Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Katlyn Koreth
Deep Core Mining Inc. Caldari State
5
|
Posted - 2014.11.26 23:21:18 -
[1] - Quote
I am looking to join a corp and they want an API key.. does that just let them see info about my character? Or does it give them some measure of control over it? Weary of being scammed.
Also, when I create the key.. there are 3 lines. ID, Verification Code, and Mask.. which one would I give them?
Thanks |
Sabriz Adoudel
Glorious Revolutionary Armed Forces of Highsec CODE.
3764
|
Posted - 2014.11.26 23:44:27 -
[2] - Quote
It gives them no control over your character but quite a bit of information about your activities past and present.
A full API will tell a recruiter if you have killed corpmates before, if you have telltale signs of being a spy (such as mysterious sources of income) and also who your alt characters are. In particular they are also looking for signs of potential corp thieves.
I advise you to *never join a corporation that does not ask for an API*. If they'll let you in without an API check, they will also let people like me in, and that could cost them (and you) badly.
Chaos. Opportunity. Destruction. Excitement... Sabriz Adoudel for CSM 10
|
Brink Albosa
Screaming Hayabusa Neo-Bushido Movement
66
|
Posted - 2014.11.27 00:52:56 -
[3] - Quote
They can see all your wallet transactions the last three months and read your mails. Where your assets are. Everything is read only.. Like Ms. Adoudel says they can't control your character or something.
And you can delete the API key anytime.
They're trying to build a 'profile' of you and what you say and maybe find anything that would be a flag or not true or something. |
Sabriz Adoudel
Glorious Revolutionary Armed Forces of Highsec CODE.
3773
|
Posted - 2014.11.27 01:15:05 -
[4] - Quote
As far as being scammed goes, an API key helps a cunning scammer know how much to ask you for.
No point asking for a three billion ISK security deposit from someone with only one billion in assets.
That's the limit of its use in scamming, however - getting intel about a mark.
Chaos. Opportunity. Destruction. Excitement... Sabriz Adoudel for CSM 10
|
Tau Cabalander
Retirement Retreat Working Stiffs
4382
|
Posted - 2014.11.27 01:30:27 -
[5] - Quote
To create a full access API key, click below. Give it a name (use name of the corp, or the corp ticker), check "No Expiry" and click "Submit". https://community.eveonline.com/support/api-key/CreatePredefined?accessMask=268435455
Make separate API keys for everything! This allows you to change and delete each one independently.
Never use a fuill-access key on an un-trusted website!
For example, I have: * A full-access API key named "RTRMT" for my corp * A full-access API key called "Full Access" that I only use for myself with EVEmon / EFT / etc. * A single-character and partial-access API key called "EVEboard - Tau" key for EVEboard.com
Trivia: 268435455 = 2^28 - 1 or 28 consecutive "1" bits in binary. |
Ralph King-Griffin
Lords.Of.Midnight The Devil's Warrior Alliance
7118
|
Posted - 2014.11.27 01:53:39 -
[6] - Quote
from the page
Quote:What is an API key? What do I use it for? The API key is a private code that identifies your account and allows third party programs and web sites to access information about your characters and corporations. Using this data, such utilities can improve your EVE experience by providing useful functionality such as wallet exports, skill training notifications, and other tools.
Is this safe? Can someone steal my account? It is safe to provide your API key to applications and web sites as long as you are prepared to allow the application or web site to see your character and corporation information. You can specify which information is accessible for each customizable API key.
Sharing an API key does NOT give people access to your account while sharing your account password would. Therein lies the whole purpose of API keys. An API key only allows the recipient to view your character and corporation data but gives them NO control over it. They are NOT able to log in to the game or post on the forums with the API information. No part of the API key information is in any way generated from your account password - there is no way to calculate your password using this information.
This is the only safe way to give programs and web sites access to your data. Do not give out your account username or password to any person, program, or web site. Please keep in mind that doing so is a violation of the EULA and can lead to account termination.
I still don't like it. If you are not certain that the web site or program asking for your API key is safe, please do not give it to them! You are responsible for any usage of the information obtained by using your API keys.
I gave someone my API key and now I want them to stop using it! If you believe that someone is misusing your API key, you can delete it from the list above or simply change the Verification Code. Please note that all programs and web sites that are using your old API key information will no longer be able to access your data unless you provide them with the updated info or a new API key.
You can view API activity on your account by using the API Access Log. If you believe someone is misusing one of your API keys, please change the Verification Code or delete the API key from the list above.
