Also, ingame, all portraits are loaded from http://image.eveonline.com/Character/externalid_size.jpg
So your CharacterID is also ingame

And with that last remark, i think we can call this rage thread for over.

Toodles o/

I know he's not scraping the API with random guesses so you can all stop bitching about that (you'd be amazed how fast the CCP API folks can go get that banhammer). He's in bed with EVSCO / eve-kill, so he gets every character name from every kill that goes through there, and probably also uses the API keys eve-kill users have given to get names from wallet transactions. In addition, the new RSS feed for the forums makes it easy to scrape those too.

So it's not against CCP regulations. But it's definitely an abuse of the API keys people have trusted to EVSCO / eve-kill.

After building an initial database it's quite the chain effect, you can see every corp the characters have been in, then see the CEO's of each of those corps, then see the corps that those CEO's have been in, and so on. All chat logs are automatically saved, so he can process those (just stay logged in while sitting in Jita and the noob systems).

So grow up. It's not going to change now. Best thing you can do is go change all your API keys.

... [wall of text]... and probably also uses the API keys eve-kill users have given to get names from wallet transactions. In addition, the new RSS feed for the forums makes it easy to scrape those too.

So it's not against CCP regulations. But it's definitely an abuse of the API keys people have trusted to EVSCO / eve-kill.
...

Apart from the massive intel boost it gives?

This is the reason I never give my api key to anyone except trusted sites like Chribba's eveboard or pandemic-legion.com

By making it a website it is public for EVERYONE on the internet

luddite

So, any bets on how many people went to evewho and entered there 'super secret' alts name to check if its there and therefore gave evewho another name to check??

This guy is exactly right. Alts who've never undocked, or had any impact (no buying/selling, speaking in local, etc.) on the game at all, are being shown here. This, to me, represents a prime example of API info gone way wrong. When all other options have been argued and refuted, this fact remains: You (CCP) changed the way the API works, and what can be gleaned from the data dumps. Now someone has datamined through your security hole, and I'm not appreciating your feeble attempt at damage control. As for the often used "its all information that you can glean ingame, publically available", I call BS. If this were true, it would have been done by someone long before now.

Just once, I'd like to have confidence in CCP to actually test stuff before it's pushed out live. Honestly............when are you people going to LEARN?

All this meta gaming crap is getting tedious.

If information is supposed to be public it should be so using the game client and easy accessible to boot. One could, as example, let corporation information list all current members and this topic will be a non-issue.

You do realize that all this info could never be scraped from a KB? I'm pretty sure 50% of the characters on there never existed on a KB in the first place.

The fact that Evewho was linked on eve-kill for a while makes it pretty obvious that karb handles API keys in a way he shouldn't.

Then again, it doesn't provide any new information. If anything, it reduces :effort:.

What..

Well, lets say for a minute i am misusing the API keys, and i do access all the delicious goodies people have, what use would it have, when we use the new API system, and people only give us access to their killlog?

OH YEAH, i forgot, i can get all the corporations members, their standings, their pos locations, their wallet information etc. from the killlog.. or.. no, i can't..

Also, look here: http://eve-kill.net/?a=apikey
it even says: You only need to click the 'killlog' and the 'no expiration' option when creating the key.

So yeah, EVE-KILL is using peoples API keys in ways we shouldn't..
******

You're so full of **** Karb. I've seen how you treat people/EVSCO users for the past 2 years and at some point I thought it was enough.

And now you're such a hypocrite advocating the new customizable API keys are so safe. What about all those old FULL API keys that were valid for the past 2-5 years? And some of them still are. If you treated moral concerns only half as bad as you treated people on IRC - then those keys have been long shared between your `cool kids` gang - you, beanie (EVSCO), Peter Powers (king-board), squizz (eve-who) - and prolly the list goes on. You lot all hang out on coldfront IRC and as far as I saw you're thick as thieves.

Now if what I'm saying is valid - then with the new CAKs in place, eve-who should see a serious decrease in intel quality in the next months/years as new API keys don't provide full character/corp API info anymore to EVSCO, which in turn cannot feed these `cool toys` anymore. But enough bad has been done, as squizz already got a large portion of the current Eve population mapped out.

Eve-who `harvesting the official CCP API` story as you tried to sell it? Maybe, but I seriously doubt it. You're not gonna endanger your official API feed with guessing and invalid requests - ergo getting ban-hammered by CCP. Abusing the EVSCO old FULL API keys and lying people to their faces is much easier and has no consequences - as no-one has access to your servers and no-one can held you accountable for your actions.

Too bad there isn't a serious EVSCO alternative (BC sucks balls). You lot did exactly what everyone does after being trusted with a lot of information (ie. power). Abuse it. Hei Karb does anyone takes serious your teen ADD rabble anymore (here or on IRC)? Iirc you're still a teen living with your parents amirite? Attention-wh0ring much on how awesome you are anymore?

--
Solution? Delete/update asap your old API keys (especially if you ever used them with EVSCO) and stop using EVE-KILL. Well it's kinda ironic now - damage's already been done and a lot of stuff has been mapped out for eve-who and new CAKs don't give anywhere near so much intel as old FULL API keys did.

But what matters in the end.. squizz you're so much cooler than Kronus Heilgar and his ECI! Excuse me while I go puke. You know you're griefing a lot of small-scale corps (ie. the little guy) for wanting to be `way cooler` rite? Enjoy it while it lasts, you sad panda.

EVERYBODY generate an ERROR API call on their proxy :)