CCP Random, His Divine ShadowGäó, Security Engineer

The annual - let's do something with security before fan fest post.

How about dumping those plexes into the market that security has been squatting from the big bot sweep???

Sounds like a great idea! Artificially deflate the price of PLEX by flooding the market making RMT isk worth more relative to PLEX isk. High PLEX prices are bad for players that use them but fantastic for those who sell them (and by extension CCP).

The annual - let's do something with security before fan fest post.?

contrary to what others might think, i believe that "isk seized" chart is on the low side.

that looks like 19 trillion in 7 months, roughly 210 days.

That's on average 90 billion per day, which, considering the scale of the game's income (In march 2012, an estimated 1T enters the game per day, I would assume it's safe to say that number is much higher now, maybe 1.5).

90 billion out of 1500 billion per day doesn't sound nearly as impressive.

Security is very important to CCP. Our Security Team does a lot of things, such as targeting evil RMTers and botters and making sure they don't negatively impact EVE Online. It's been a while since their last dev blog and the team has undergone many changes since. CCP Bugartist, the Director of Information Security, comes forward with this new dev blog to update everyone on what's going on on the security front!

Great, so I guess you guys found time to write this dev blog while fixing that OpenSSL heartbleed bug, right?

contrary to what others might think, i believe that "isk seized" chart is on the low side.

that looks like 19 trillion in 7 months, roughly 210 days.

That's on average 90 billion per day, which, considering the scale of the game's income (In march 2012, an estimated 1T enters the game per day, I would assume it's safe to say that number is much higher now, maybe 1.5).

90 billion out of 1500 billion per day doesn't sound nearly as impressive.

With so much isk being seized/impounded, how large an influence does this have on the inflation of isk in the game ?

And once again, CCP refuses to outline who and where the ISK was impounded from, because protecting the privacy of a fictional character is critical.

Also, how much was impounded from buyers, and how much from sellers?
What was the breakdown on where the ISK was generated? High sec, null sec, low sec, wormholes?
Surely if CCP is sophisticated enough to track this stuff, they can track the activity history of the people they impounded the ISK from.

But instead, CCP has to protect even that information, because heaven forbid the subscription base get a clear picture of the situation.

No security related dev blog without a graph

In order to follow this age-old tradition, hereGÇÖs a brief teaser of whatGÇÖs coming at Fanfest below...

And once again, CCP refuses to outline who and where the ISK was impounded from, because protecting the privacy of a fictional character is critical.

Also, how much was impounded from buyers, and how much from sellers?
What was the breakdown on where the ISK was generated? High sec, null sec, low sec, wormholes?
Surely if CCP is sophisticated enough to track this stuff, they can track the activity history of the people they impounded the ISK from.

But instead, CCP has to protect even that information, because heaven forbid the subscription base get a clear picture of the situation.

How about some tools for a player to actually challenge a potential bot? We would like to help. I have no idea what this would look like. In terms of information:

Maybe one of CCP Quant's graphs for botting? I'd very much like to see actual numbers of bots and ISK sellers caught.

Edit: bot-hunting! Make it a new profession supported by challenge tools prior to lodging a bot ticket with rewards for each bot caught!

past team security presentations have shown there's more bots in the forge than all of nullsec

best of luck with your insane delusions

Welcome CCP Bugartist! Could you answer a couple of burning questions?

1. Could you please post an updated guide on how to detect bots?

2. Is it a EULA/ToS violation if someone continuously kills/pods a bot if the bot is stupid enough to keep coming back to the same spot? I once heard that it was.

Thanks!