"I'm also quite confident that you are laughing
and it's the kind of laugh that gives normal people shivers."
=]I[=
|
Ethikos
SniggWaffe WAFFLES.
47
|
Posted - 2014.11.27 03:00:05 -
[7] - Quote
As an FYI, asking for an API is a very standard procedure for recruiting someone into a corporation. The corporation is just as concerned about allowing a thief or awoxer into their corporation as you are about being scammed. As noted above, the API key itself gives zero control over you character but can provide a lot of information concerning your character to the corporation.
I have only recruited for Sniggwaffe, but can tell you we require Full APIs. I will assume a lot of other corporations follow this practice. Make sense?
https://forums.eveonline.com/default.aspx?g=posts&t=266074 - Sniggwaffe (Waffles)
|
Inxentas Ultramar
Ultramar Independent Contracting
1587
|
Posted - 2014.11.27 12:48:37 -
[8] - Quote
Sabriz Adoudel wrote:I advise you to *never join a corporation that does not ask for an API*. If they'll let you in without an API check, they will also let people like me in, and that could cost them (and you) badly. While Sabriz is absolutely right (+índ indicates perfectly why handing out an API key is usually in your favour) I'd like to indicate that joining a corp leaving expensive assets available to all members is even worse. You see, the API key in and of itself does not allow you any privileges. Those are determined by Roles and Titles in the corporation. The security measures of one corp could be too lax (or too tight) for another. In my experience the types that tell you colorfull stories of past exploits rarely double-cross the guy they are straight-up with, it's the silent types that will try to nick your stuff. A bit like how crime works IRL I guess, lol.
Examples?
Say you do capital warfare most of the time. An Awox will cost you a few billion and your hangers are laced with expensive modules. You would be stupid not to ask for API information recruiting your typical (cap-capable) pilot.
Say you do frigate PVP most of the time. An Awox will cost you only a few million, and your corp hangers are filled to the brim with random PVP junk totalling less then 100m. Putting clueless newbie through the API process is offputting for them, so you decide to only ask for API keys in exchange for access to the hanger with Only Slightly Better Stuff. |
Lord Battlestar
Faulcon de Lazy
192
|
Posted - 2014.11.28 20:25:01 -
[9] - Quote
Lots of corps use it for security purposes, but the API's primary purpose is to allow 3rd party applications read only access to your account so that they can use that information for whatever purpose. Applications like Evemon just allow you to see your training queue outside of game, but others like EFT can use your api so you can see how your skills effect ship fits etc. The API has to be read only so that a third party application couldn't hijack your account or do worse.
I once podded myself by blowing a huge fart.
|
Steve Wingyip
Republic Military School Minmatar Republic
0
|
Posted - 2014.11.30 07:59:36 -
[10] - Quote
Katlyn Koreth wrote:I am looking to join a corp and they want an API key.. does that just let them see info about my character? Or does it give them some measure of control over it? Weary of being scammed.
Also, when I create the key.. there are 3 lines. ID, Verification Code, and Mask.. which one would I give them?
Thanks
Make sure it expires. Never trust anyone you don't know in real life. I personally like to play this game without knowing my corp leaders can't stalk everything I do in the game. I am a very loyal player and love committing myself to a corp. But I have been betrayed before by corp leaders giving away my position. So ALWAYS make sure it expires or delete it once they have done their check in my opinion. |
|
Baneken
Arctic Light Inc. Arctic Light
395
|
Posted - 2014.11.30 08:57:37 -
[11] - Quote
Lord Battlestar wrote:Lots of corps use it for security purposes, but the API's primary purpose is to allow 3rd party applications read only access to your account so that they can use that information for whatever purpose. Applications like Evemon just allow you to see your training queue outside of game, but others like EFT can use your api so you can see how your skills effect ship fits etc. The API has to be read only so that a third party application couldn't hijack your account or do worse.
This, your API contains a lot of information but only really sensitive parts are your assets, corp mails, your current location and ship your flying with at the moment. The rest is not so much of use unless you're being recruited for claiming to own a titan or some such (in which case you would get a boot any way soon enough) or not meeting their minimum criteria ie. 20mil SP and a BS while only having skills for a mining barge and a mindset to match.
Other use is for verifying your access to forums, TS and other IT networks that corp may have and some alliances do have very impressive IT-stuff in place. My corp for instance uses google docs in record keeping and such but in the past before google you had to develop your own stuff and API call was a good way to monitor access rights. |
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |