Pages: 1 2 3 [4] 5 6 :: one page |
|
Author |
Thread Statistics | Show CCP posts - 1 post(s) |
James Amril-Kesh
4S Corporation Goonswarm Federation
10406
|
Posted - 2014.06.09 21:36:00 -
[91] - Quote
TigerXtrm wrote:If a corp asks for a full API, look for a different corp. If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp. No, this isn't it at all. Make it more... psssshhhh. |
Adira Nictor
Sebiestor Tribe Minmatar Republic
72
|
Posted - 2014.06.09 21:36:00 -
[92] - Quote
BeBopAReBop RhubarbPie wrote:Ramona McCandless wrote:Jinn Aideron wrote:Sibyyl wrote:I have yet to see anyone make a strong (any?) case in this thread for why Mail needs to be in a full API. As mentioned before, I don't have issues sharing everything else. Because they can ask for it. It's in the API CCP provides, so they ask it. If your payment details were in there, they'd ask that, too. As goes for sexual preferences and shoe size. And that's the whole case 'for' this. It's for everyone to decide not to participate in this bullshit. Exactly If you dont like it, there's plenty of Corps willing to accept you without it If your name is McCandless for example, you can join The Clan, we never ask for API. Now I know the name of my next awox alt =D OP, Full api is not necessary for corp background checks, however so many sections should be checked that it's often easier to ask for a full api. If I were running corp security for a corp that I felt needed decent security (read as actually has stuff worth stealing/blowing up) I would ask for the following sections: Everything in the "Account and Market" section. Mail Messages (If I found any suspicious in here, I might request mail bodies, or reject the application outright) Mail Lists Contact Notifications Contact List Contracts CharacterInfo Asset list Character Sheet is useful for evaluating an applicant, but not for security reasons That's the minimum. The api must be set to reveal all characters on the account, and any one way monetary transactions should be noted. The api background check should be combined with searches on eve-live, eve-search, killboards, and basic background checks on previous corporations/contacts. Sometimes even with all of this info its not enough. The reality is that recruiting is only the first line of security around a corporation. Even weeding out 80% of potential spies and awoxers makes the corp significantly safer. Internal corp security should be used to try to handle the ones that get in. Policies to demand activity, and force corp members to have a stake in the corp's survival are important as is careful distribution of information.
This is really sound advice. I am glad dumb CEOs and Recruitment officers don't read the forums. It would make my job that much harder. |
Alphea Abbra
Common Sense Ltd Nulli Secunda
769
|
Posted - 2014.06.09 21:44:00 -
[93] - Quote
Othran wrote:I simply said that IME if somebody could read your evemails then at some point they will. There WILL be someone in the corp/alliance sad enough to go do that just because they can. Its not like you're going to be a spai & evemail from the spai account anyway tl;dr its not that big a deal IME to say you're not getting mail/contacts I just checked what kind of mails I have, right now: 2 mails from former CSM Trebor during his mail-campaign in 2012, 1 with the questionnaire to join the corp that merged into my current one, 1 mail about a station undock status during an OP, 1 about helping a coalitionmate with some website, 2 from a corp mate about some ships and mods he moved for me, 1 from CCP Games about the 2013 CSM campaign, 1 mail regarding corp courier service, 2 from alliance mates about hangar-sales, 1 as an answer after I checked some moons (And POSes), 3 about my avatar looking good and goth, and 1 from Solecist about liking a post. I have one thing to say to whoever wants to read through these mails: You brought that on yourself, GLHF. Now, I also have a ton of alliance and corp mails. If they (You know who I am talking about! The evildoers, those bastards) want to look up corp or alliance mails from I joined till now, I think they are wasting their time. Now, I did delete all the corp and alliance mails from corps I left. First, because I fail to see why they'd want months old poor intel they could also get via eveskunk, and secondly because I intend to do the same favour if I leave this one. I think, deep down, on the balance, they'd rather want that than they want the impeccable insight into IRC's alliance mails during my time there. I can't remember if it was a full API then, or if that came later.
James Amril-Kesh wrote:Here's one thing I've wondered about this. I gave my corp full API (and alliance some API details too, don't remember exactly what though). So at the very least my corp can read my mail.
I have two messages from GMs in my mailbox. It's against the EULA to share GM correspondence. So if someone pulls a GM mail from my API (and I know you can since I can see them in EVEMon) and posts it somewhere, does this mean that I've violated the EULA? Even if it doesn't, is some trigger happy GM going to assume that it was me who shared it, and bring the hammer down anyway?
I think I'll file a support ticket.
I could just delete the message but any rule that says I'm obligated by EULA to delete private correspondence is a rule that needs revision. Reverse rule lawyer? Awesome, I like that. Make sure to get them to mail the response to you though.
That'll show them! |
Paul Panala
Caldari Colonial Defense Ministry Templis CALSF
181
|
Posted - 2014.06.09 21:44:00 -
[94] - Quote
Yes, it is common. I find access to eve mail to be a bit invasive. I normally give them everything but that and they don't typically complain. If I had eve mail I wanted to hide, I would just delete it.
IMO about the only thing they can get from an API is what you typically do in-game and if they have any alts you exchange ISK with. And the fact that you are willing to provide an API key says a little... |
Ireland VonVicious
Vicious Trading Company
315
|
Posted - 2014.06.10 02:18:00 -
[95] - Quote
Othran wrote:I've been in corps/alliances where it was standard practice to demand a full API.
Most corps probably will insist on an API which pulls your wallet transactions though - if you're bothered about someone seeing the specifics of how you make isk then make a trade alt.
This only works for high sec and small time traders.
Rorqual/Jump Freighter/Max trade skills are just a few reasons trade alts are not always the way to go.
Although anyone who uses all those has 2 alts on the same account to use as trade alts. (( War time hauler / cynos )) It won't help much since anyone asking for an API with half a brain will ask for full account not just pilot. (( This goes for custom API's as well ))
In short your idea doesn't always work. |
Adira Nictor
Sebiestor Tribe Minmatar Republic
77
|
Posted - 2014.06.10 02:28:00 -
[96] - Quote
Ireland VonVicious wrote:Othran wrote:I've been in corps/alliances where it was standard practice to demand a full API.
Most corps probably will insist on an API which pulls your wallet transactions though - if you're bothered about someone seeing the specifics of how you make isk then make a trade alt. This only works for high sec and small time traders. Rorqual/Jump Freighter/Max trade skills are just a few reasons trade alts are not always the way to go. Although anyone who uses all those has 2 alts on the same account to use as trade alts. (( War time hauler / cynos )) It won't help much since anyone asking for an API with half a brain will ask for full account not just pilot. (( This goes for custom API's as well )) In short your idea doesn't always work.
You would be amazed how many people don't know the difference between All character api and just a single character api, or how to tell which one you gave them. |
Inxentas Ultramar
Ultramar Independent Contracting Advanced Amateurs
1305
|
Posted - 2014.06.10 15:13:00 -
[97] - Quote
James Amril-Kesh wrote:TigerXtrm wrote:If a corp asks for a full API, look for a different corp. If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp. You normally aren't this blunt, James.
You do realize you can define hanger access using Roles and Titles right? Then you might also realize you can fully control who has access to what hanger, making it possible to recruit new people without them having access to sensitive corporate hangers.
Since assets can be remotely moved from one office hanger to another, proper access settings are more usefull to prevent actual theft then an API key, as they can be used to 100% guarantee a person doesn't get access to expensive assets. I'd be more concerned with awoxing then theft. |
BeBopAReBop RhubarbPie
Unleashed Pestilence
665
|
Posted - 2014.06.10 19:34:00 -
[98] - Quote
Inxentas Ultramar wrote:James Amril-Kesh wrote:TigerXtrm wrote:If a corp asks for a full API, look for a different corp. If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp. You normally aren't this blunt, James. You do realize you can define hanger access using Roles and Titles right? Then you might also realize you can fully control who has access to what hanger, making it possible to recruit new people without them having access to sensitive corporate hangers. Since assets can be remotely moved from one office hanger to another, proper access settings are more usefull to prevent actual theft then an API key, as they can be used to 100% guarantee a person doesn't get access to expensive assets. I'd be more concerned with awoxing then theft. I was astounded to learn that a corp that I joined awhile back flew bhaalgorns and capitals, and never asked for an api. New player resources: http://wiki.eveuniversity.org/Main_Page - General information http://www.evealtruist.com/p/know-your-enemy.html - Learn to PvP http://belligerentundesirables.com/ - Safaris, Awoxes, Ganking and Griefing-á |
Ramona McCandless
The McCandless Clan
5154
|
Posted - 2014.06.10 19:47:00 -
[99] - Quote
BeBopAReBop RhubarbPie wrote:Ramona McCandless wrote:
If your name is McCandless for example, you can join The Clan, we never ask for API.
Now I know the name of my next awox alt =D
You will be in good company
We are all AWOX alts
Well, apart from me
Im an AWOX main "If someone doesn't appreciate your presence, make them appreciate your absence." - Anon. "Question asked, insults exchanged, solutions given, face palms had, problem solved, off topic posts posted, thread locked." - ISD Ezwal |
Kristalll
Valkyrie Professional Resources
297
|
Posted - 2014.06.10 19:55:00 -
[100] - Quote
Conrad Lionhart wrote:Sher Rayet wrote:If you give away full API they read your mails and transactions etc. Go ahead... But is it standard practice? Would you do it if you wanted to join a new corp?
Yes, and I do. GÇ£Die tryingGÇ¥ is the proudest human thing. |
|
Grath Telkin
Sniggerdly Pandemic Legion
2532
|
Posted - 2014.06.10 21:12:00 -
[101] - Quote
And people wonder why its so easy for us to get spies into their craptastic corps..... Malcanis - Without drone assign, the slowcat doctrine will wither and die.
|
Kijo Rikki
Powder and Ball Alchemists Union The Predictables
749
|
Posted - 2014.06.10 21:14:00 -
[102] - Quote
No less than 12, right? It is really hard to change your signature settings |
Grath Telkin
Sniggerdly Pandemic Legion
2532
|
Posted - 2014.06.10 21:23:00 -
[103] - Quote
Kijo Rikki wrote:No less than 12, right? If you saw our budget you'd know how accurate that number is.
Malcanis - Without drone assign, the slowcat doctrine will wither and die.
|
Kijo Rikki
Powder and Ball Alchemists Union The Predictables
751
|
Posted - 2014.06.10 21:46:00 -
[104] - Quote
Probably not unless you told me how much spies are worth. I do often wonder what your budget looks like. It is really hard to change your signature settings |
Grath Telkin
Sniggerdly Pandemic Legion
2532
|
Posted - 2014.06.10 22:20:00 -
[105] - Quote
Kijo Rikki wrote:Probably not unless you told me how much spies are worth. I do often wonder what your budget looks like.
Wartime about 50-60bn a month
Peacetime (now) about 30-35b a month.
Malcanis - Without drone assign, the slowcat doctrine will wither and die.
|
James Amril-Kesh
4S Corporation Goonswarm Federation
10424
|
Posted - 2014.06.10 23:07:00 -
[106] - Quote
Inxentas Ultramar wrote:James Amril-Kesh wrote:TigerXtrm wrote:If a corp asks for a full API, look for a different corp. If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp. You normally aren't this blunt, James. You do realize you can define hanger access using Roles and Titles right? Then you might also realize you can fully control who has access to what hanger, making it possible to recruit new people without them having access to sensitive corporate hangers. Since assets can be remotely moved from one office hanger to another, proper access settings are more usefull to prevent actual theft then an API key, as they can be used to 100% guarantee a person doesn't get access to expensive assets. I'd be more concerned with awoxing then theft. If they're not security conscious enough to ask for API, they're probably not security conscious enough to segregate assets intelligently either. No, this isn't it at all. Make it more... psssshhhh. |
Plug in Baby
Crouching Woman Hidden Cucumber
222
|
Posted - 2014.06.10 23:20:00 -
[107] - Quote
Why would you want to join a corp that didn't require a full (or close to full) API?
Why would you join a corp that doesn't take even basic security measures? You are putting your trust and assets in the hands of your corp, don't you want to put as many barriers as possible up to keep undesirable types out. This is not a forum alt, this is a forum main. |
Nevyn Auscent
Broke Sauce
1369
|
Posted - 2014.06.10 23:45:00 -
[108] - Quote
Plug in Baby wrote:Why would you want to join a corp that didn't require a full (or close to full) API?
Why would you join a corp that doesn't take even basic security measures? You are putting your trust and assets in the hands of your corp, don't you want to put as many barriers as possible up to keep undesirable types out. Because a full API is not a basic security measure. It's a regurgitated meme that a full API is a security measure. While the reality is it's nothing of the sort. Certain API checks are security measures. But won't stop a clean account paid for anyway.
Most people asking for Full API's have no idea what they are actually looking for and just do it because someone told them you need to ask for full API's for corp recruitment.
Someone asking for a very precisely targeted partial is much more likely to have a 'secure' corp as they actually know what they are looking at and will be effective with their checks. |
Fer'isam K'ahn
None Of One
69
|
Posted - 2014.06.11 17:29:00 -
[109] - Quote
Adira Nictor wrote:Giving your Full API is only a bad idea when you have something to hide. Thankfully it doesn't matter most of the time because the recruiters don't know what they are looking for, or even how to access the info.
Haha, had to snigger at that so hard, you must be a US cititzen (best guess). No terrorist act or revolution will ever cost you as much real liberty and freedom as this basic statement of yours. Its the foundation for every corrupt exploit to subjucate and control the populus. Security is always bought with liberty, the illusion of security is even more expensive.
Any corp wanting to look at more then my skillpoints can do without me, everything else they need to know is already available ingame or through 3rd party aps.
Full API, never. |
Ramona McCandless
The McCandless Clan
5204
|
Posted - 2014.06.11 17:32:00 -
[110] - Quote
Fer'isam K'ahn wrote:Adira Nictor wrote:Giving your Full API is only a bad idea when you have something to hide. Thankfully it doesn't matter most of the time because the recruiters don't know what they are looking for, or even how to access the info. Haha, had to snigger at that so hard, you must be a US cititzen (best guess). No terrorist act or revolution will ever cost you as much real liberty and freedom as this basic statement of yours. Its the foundation for every corrupt exploit to subjucate and control the populus. Security is always bought with liberty, the illusion of security is even more expensive. Any corp wanting to look at more then my skillpoints can do without me, everything else they need to know is already available ingame or through 3rd party aps. Full API, never.
Freedom (whatever the hell that is supposed to mean) sure buys a lot of bread and stops crime
Oh wait.
That's security
I always get those mixed up "If someone doesn't appreciate your presence, make them appreciate your absence." - Anon. "Question asked, insults exchanged, solutions given, face palms had, problem solved, off topic posts posted, thread locked." - ISD Ezwal |
|
Knights Armament
Deep Core Mining Inc. Caldari State
247
|
Posted - 2014.06.11 17:38:00 -
[111] - Quote
My corp requires complete trust, one of the requirements of initiation is to lay in a coffin in the nude, and tell your most intimate secrets, unfortunately for corporation my life is rather uninteresting, so to be convincing I had to make things up that would be considered damaging to my character if my society were to disclose my actions to the public. They also take pictures of your naked body as collateral in the event one would betray said corporation.
You must understand, joining a corp is not about entitlement.
***** ass niggas cant understand keep frontin when we pull the gauge on ya u be duckin 4 real
https://secure.eveonline.com/trial/?invc=29554516-05f9-4eca-a942-32e1701a6569&action=buddy |
Ramona McCandless
The McCandless Clan
5205
|
Posted - 2014.06.11 17:40:00 -
[112] - Quote
Knights Armament wrote:..............
Your NPC corp?
Oh and reported, btw "If someone doesn't appreciate your presence, make them appreciate your absence." - Anon. "Question asked, insults exchanged, solutions given, face palms had, problem solved, off topic posts posted, thread locked." - ISD Ezwal |
Kesshisan
108
|
Posted - 2014.06.11 18:10:00 -
[113] - Quote
Ireland VonVicious wrote:Full API allows access to your market activities.
Nobody trading should ever give such information away to any corporation.
Unless you don't mind them cherry picking your profits.
If a corporation is too lazy to ask for exactly what they need and able to tell you why keep looking.
In the post custom API age no reason to use anything but custom.
It took 69 posts to get to this point. Thank you Ireland VonVicious.
I have one account with two characters on it. When I first started playing EvE, I paused my main (This guy) for about 2 weeks to train up a station trading alt. He lives in Jita and flips goods for profit.
Also this guy (who has actual spaceship skills) finds regions missing key modules and ships that capsulers use and hauls the goods out there. He then "fills that hole." If I'm the only one filling that hole then there is profit to be made. If there are two or three of us, the individual profit decreases drastically.
Not giving my full API isn't about not letting you read the smutty evemail I have. It isn't about not letting you know who my alts are. It isn't about hiding modules on my ships. It's about hiding my profits. If I gave anyone my full API, they could easily usurp my profits. This is an unacceptable risk to me. I used to think that any strategy which required your victim to be stupid to work wasn't sound.
