EVE Search - Account Security issue with EveMON

All Channels

EVE General Discussion

Account Security issue with EveMON

» Click here to find additional results for this topic using Google

Monitor this thread via RSS [?]

Pages: 1 [2] :: one page
Author	Thread Statistics \| Show CCP posts - 0 post(s)
Hllaxiu	Posted - 2006.06.15 17:22:00 - [31] Just update for the paranoid, if you look at the packets sent by the program, it just opens a HTTPS session with 87.237.39.201, which just happens to be myeve.eve-online.com While I had the program open, no information was sent to any ip other than 87.237.39.201, and credentials were exchanged over HTTPS (the actual XML information was sent over HTTP). So don't worry about it! --- Our greatest glory is not in never failing, but in rising up every time we fail. - Emerson
Scorpyn	Posted - 2006.06.15 17:24:00 - [32] Originally by: HippoKing Total time used: not long checking the code, compiling while I'm asleep. You either have a very slow compiler or not very much need for sleep.
Satomila Kunis	Posted - 2006.06.15 17:38:00 - [33] Edited by: Satomila Kunis on 15/06/2006 17:38:45 Spiderweb, You do know that EVEMon can be run in a password safe method right? Just manually download your character xml file via a browser you trust and point EVEMon to it. Then you don't have to enter any account info whatsoever.
Kahlen Rahl	Posted - 2006.06.15 17:59:00 - [34] Originally by: Spiderweb Edited by: Spiderweb on 15/06/2006 15:14:02 The fact that is open source also means that there are some problems with its use: all that is needed is 1 person to change the code appropriately and in the right moment to repost "Useful progs in EVE etc" in the forums for ppl to dl Dude, the sticky about this tool has a direct link to the "official" site of EVEMon. If you decide NOT to download it from there, and subsequently download it from somewhere else, then that's a risk you're taking. So yes, someone could change the code, and host it himself for people to download, but if you're stupid enough to actually do that, then the only person you can blame is yourself. For what it's worth tho I think that the binary download on the EVEMon site is pretty safe, or otherwise people would've publically lynched the guy who made it some time ago. Originally by: Spiderweb Critism on security shouldnt be taken lightly, and also its a sign of what could be done better. Tell me again what exactly could have been done better? Provide a source only download? As long as you know that where you download something from is the "official" site, you shouldn't worry too much about it. Not that I disagree on the criticism part there, but bring forth arguments. An argument like "oh noes, it could be used in netcafe scams!" doesn't hold much ground I think. Again, if someone was stupid enough to use an EVEMon installation already present in an internet cafe, it's his own risk.
hydraSlav	Posted - 2006.06.15 18:00:00 - [35] Originally by: Spiderweb Edited by: Spiderweb on 15/06/2006 15:14:02 The fact that is open source also means that there are some problems with its use: all that is needed is 1 person to change the code appropriately and in the right moment to repost "Useful progs in EVE etc" in the forums for ppl to dl If anyone downloads a "republished" version from anywhere other than the original source, it is their own fault. No one can prevent people from falling for stupid tricks and losing money. I downloaded my EVEMon from the original source, and didnt think twice when i entered the password =================================== Above comments are my personal views, and do not represent my corporation or alliance, unless otherwise indicated
Novarei	Posted - 2006.06.15 18:14:00 - [36] Originally by: Spiderweb Critism on security shouldnt be taken lightly, and also its a sign of what could be done better. Such as... What pray-tell could they do better?
Michayel Lyon	Posted - 2006.06.15 18:20:00 - [37] Originally by: Spiderweb ... lots of funny stuff... Quick, somebody call Seleene! Someone is in dire need of a tinfoil hat!
DukDodgerz	Posted - 2006.06.15 18:41:00 - [38] Originally by: Mason X firewalls suck. the reason they suck is because clueless people use them and then whine in threads like this. you have no idea what you are talking about. ohboy! either you are clueless yourself or trolling. the correct phrase should have been "software firewalls SUCKMAJORDONKY---uh---orbs!". A firmware/hardware firewall is GREAT. Look at a Linksys broadband router. Cheap and effective firewall for most consumers, and it will not use your PC resources to popup worthless anoying BS messsages that an internet app is accessing the internet (omfgnoooooeees, Firefox is trying to access the intewebs, call da police!). What you install is up too you, but rule of thumb, only download from the original site(who made the app). If unsure about the app, DO NOT INSTALL IT. Simple rules that work very well unless you ignore them. FRODO HAS FAILED; BUSH HAS THE RING!!! The Hippo mating ritual
HippoKing	Posted - 2006.06.15 18:42:00 - [39] Originally by: Scorpyn Originally by: HippoKing Total time used: not long checking the code, compiling while I'm asleep. You either have a very slow compiler or not very much need for sleep. I do EVERYTHING that is resource intensive which doesn't actually need me there all the time overnight, so it doesn't mess with my interwebs experience. My PC is usually on overnight on p2p most nights.
Scorpyn	Posted - 2006.06.15 18:48:00 - [40] Originally by: HippoKing Originally by: Scorpyn Originally by: HippoKing Total time used: not long checking the code, compiling while I'm asleep. You either have a very slow compiler or not very much need for sleep. I do EVERYTHING that is resource intensive which doesn't actually need me there all the time overnight, so it doesn't mess with my interwebs experience. My PC is usually on overnight on p2p most nights. If you want to compile a whole OS, such as a linux system, then a nap could be in order. But for a small progam like EVEMon? You wouldn't make it to the bed with a proper compiler.
