| Pages: [1] 2 3 4 5 6 7 :: one page |
|
|
| Author |
Thread Statistics | Show CCP posts - 8 post(s) |
Thomas Alva Edison
Center for Advanced Studies
Gallente Federation
2
   |
Posted - 2011.09.20 14:37:00 -
[1] - Quote
hi !
Just recently i stumbled on the site: http://evewho.com
The project itself is a good idea, but it is showing more than i want to show to the public.
For start, i don't want to show to the public the members from my corporation !
Random Example: http://evewho.com/corp/Zerg+Hatchery
Is there a setting from the API where i can disable a such thing ?
Is there an action i can take against showing the members of my corporation ?
Ain't it against the privacy of a corporation ?
As a disclaimer, it states:
Quote:All numbers based to known characters and may differ from in game values. All characters found by scavengin killboards, eve-search, and finding holes in character id sequence data and filling them.
Now i know for sure some characters do not appear on any existing killboard, but it appears on this site.
Can something be done ? |
Nyio
Federal Navy Academy
Gallente Federation
98
|
Posted - 2011.09.20 14:47:00 -
[2] - Quote
Yes, great site. I hope it's here to stay and grow. 
Features & Ideas Discussion: Agent Finder, Black Holes
Needs a banner here.. |
Efraya
10
|
Posted - 2011.09.20 14:47:00 -
[3] - Quote
All of the information gathered on that website is a collection of information that is already publicly visible, he's just been clever in scraping the kill boards and compiling that list.
WSpace; Best space. |
Nikkov
Kai-Zen inc.
0
|
Posted - 2011.09.20 14:59:00 -
[4] - Quote
Efraya wrote:All of the information gathered on that website is a collection of information that is already publicly visible, he's just been clever in scraping the kill boards and compiling that list.
How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station? |
Thorn Galen
The Scope
Gallente Federation
9
|
Posted - 2011.09.20 14:59:00 -
[5] - Quote
Very good site, decent information!
Keep it going.
(This space for rent) |
Myxx
Atropos Group
53
|
Posted - 2011.09.20 15:00:00 -
[6] - Quote
evewho is awesome and I personally have been using it for my own needs. I think its great seeing the members of a corp shown in public like that. |
Ciar Meara
Virtus Vindice
103
|
Posted - 2011.09.20 15:00:00 -
[7] - Quote
Indeed, the maker could keep it open or sell information based on his machine, or do both with private acces.
In any case it is a usefull tool.
-
[img]http://go-dl1.eve-files.com/media/corp/janus/ceosig.jpg[/img]
[yellow]English only please. Zymurgist[/yellow] |
Shionoya Risa
The Xenodus Initiative.
46
|
Posted - 2011.09.20 15:02:00 -
[8] - Quote
Nikkov wrote:Efraya wrote:All of the information gathered on that website is a collection of information that is already publicly visible, he's just been clever in scraping the kill boards and compiling that list.
How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station?
Because he has been guessing ID's from the api. Not really what I'd called public per se.
Quote:and finding holes in character id sequence data and filling them.
|
Ya Huei
Imperial Collective
5
|
Posted - 2011.09.20 15:03:00 -
[9] - Quote
By posting it on this forum you made more people aware of this site. very smart.
|
Kitty McKitty
In Praise Of Shadows
100
|
Posted - 2011.09.20 15:06:00 -
[10] - Quote
macro to gain advantage etc.
"Why can't I be different and original, like everybody else?" |
|
|
Prince Kobol
41
|
Posted - 2011.09.20 15:13:00 -
[11] - Quote
Ya Huei wrote:By posting it on this forum you made more people aware of this site. very smart.
By making it a website it is public for EVERYONE on the internet
luddite |
Grey Stormshadow
Starwreck Industries
110
|
Posted - 2011.09.20 15:16:00 -
[12] - Quote
Nikkov wrote:Efraya wrote:All of the information gathered on that website is a collection of information that is already publicly visible, he's just been clever in scraping the kill boards and compiling that list.
How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station?
Perhaps you have posted to forums with them or your eve gate settings have been allowing some inspection for a while... There are plenty of places where sites like this could catch the data... Try googling your alts name.
Forum fix for firefox and chrome
Get working images and colored text
Classic forum style 2.25final |
Tippia
Sunshine and Lollipops
171
|
Posted - 2011.09.20 15:18:00 -
[13] - Quote
Nikkov wrote:How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station? Because they appear in other stats and data feeds, e.g. as corp founders/CEOs, or in market logs.
