Pages: [1] 2 3 4 5 6 :: one page |
|
Author |
Thread Statistics | Show CCP posts - 1 post(s) |
Conrad Lionhart
11
|
Posted - 2014.06.07 04:50:00 -
[1] - Quote
Hey all,
I just came back to the game after being away for over a year.
There is a corp that talked to me about joining, but before I could join, they requested my FULL (not partial) API.
I want to know whether this has become standard practice nowadays for corps recruiting new members.
Back in the day, I just joined a corp without such need for an API, and the only time they needed my API was for teamspeak, and even then a limited API was enough.
So is it safe to give my full API? Is it now standard practice to give your full API to corps that you want to join? |
Sher Rayet
44
|
Posted - 2014.06.07 04:55:00 -
[2] - Quote
If you give away full API they read your mails and transactions etc. Go ahead... |
Scipio Artelius
The Vendunari End of Life
1809
|
Posted - 2014.06.07 05:09:00 -
[3] - Quote
Full API seems a bit much unless they have a specific reason after checking killboards, eveboard, eve-gate, etc. Even then, they really should explain to you what their concerns are.
A partial API is normally enough.
As an observation though, I don't think many Corps really dedicate time to learning proper security. Come Win At Eve - Join The Vendunari
. -á<- Argue this, not this ->-á( -í-¦ -£-û -í-¦) |
Conrad Lionhart
11
|
Posted - 2014.06.07 05:10:00 -
[4] - Quote
Sher Rayet wrote:If you give away full API they read your mails and transactions etc. Go ahead...
But is it standard practice? Would you do it if you wanted to join a new corp? |
Graygor
1kB Realty 1kB Galactic
119213
|
Posted - 2014.06.07 05:11:00 -
[5] - Quote
Scipio Artelius wrote:Full API seems a bit much unless they have a specific reason after checking killboards, eveboard, eve-gate, etc.
A partial API is normally enough.
As an observation though, I don't think many Corps really dedicate time to learning proper security.[
This.
A guide to eve recruiting for new players. "I think you should buy a new Mayan calendar. Mine has muscle cars on it." --áKenneth O'Hara
"I dont think that can happen, you can see Gray has his invuln field on in his portrait." - Commissar "Cake" Kate |
Sibyyl
Gallente Federation
1507
|
Posted - 2014.06.07 05:12:00 -
[6] - Quote
I feel like I'm alright with everything except Mail.. having Mail in there seems unnecessary and perhaps invasive. .. when everything else is gone .. |
Scipio Artelius
The Vendunari End of Life
1809
|
Posted - 2014.06.07 05:13:00 -
[7] - Quote
Conrad Lionhart wrote:But is it standard practice? Would you do it if you wanted to join a new corp?
I would because I don't have anything to hide. However there may be others that see it as too invasive, which I would also agree with. Come Win At Eve - Join The Vendunari
. -á<- Argue this, not this ->-á( -í-¦ -£-û -í-¦) |
Bapfl
Federal Navy Academy Gallente Federation
0
|
Posted - 2014.06.07 05:15:00 -
[8] - Quote
Once gain, someone tries to suggest on the forums that full API requirement is actually standard practice.
I don't think full API is useful because people can always buy a new account... oh wait, it is useful, nvm. |
Don Purple
239
|
Posted - 2014.06.07 05:17:00 -
[9] - Quote
There's plenty of corps that dont need full API codes. They are all over my killboard. The practice is now standard and in most cases you do not want a corp that recruits without it. Also 60% of those corps asking have no idea to properly crawl up your insides so just give it to them. I am just here to snuggle. |
Cipher Jones
The Thomas Edwards Taco Tuesday All Stars
1152
|
Posted - 2014.06.07 05:27:00 -
[10] - Quote
Full API is standard and has been for years. if you had corps before that didnt require it its no wonder they aint around now. Accounts may not be used for business purposes. Access to the System and playing EVE is intended for your personal entertainment, enjoyment and recreation, and not for corporate, business, commercial or income-seeking activities.-á |
|
Magnus Cortex
GoonWaffe Goonswarm Federation
180
|
Posted - 2014.06.07 05:50:00 -
[11] - Quote
People use eve mail? Really? |
Nevyn Auscent
Broke Sauce
1359
|
Posted - 2014.06.07 08:47:00 -
[12] - Quote
Conrad Lionhart wrote:Sher Rayet wrote:If you give away full API they read your mails and transactions etc. Go ahead... But is it standard practice? Would you do it if you wanted to join a new corp? A lot do it because someone told them it will keep out spies. Anyone not prepared to explain exactly what part of your API they actually need to check and why they need to check it doesn't actually understand what they are looking at anyway and is only asking because someone told them they should check Full API's.
Its something I refuse to give out, I'll give a partial to a corp that can justify the bits they want to see, as some bits are fair to look at, but demanding a full and not explaining what bits they actually need to see is a mark of a bad recruiter. |
Solecist Project
Center for Advanced Studies Gallente Federation
2074
|
Posted - 2014.06.07 08:48:00 -
[13] - Quote
... front page domination ... The case of the bottomless dress. https://forums.eveonline.com/default.aspx?g=posts&t=349499 @SolsUnknownAlt on twitter. I hate it.
|
Solai
Jolly Codgers Get Off My Lawn
243
|
Posted - 2014.06.07 08:56:00 -
[14] - Quote
It's standard practice for corps that are worth joining. Any group that's sufficiently organized and with sufficient infrastructure at stake has overwhelming incentive to do a full API comb, and keep a permanent full API on hand, including reading your evemails.
Invasive? Absolutely. Degrading? For the recruiter/security guy as well as the applicant. Un-fun? Boy howdy. Not entirely effective, even with a thorough check? Fraid so.
And with all the downsides combined, it's still worthwhile to require the full API.... If you stand to lose enough, that is. Some corps and alliances are at higher risk from spies, saboteurs and awoxers. These are typically the more powerful groups, who inevitably have enemies that are willing to dedicate a subscription simply to gathering your intel, or waiting for a moment to exploit, burning the spy.
By requiring the full API, you make it a bit less easy for opponents to infiltrate you. Having only a few spies in your ranks is a lot better than having a bunch of spies.
The paranoia sucks - the security check sucks - the lack of privacy sucks - the newbie unfriendliness sucks - the extra layer of bureaucracy sucks - the extra work sucks. Yet, all of that sucks less than what spies can potentially afflict on a competitive alliance.
Full API is standard for alliances that matter. No API, no recruit.
Jolly Codgers corp - Bloodthirsty old men of Null-Sec. -á PVP and organizational excellence through maturity, for pilots age 30+. |
Solecist Project
Center for Advanced Studies Gallente Federation
2075
|
Posted - 2014.06.07 09:00:00 -
[15] - Quote
... 100%, BINGO! The case of the bottomless dress. https://forums.eveonline.com/default.aspx?g=posts&t=349499 @SolsUnknownAlt on twitter. I hate it.
|
Nevyn Auscent
Broke Sauce
1359
|
Posted - 2014.06.07 09:02:00 -
[16] - Quote
Except nowhere in there did you actually explain a single thing about how a FULL API rather than a partial actually changes anything. Nor what bits actually help you in checking for spies or running a corp. You just trotted out the old passed down and horribly flawed argument. |
Solecist Project
Center for Advanced Studies Gallente Federation
2076
|
Posted - 2014.06.07 09:08:00 -
[17] - Quote
Full API does nothing against a dedicated spies. The whole procedure is more or less pointless. The case of the bottomless dress. https://forums.eveonline.com/default.aspx?g=posts&t=349499 @SolsUnknownAlt on twitter. I hate it.
|
Conrad Lionhart
11
|
Posted - 2014.06.07 09:12:00 -
[18] - Quote
My primary concern is that giving Full API will give people information to exploit me or somehow make my life miserable.
If it is very unlikely to happen, then I don't mind giving it.
The API page did warn me about giving this information, so I am just wary by default. |
KnowUsByTheDead
1804
|
Posted - 2014.06.07 09:13:00 -
[19] - Quote
I will give my api.
It shows trust.
Once you realize what a joke everything is, being the comedian is the only thing that makes sense. |
Solecist Project
Center for Advanced Studies Gallente Federation
2076
|
Posted - 2014.06.07 09:15:00 -
[20] - Quote
lol The case of the bottomless dress. https://forums.eveonline.com/default.aspx?g=posts&t=349499 @SolsUnknownAlt on twitter. I hate it.
|
|
James Amril-Kesh
4S Corporation Goonswarm Federation
10353
|
Posted - 2014.06.07 09:25:00 -
[21] - Quote
Here's one thing I've wondered about this. I gave my corp full API (and alliance some API details too, don't remember exactly what though). So at the very least my corp can read my mail.
I have two messages from GMs in my mailbox. It's against the EULA to share GM correspondence. So if someone pulls a GM mail from my API (and I know you can since I can see them in EVEMon) and posts it somewhere, does this mean that I've violated the EULA? Even if it doesn't, is some trigger happy GM going to assume that it was me who shared it, and bring the hammer down anyway?
I think I'll file a support ticket.
I could just delete the message but any rule that says I'm obligated by EULA to delete private correspondence is a rule that needs revision. No, this isn't it at all. Make it more... psssshhhh. |
Jandice Ymladris
Aurora Arcology
676
|
Posted - 2014.06.07 09:27:00 -
[22] - Quote
James Amril-Kesh wrote:Here's one thing I've wondered about this. I gave my corp full API (and alliance some API details too, don't remember exactly what though). So at the very least my corp can read my mail.
I have two messages from GMs in my mailbox. It's against the EULA to share GM correspondence. So if someone pulls a GM mail from my API (and I know you can since I can see them in EVEMon) and posts it somewhere, does this mean that I've violated the EULA? Even if it doesn't, is some trigger happy GM going to assume that it was me who shared it, and bring the hammer down anyway?
I think I'll file a support ticket.
I could just delete the message but any rule that says I'm obligated by EULA to delete private correspondence is a rule that needs revision.
You're making a good point here, unless CCP already thought of this and excluded GM mail from the API? (I doubt they thought if it, but you never know!) Still a support ticket for clearance on the matter is a good idea! Mercenaries for peace: Mordu's Legion -á-áSansha Aeon Supercarrier engaged in Haras System! |
James Amril-Kesh
4S Corporation Goonswarm Federation
10353
|
Posted - 2014.06.07 09:28:00 -
[23] - Quote
Jandice Ymladris wrote:You're making a good point here, unless CCP already thought of this and excluded GM mail from the API? (I doubt they thought if it, but you never know!) Still a support ticket for clearance on the matter is a good idea! They didn't, because as I said I can see them in EVEMon. I checked that as I was writing that post. No, this isn't it at all. Make it more... psssshhhh. |
Silvetica Dian
Manson Family Advent of Fate
1085
|
Posted - 2014.06.07 09:34:00 -
[24] - Quote
Conrad Lionhart wrote:Sher Rayet wrote:If you give away full API they read your mails and transactions etc. Go ahead... But is it standard practice? Would you do it if you wanted to join a new corp?
i require full api before i let people join manson. can't speak for others. Money at its root is a form of rationing. When the richest 85 people have as much wealth as the poorest 3.5 billion (50% of humanity) it is clear where the source of poverty is. http://www.theguardian.com/commentisfree/2014/jan/20/trickle-down-economics-broken-promise-richest-85 |
Solai
Jolly Codgers Get Off My Lawn
243
|
Posted - 2014.06.07 09:34:00 -
[25] - Quote
Nevyn Auscent wrote:Except nowhere in there did you actually explain a single thing about how a FULL API rather than a partial actually changes anything. Nor what bits actually help you in checking for spies or running a corp. You just trotted out the old passed down and horribly flawed argument. I'm not about to explain all the details of the API combing process or spy-hunting tactics, if that's what you're fishing for.
The assumption is that if it's not full, then the recruit wants to omit some information, such as their eve mails, wallet transactions, assets, etc, for whatever reason. All of those can be used to assess risk, and weed out BadSpies. Any item that any player would logically wish to hide, for innocent reasons or otherwise, is useful info for risk assessment.
Will it make your recruitment airtight? No, of course not, and no one thinks so. But it does make it easier for a spy to make a mistake. And they do make mistakes, regularly, giving you the opportunity to see them. As opposed to never having the opportunity to see that data.
I've seen it argued that since full API info does not assure you will catch all the spies, then it's worthless. That's a logical fallacy that shouldn't require explaining.
If you believe that a limited API offers equivalent security opportunities, then would you mind giving an example of which elements you'd propose a recruit ought to be able to omit?
Jolly Codgers corp - Bloodthirsty old men of Null-Sec. -á PVP and organizational excellence through maturity, for pilots age 30+. |
Jandice Ymladris
Aurora Arcology
676
|
Posted - 2014.06.07 09:43:00 -
[26] - Quote
James Amril-Kesh wrote:Jandice Ymladris wrote:You're making a good point here, unless CCP already thought of this and excluded GM mail from the API? (I doubt they thought if it, but you never know!) Still a support ticket for clearance on the matter is a good idea! They didn't, because as I said I can see them in EVEMon. I checked that as I was writing that post.
Roger that! Then it's a fully legitimate concern, and considering how dirty some people play this game (meta or otherwise) it would be good to get a CCP reply on this. Mercenaries for peace: Mordu's Legion -á-áSansha Aeon Supercarrier engaged in Haras System! |
Eternus8lux8lucis
Journies End
234
|
Posted - 2014.06.07 10:21:00 -
[27] - Quote
In 10 years Ive never given my full API nor will I ever to any corp no matter how good they think themselves. Strength isnt measured in numbers but in force of will. For if one motived willful individual stands many will fall around him that are weak.
http://tinyurl.com/YarrFace |
Doreen Kaundur
442
|
Posted - 2014.06.07 10:46:00 -
[28] - Quote
Conrad Lionhart wrote:Hey all,
I just came back to the game after being away for over a year.
There is a corp that talked to me about joining, but before I could join, they requested my FULL (not partial) API.
I want to know whether this has become standard practice nowadays for corps recruiting new members.
Back in the day, I just joined a corp without such need for an API, and the only time they needed my API was for teamspeak, and even then a limited API was enough.
So is it safe to give my full API? Is it now standard practice to give your full API to corps that you want to join?
Pfft. That's nothing. One corp asked for my first born.
|
Adriana Nolen
Sama Guild
25
|
Posted - 2014.06.07 11:09:00 -
[29] - Quote
Doreen Kaundur wrote:
Pfft. That's nothing. One corp asked for my first born.
W-space corps are another beast in it's entirety.
|
Adriana Nolen
Sama Guild
25
|
Posted - 2014.06.07 11:12:00 -
[30] - Quote
James Amril-Kesh wrote: I think I'll file a support ticket.
I could just delete the message but any rule that says I'm obligated by EULA to delete private correspondence is a rule that needs revision.
I think CCP Punkutris does API stuff. |
|
|
|
|
Pages: [1] 2 3 4 5 6 :: one page |
First page | Previous page | Next page | Last page |