Drizit	Posted - 2006.06.15 19:15:00 - [41] Edited by: Drizit on 15/06/2006 19:15:33 Originally by: HippoKing I never use tools like this, but should I choose to use eveMON, I would look for the connections it makes in the source (not very hard if you have a copy of Visual Studio 2005) and compile my own binary. Total time used: not long checking the code, compiling while I'm asleep. It even tells you where you can get an editor/compiler free on the web page along with the open source download. You don't need to pay megabucks for VC or VS. You can easily check the source code with notepad if you are really paranoid and don't trust the freebie download they suggest. I've been using it for 3 months now and checked the source and compiled it so I know it's as safe as any internet based program can be. Spiderweb: The simple answer is either use it with the XML downloads of your character or don't use it at all if you are that worried about it --
HippoKing	Posted - 2006.06.15 19:17:00 - [42] Originally by: Scorpyn Originally by: HippoKing Originally by: Scorpyn Originally by: HippoKing Total time used: not long checking the code, compiling while I'm asleep. You either have a very slow compiler or not very much need for sleep. I do EVERYTHING that is resource intensive which doesn't actually need me there all the time overnight, so it doesn't mess with my interwebs experience. My PC is usually on overnight on p2p most nights. If you want to compile a whole OS, such as a linux system, then a nap could be in order. But for a small progam like EVEMon? You wouldn't make it to the bed with a proper compiler. fair enough
Splagada	Posted - 2006.06.15 22:49:00 - [43] Edited by: Splagada on 15/06/2006 22:49:29 edit : doh - Member of [AAST] Owner of eve-corps.net evemail me if you need a free forum for your corp
Lyra VX	Posted - 2006.06.15 23:13:00 - [44] People willingly hand over logins, passwords, bank details (etc) to Internet Explorer on a very frequent basis, and you can't even see the code for it. Oh noes?
Lord Derik	Posted - 2006.06.15 23:50:00 - [45] Edited by: Lord Derik on 15/06/2006 23:51:12 I installed EveMon on my machine and watched my firewall logs. Obviously it went to eve port 80, but why does EveMon go to the authors website? 207.44.198.28:80 static.evercrest.com www.evercrest.com It did this 2 out of about 500 times it accessed the internet. Why is this program calling home?
MysticNZ	Posted - 2006.06.16 00:01:00 - [46] Microsoft have a free C# compiler. Just get a free IDE and compile it. Of course, the compilers that are charged for are usally faster. -=====-
MysticNZ	Posted - 2006.06.16 00:02:00 - [47] Originally by: Lord Derik Edited by: Lord Derik on 15/06/2006 23:51:12 I installed EveMon on my machine and watched my firewall logs. Obviously it went to eve port 80, but why does EveMon go to the authors website? 207.44.198.28:80 static.evercrest.com www.evercrest.com It did this 2 out of about 500 times it accessed the internet. Why is this program calling home? Probably to see how many people are using it. Use a packet sniffer like ertheal to see. -=====-
SGXiphias	Posted - 2006.06.16 00:03:00 - [48] Probally calls home to let you know if theres updates, ran ethereal on it and everything checks out.
Lord Derik	Posted - 2006.06.16 00:14:00 - [49] Probably(s) and Maybe(s) Huh? Did the Author state everything it is suppose to do, like check for updates and monitor how many users there are?
Lojik	Posted - 2006.06.16 01:02:00 - [50] If your unsure about using the automatic skill system just go inot your character sheet on eve-online and download the xml file and save it as a .xml then load it manulayy into the eve-mon program, the xml fle does not contain any account information.
Talori'i	Posted - 2006.06.16 03:10:00 - [51] Originally by: Lord Derik Probably(s) and Maybe(s) Huh? Did the Author state everything it is suppose to do, like check for updates and monitor how many users there are? When it first came out EVEMon self-updated several times for me. So its just checking for updates. 4 8 15 16 23 42
Tachy	Posted - 2006.06.16 07:33:00 - [52] Download the code. Ccheck it. Compile and only use it if you find it does what you feel comfortable with. --==*-- Megadon CCP wanted a well known artist and celebrity to test the new font so it's approval would be well known. They got Ray
Lyra VX	Posted - 2006.06.16 09:28:00 - [53] It certainly does check for updates, but the message is still "if you aren't comfortable with using it, don't".

Pages: 1 [2] :: one page
First page \| Previous page \| Next page \| Last page

COPYRIGHT NOTICE
EVE Online, the EVE logo, EVE and all associated logos and designs are the intellectual property of CCP hf. All artwork, screenshots, characters, vehicles, storylines, world facts or other recognizable features of the intellectual property relating to these trademarks are likewise the intellectual property of CCP hf. EVE Online and the EVE logo are the registered trademarks of CCP hf. All rights are reserved worldwide. All other trademarks are the property of their respective owners. CCP hf. has granted permission to EVE-Search.com to use EVE Online and all associated logos and designs for promotional and information purposes on its website but does not endorse, and is not in any way affiliated with, EVE-Search.com. CCP is in no way responsible for the content on or functioning of this website, nor can it be liable for any damage arising from the use of this website.