GÇöGÇöGÇö
GÇ£If you're not willing to fight for what you have in GëívGëí
you don't deserve it, and you will lose it.GÇ¥
GÇö Karath Piki-á |
Zagam
Incompertus INC
Fatal Ascension
87
|
Posted - 2011.09.20 15:25:00 -
[14] - Quote
Hiding that info defeats the purpose of the entire site.
I think a better question to ask is:
Why is it so important that the info is hidden? |
Shionoya Risa
The Xenodus Initiative.
46
|
Posted - 2011.09.20 15:27:00 -
[15] - Quote
Zagam wrote:
Why is it so important that the info is hidden?
Apart from the massive intel boost it gives? |
Othran
Brutor Tribe
Minmatar Republic
25
|
Posted - 2011.09.20 15:34:00 -
[16] - Quote
Tippia wrote:Nikkov wrote:How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station? Because they appear in other stats and data feeds, e.g. as corp founders/CEOs, or in market logs.
Nope. I have an alt which I created to sort of hold a name I use in other games. That alt has done nothing - ever. Never undocked, never bought anything, never traded, trained, posted on forums - nothing. In fact I've never told anyone the alt existed until now.
He's on an account which has only disclosed the limited API to Evemon and EFT.
So I'm sort of curious how that has happened. |
malaire
41
|
Posted - 2011.09.20 15:38:00 -
[17] - Quote
Thomas Alva Edison wrote:Is there a setting from the API where i can disable a such thing ?
Employment history of each character is public information. If the name of the character can be found somewhere, then it can be linked to its corporation(s).
To keep your character name private:
- Do not post on forums
- Do not appear on any killboard
- Do not buy/sell anything on market
- Do not show up in Local anywhere
- Do not chat with anyone in EVE
- Do not send evemail to anyone
- ...
Whenever you do any of the above, someone can see your character name, and that person can submit it to sites like http://evewho.com. I remember one site which gave some reward for each new character submitted there, I don't know if http://evewho.com does this also.
So in short, there is no real way to keep your character name and its corporation(s) private.
Carebear -á* -áTrader -á* -áPerfect Music-á-á* -áNever Scamming -á* -áNever Pirating |
Vincent Athena
V.I.C.E.
40
|
Posted - 2011.09.20 15:40:00 -
[18] - Quote
We just had a faildec war and used Evewho to see who was in the other corp. The dec started with the other corp containing 2 pilots. During the war 3 more joined. This allowed me to see how long it takes Evewho to find the new members: 12 to 48 hours.
I'm wondering if corps will start having members drop and re-join corp over and over to spoof the Evewho data.
CCP employees should never proclaim a feature to be awesome. Only subscribers should. |
Adrenaline Reaper
Hard Rock Mining Co.
Territorial Claim Unit
1
|
Posted - 2011.09.20 15:43:00 -
[19] - Quote
The site works by guessing character ids, http://wiki.eve-id.net/APIv2_Eve_CharacterInfo_XML
You can query some data on the API without supplying a key, just like you can search and view someone's corp history in game.
The site is 100% legit, the guy who made it has made a very clever use of the API tools available to everyone, there is nothing stopping you collecting all the info ingame if you wanted, it would just take considerable time |
Miilla
Hulkageddon Orphanage
52
|
Posted - 2011.09.20 15:44:00 -
[20] - Quote
Kill boards are wildly inaccurate for depending information. I for one don't keep one but it exists because of the kills OTHER players post, however, still an incomplete and unreliable source of information, for example, I swear I have lost many more Cheetahs than it shows.
|
|
|
Azitek
Astrum Tech
0
|
Posted - 2011.09.20 15:47:00 -
[21] - Quote
Othran wrote:so unless you can tell the characters on an account which you don't have the limited API key for, its leaked from one of them. 
This is exactly what he's doing: creating a program that guesses massive amounts API keys. When it happens on one that's in use, it records what it finds. No leaks needed, just some dedicated CPU power. |
Othran
Brutor Tribe
Minmatar Republic
25
|
Posted - 2011.09.20 15:49:00 -
[22] - Quote
Azitek wrote:Othran wrote:so unless you can tell the characters on an account which you don't have the limited API key for, its leaked from one of them. This is exactly what he's doing: creating a program that guesses massive amounts API keys. When it happens on one that's in use, it records what it finds. No leaks needed, just some dedicated CPU power.
