GǪon the other hand, if he was just scraping characterIDs, there shouldn't be so many characters missing.

Doesn't matter whether he's scraping or guessing.

Any system which confirms or refutes the existence of a user (or character in this case) by providing a user id of some description but no key/pw is broken beyond belief.

What's more, the designer who thought that would be OK is quite clearly not competent.

Its absolutely ****-poor design, appallingly bad.

There's nothing else to be said Tippia - there's no good reason for this API behaviour. None.

The whole point of the API is to provide the same data you can get ingame, but accessible to other applications. You can check the corp of each char manually ingame, so why should you not be able to do it on a website?

The whole point of the API is to provide the same data you can get ingame, but accessible to other applications. You can check the corp of each char manually ingame, so why should you not be able to do it on a website?

I'm surprised the site hasnt been blacklisted from the API for brute forcing the character IDs.

Apart from the massive intel boost it gives?

How can the information be public, ie: Killboards, when alts are being shown that have never undicked from station?

Given the amount of idiots who have account and character names the same it looks quite useful for a bit of brute forcing/social engineering accounts too.

So who's the muppet designer who ****** this up?

For instance, if you do not know that a character exists, you cannot find it in-game nor can you discover who's in those "unknown" corp slots; using the charID and API calls, you can discover its existence and tie it back to the corp that way.

You can find it in-game, you can search by partial character name and try to find there "hidden" characters.

This guy is bascially MACROING :)

So what? Macroing outside EVE, using external applications and API is allowed.

I have spoken with the developers who manage and maintain the EVE API. They have assured me that evewho is not conducting any illegal or underhand method of obtaining API information. All information gathered has been posted publicly in one form or another. We maintain a very close eye on what is happening with the API information and will continue to do so.

I have spoken with the developers who manage and maintain the EVE API. They have assured me that evewho is not conducting any illegal or underhand method of obtaining API information. All information gathered has been posted publicly in one form or another. We maintain a very close eye on what is happening with the API and will continue to do so.

Ummm no. As I said earlier I have a character who has never done anything. No information was "posted publically" at all.

undicked

So it is ok to scan the API?

CONFIRMED, get those API scanners going people

Has he ever said anything in Local? Is he visible in Local?

If yes, then someone might've spotted him and posted to website like evewho.

I suggest you refrain from confirming anything. the details of what is allowed with the EVE API is decided by the developers who work on that code.

So it is ok to scan the API?

CONFIRMED, get those API scanners going people

I just want to clarify:

We have very clear policies about what's allowed and not. As you will know, we will throttle invalid calls, as we do not allow throwing 10 million random IDs at the API and hoping they return data.

Scraping through characterIDs hoping to hit a valid one is NOT allowed. Doing so will get your IP blocked from the API. But if you do valid calls because you know it's a valid ID is fine. But generating excess errors will get your IP blocked.