. - Other(?).
So a great example of what this can do: If your corp is on deployment and your not helping out - the CEO can confirm this by looking at your API.
I like to say, It's a great tool for people who inspire to be an NSA equivalent.
Once upon a time the Golem had a Raven hull and it looked good. Then it transformed into a plataduck. The end.
|
Pok Nibin
Filial Pariahs
557
|
Posted - 2015.03.03 06:01:03 -
[10] - Quote
Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable.
Dont fight it; Rejoin your Amarrian patriarchs; You know you want to.
|
|
Loraine Gess
Confedeferate Union of Tax Legalists
472
|
Posted - 2015.03.03 06:34:09 -
[11] - Quote
Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable.
So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. |
Nami Kumamato
School of Applied Knowledge Caldari State
556
|
Posted - 2015.03.03 09:31:11 -
[12] - Quote
Do deleted mails appear in the full API also ?
" And now my ship is oh so cloaked and fit -
I never felt so good, I never felt so hid ! "
- Ramona McCandless, Untitled
|
Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 09:34:17 -
[13] - Quote
our corp use our api keys to build cool tools on the corp website :)
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|
Serene Repose
2322
|
Posted - 2015.03.03 10:21:00 -
[14] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. "Better than..." maybe it's nappy time for you, hon.
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|
Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:01:18 -
[15] - Quote
Safe or not....i do not give API key! ... to no one...Point! basta! can i have API key from recruiters, directors or from CEO?... no!
|
Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 11:04:58 -
[16] - Quote
Thora Zhubilai wrote:Safe or not....i do not give API key! ... to no one...Point! basta! can i have API key from recruiters, directors or from CEO?... no!
explains why you are and probably always will be in an npc corp. there is no danger submitting a api key its standard in any decent corp
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|
Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:08:48 -
[17] - Quote
Has nothing to do with safe or not... can i have Full API from CEO?...no, sure not.
Trust me or trust me not...simple as that. |
Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 11:17:31 -
[18] - Quote
well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|
Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2046
|
Posted - 2015.03.03 11:19:32 -
[19] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent.
70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions. |
ChromeStriker
Out of Focus Odin's Call
845
|
Posted - 2015.03.03 11:35:05 -
[20] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
This is true... but its alot easier to ask for a full api then just the important stuff anyway. Its faster for us and faster for you (select all button).
Just think, you could be trying to join a corp/alliance will billions of isk worth of assets... Capital fleets, Ratting ships in hostile space, Sov infomation.... That corp is just trying to protect itself and if you feel hard done by because of that... look somewhere else.
No Worries
|
|
Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:37:16 -
[21] - Quote
Lan Wang wrote:
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset
Do API really avoid "steal and awox"?...NOPE
Why should i trust Corpleaders if they don't trust me?
The paranoid mindset behind that "Controlling" is a good reason to stay in NPC.
|
Ka'Narlist
Dreddit Test Alliance Please Ignore
327
|
Posted - 2015.03.03 11:39:40 -
[22] - Quote
Claud Tiberius wrote: The reason Corps ask for full API is to mainly: - Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. None of those requires a full api key
|
War Kitten
Panda McLegion
5908
|
Posted - 2015.03.03 11:40:53 -
[23] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
If the information is irrelevant, why are you intent on hiding it? Industrial activities can tell your leaders whether or not you're building cap/supercaps and selling them to enemies. Faction war stats can indicate whether you're familiar with lowsec. Just because you haven't done any recruiting and don't think it is useful information doesn't mean it isn't.
... and for large alliances, the API is the best way to keep tabs on hundreds or thousands of people. An active API key is used to authenticate you on forums, teamspeak, jabber, mumble, and various other tools that your group might offer. It's going to be non-negotiable for most serious corps and alliances in the game to maintain an active API key.
But if you don't want to be a member of a large organized group, that's entirely your choice, and you can hide all your dirty secrets about faction warfare and how many scourge missiles you've built in the last 3 months.
I find that without a good mob to provide one for them, most people would have no mentality at all.
|
ChromeStriker
Out of Focus Odin's Call
845
|
Posted - 2015.03.03 11:44:16 -
[24] - Quote
Thora Zhubilai wrote:[quote=Lan Wang] Do API really avoid "steal and awox"?...NOPE
Why should i trust Corpleaders if they don't trust me?
The paranoid mindset behind that "Controlling" is a good reason to stay in NPC.
Yes... actually....
Because said corp leaders are willing to put in the effort to protect the corp... It isnt a matter of trust, they WANT you in their corp, but they have to look out for their members and protect their interests from the potential of theift or awoxing. An API check is the fastest and easiest way of doing this.