Ta - I understand now. Shouldn't have expected anything else from CCP mmm?  |
Miilla
Hulkageddon Orphanage
52
|
Posted - 2011.09.20 15:49:00 -
[23] - Quote
Azitek wrote:Othran wrote:so unless you can tell the characters on an account which you don't have the limited API key for, its leaked from one of them. This is exactly what he's doing: creating a program that guesses massive amounts API keys. When it happens on one that's in use, it records what it finds. No leaks needed, just some dedicated CPU power.
So if he is abusing the API, and attempting to scan it for API keys, then he should be banned according to the rules no?
|
Adrenaline Reaper
Hard Rock Mining Co.
Territorial Claim Unit
1
|
Posted - 2011.09.20 15:52:00 -
[24] - Quote
Azitek wrote:Othran wrote:so unless you can tell the characters on an account which you don't have the limited API key for, its leaked from one of them. This is exactly what he's doing: creating a program that guesses massive amounts API keys. When it happens on one that's in use, it records what it finds. No leaks needed, just some dedicated CPU power.
He is not cracking the API keys, that would not be allowed as you have effectively hacked someone's account. But you are on the right lines, he is just guessing char ids and seeing if they work, its not even that compute intensive. |
Miilla
Hulkageddon Orphanage
52
|
Posted - 2011.09.20 15:56:00 -
[25] - Quote
Adrenaline Reaper wrote:Azitek wrote:Othran wrote:so unless you can tell the characters on an account which you don't have the limited API key for, its leaked from one of them. This is exactly what he's doing: creating a program that guesses massive amounts API keys. When it happens on one that's in use, it records what it finds. No leaks needed, just some dedicated CPU power. He is not cracking the API keys, that would not be allowed as you have effectively hacked someone's account. But you are on the right lines, he is just guessing char ids and seeing if they work, its not even that compute intensive.
Scanning the API's by brute force SCRAPING DATA.
Reported for abuse and hacking :)
I wondered why the API was taking longer, it is probably him scanning it.
|
Othran
Brutor Tribe
Minmatar Republic
25
|
Posted - 2011.09.20 15:57:00 -
[26] - Quote
I think this requires fixing. Its ludicrous that its possible to datamine in this manner.
What on earth was the designer thinking?
Edit - change API such that a call without limited API key returns no data. Isn't that the logical default? |
malaire
41
|
Posted - 2011.09.20 16:00:00 -
[27] - Quote
Practical example how this might be done:
1) get few character names (e.g. malaire, Miilla, Adrenaline Reaper)
2) use API to get characterIDs of those character (e.g. this link for those 3 characters)
*) malaire = 1628541932, Miilla = 1365934490, Adrenaline Reaper = 916738779
4) use those IDs to get character information (malaire info, Miilla info, Adrenaline Reaper info)
5) try other characterIDs close to those you know to find unknown characters: 916738780, 916738781, 916738782 (no luck here, all of these are invalid IDs)
Carebear -á* -áTrader -á* -áPerfect Music-á-á* -áNever Scamming -á* -áNever Pirating |
malaire
41
|
Posted - 2011.09.20 16:02:00 -
[28] - Quote
Othran wrote:I think this requires fixing. Its ludicrous that if you can present a user ID and no key then you get the characters on that account returned.
Its beyond ludicrous in fact - its incompetence.
It doesn't work like that, see my example above. You can just get information for single character (not account) when you guess characterID of that character.
Also, that characterID is NOT same as userID used with old API keys.
Carebear -á* -áTrader -á* -áPerfect Music-á-á* -áNever Scamming -á* -áNever Pirating |
Othran
Brutor Tribe
Minmatar Republic
25
|
Posted - 2011.09.20 16:06:00 -
[29] - Quote
malaire wrote:Othran wrote:I think this requires fixing. Its ludicrous that its possible to datamine in this manner.
What on earth was the designer thinking? It doesn't work like that, see my example above. You can just get information for single character (not account) when you guess characterID of that character.
Yeah and that's fine - from your example you are required to know the name of the char to get the charID, no problem with that at all.
Doing it the reverse way, randomly trying charID to get a result - no, I'm not at all happy with that. Its ****-poor design. |
Tippia
Sunshine and Lollipops
171
|
Posted - 2011.09.20 16:25:00 -
[30] - Quote
GǪon the other hand, if he was just scraping characterIDs, there shouldn't be so many characters missing.
GÇöGÇöGÇö
GÇ£If you're not willing to fight for what you have in GëívGëí
you don't deserve it, and you will lose it.GÇ¥
GÇö Karath Piki-á |
|
|
|
|
| |
|
| Pages: [1] 2 3 4 5 6 7 :: one page |
| First page | Previous page | Next page | Last page |