...then I started playing EvE online. |
Eyrun Mangeiri
Brave Newbies Inc. Brave Collective
12
|
Posted - 2014.06.11 18:12:00 -
[114] - Quote
Plug in Baby wrote:Why would you want to join a corp that didn't require a full (or close to full) API?
Why would you join a corp that doesn't take even basic security measures? You are putting your trust and assets in the hands of your corp, don't you want to put as many barriers as possible up to keep undesirable types out.
Brave Newbies Inc. does not require anything except from application ingame and everyone seems to have a great time here. I can see what you see not - vision milky then eyes rot. When you turn they will be gone - whispering their hidden song. |
Otin Bison
Bison Industrial Inc Thundering Herd
8
|
Posted - 2014.06.11 18:51:00 -
[115] - Quote
Graygor wrote:Scipio Artelius wrote:Full API seems a bit much unless they have a specific reason after checking killboards, eveboard, eve-gate, etc.
A partial API is normally enough.
As an observation though, I don't think many Corps really dedicate time to learning proper security.[ This. A guide to eve recruiting for new players.
Fricken hysterical |
Qaping Pi
Solvent Green Recycling
1
|
Posted - 2014.06.11 19:00:00 -
[116] - Quote
Are these corporations usually willing to share the full, non-expiring API's of their members' accounts, including their recruiters, directors and CEO's, upon submitting your own? You know, for the same reason they want to have yours? |
Maxpie
MUSE Buy-n-Large Metaphysical Utopian Society Enterprises
432
|
Posted - 2014.06.11 19:07:00 -
[117] - Quote
We require a real life resume, 24/7 remote desktop control of your computer and we have a monitor reside with you in your home ready to cut your internet connection at the first sign of trouble. We're working on implanting remotely detonated sub-cutaneous explosives in our members, but we just don't have the funds for that yet.
No good deed goes unpunished |
|
ISD Ezwal
ISD Community Communications Liaisons
1543
|
Posted - 2014.06.11 20:35:00 -
[118] - Quote
I have removed some rule breaking posts and those quoting them. As always I let some edge cases stay. Please people, keep it on topic and above all civil!
The Rules: 4. Personal attacks are prohibited.
Commonly known as flaming, personal attacks are posts that are designed to personally berate or insult another forum user. Posts of this nature are not beneficial to the community spirit that CCP promote and as such they will not be tolerated.
6. Racism and discrimination are prohibited.
Racism, gender stereotyping and hate speech are not permitted on the EVE Online Forums. Derogatory posting that includes race, religion or sexual preference based personal attacks and trolling can result in immediate suspension of forum posting privileges. ISD Ezwal Captain Community Communication Liaisons (CCLs) Interstellar Services Department |
|
Solai
Jolly Codgers Get Off My Lawn
258
|
Posted - 2014.06.11 21:18:00 -
[119] - Quote
Nevyn Auscent wrote:Plug in Baby wrote:Why would you want to join a corp that didn't require a full (or close to full) API?
Why would you join a corp that doesn't take even basic security measures? You are putting your trust and assets in the hands of your corp, don't you want to put as many barriers as possible up to keep undesirable types out. Because a full API is not a basic security measure. It's a regurgitated meme that a full API is a security measure. While the reality is it's nothing of the sort. Certain API checks are security measures. But won't stop a clean account paid for anyway. Most people asking for Full API's have no idea what they are actually looking for and just do it because someone told them you need to ask for full API's for corp recruitment. Someone asking for a very precisely targeted partial is much more likely to have a 'secure' corp as they actually know what they are looking at and will be effective with their checks. When you say 'precisely targeted partial,' would you be so kind as to tell us which elements you propose to exclude?
Jolly Codgers corp - Bloodthirsty old men of Null-Sec. -á PVP and organizational excellence through maturity, for pilots age 30+. |
Xuixien
The Dark Space Initiative Scary Wormhole People
1257
|
Posted - 2014.06.12 00:33:00 -
[120] - Quote
I only give my full API to corp's worth joining.
And I only join corp's worth joining (I learned through many fail corps how to find a good corp). This is-á a signature. |
|
|
|
|
Pages: 1 2 3 [4] 5 6 :: one page |
First page | Previous page | Next page | Last page |