No Worries
|
Storm Novah
Yada Industries
27
|
Posted - 2015.03.03 11:46:14 -
[25] - Quote
Lan Wang wrote:well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp. |
Sisohiv
Center for Advanced Studies Gallente Federation
288
|
Posted - 2015.03.03 11:51:55 -
[26] - Quote
I've given both limited and full API at various times because I'm not quite as paranoid as the people who ask for it. I'm also very candid about the fact that I have 5 accounts, 4 almost always active at a time so they are gathering no useable data from my API.
It doesn't even provide effective meta any more assuming I only had one account. Once upon a time you could determine what I might be flying and use it to profile me for spy ganking but with the two accounts I send to large corps, they both have SP for every sub cap in the game. It isn't even a game advantage choice, it was just wise to Nerf proof.
tl;dr it's not a threat but it's an antiquated habit we have in the game and speaks volumes about the corp you are applying to. |
Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 12:07:25 -
[27] - Quote
Storm Novah wrote:Lan Wang wrote:well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none! Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp.
whats so secret about it? if corps are building tools or using asset lists and wallet for building doctrines around what people can afford to fly or making sure they can afford to be deployed during wars and ever changing doctrines then whats the issue or to check people have carriers and other tactical assets for when they are needed, as said nobody really cares about your isk as long as your joining fleets (all my isk gets transferred to my trading alt anyway), but what use are you to a pvp corp if you dont have the right assets and no money to buy them? if its irrelevant then why even care about showing it.
it doesnt really do much as so many people have alts but having tools and stats are pretty cool
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|
Aralyn Cormallen
Wildly Inappropriate Goonswarm Federation
775
|
Posted - 2015.03.03 12:11:49 -
[28] - Quote
This is always an arguement between the "My Privacy!" crowd and the "Meh, who cares" crowd.
There are many completely acceptable reasons to want to see or check any and all parts of the API, but likewise, there are many reasons why those same parts don't need to be seen. It is all a matter of your point of view. Ultimately, it's going to depend on what you personally consider acceptable.
What you need to know about API's is:
- They can see your skills. They cannot change your training. - They can see your assets and wallet, and they can see who you have given money to in the past. They cannot take any of those assets or send them on to anyone else. - They can read your mails. They cannot read mails you have deleted, and they cannot send mails in your name. - They can see your contacts. They cannot change any of your personal contacts or add any personal contacts (although, if you join, you will inherit corp/alliance contacts)
If you are giving your API to anyone, you have to ask yourself:
- What are you lettimg them see? - Can allowing this information to be seen put you, your assets, or your plans at risk? - Can keeping information hidden place you, your assets, or plans at risk ? (bear in mind, any information a recruiter allows you to keep hidden, he is likely allowing others to keep hidden - what potential risk are you being put in by lax recruiting standards)
Ultimately it is your choice. Some places will ask for full APIs, others will ask for tailored APIs to cut out the irrelevant information. For example, to be a member of my corp and alliance, I have submitted three different APIs for each of my two accounts with information pertinent to what I am involved in. One of those does indeed include assets, something that a lot of people would balk at. Why? Because I am part of the Alliances Capital and Supercapital groups, and as part of that, its kinda mandatory to ensure I possess the Capital and Supercapital assets I claim I have (and that I have the skills to fly the vessel, and my ship fitted to the level required by alliance doctrine). It may not be much, but thats an extra level of security to my ships, since I know that random throwaway spy alts can't infiltrate those groups without having the needed skills and assets, and it also means I am not being put at risk on the field by discovering too late that my cap buddy doesn't have the skills or mods needed to maintain the chain. |
Loraine Gess
Confedeferate Union of Tax Legalists
474
|
Posted - 2015.03.03 12:50:14 -
[29] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so. |
ChromeStriker
Out of Focus Odin's Call
846
|
Posted - 2015.03.03 12:50:20 -
[30] - Quote
Storm Novah wrote:
Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp.
Just to clear up this small point...
First it shows if you are self efficient, and able to support yourself effectivly. A corp will normally help in making isk but not hand holding.
Second it can flag up some annomilies... i interviewed a toon that transfered 5 billion isk between a couple of toons 3 months before and when i asked why they dropped the conversation never to be seen again.
Its all little bits useful for an interviw... finding about alts they failed to mention, surprise income sources, aplicable for a training corp, they say they can do x but can really only do y....
No Worries
|
|
|
|
|
Pages: [1] 2 3 4 :: one page |
First page | Previous page | Next page | Last page |