Pages: 1 [2] 3 4 :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
knobber Jobbler
Bat Country Goonswarm Federation
514
|
Posted - 2015.03.03 12:59:05 -
[31] - Quote
Storm Novah wrote: And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Good one. I assume your corp is pretty irrelevant, otherwise it's full of spies and you have no way of knowing if they're on the take or not from another corp or alliance. |
Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2046
|
Posted - 2015.03.03 21:47:53 -
[32] - Quote
Loraine Gess wrote:I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so.
Actually we just prefer not to run our computer game guild like a totalitarian police state. |
Pok Nibin
Filial Pariahs
567
|
Posted - 2015.03.03 22:09:46 -
[33] - Quote
Aralyn Cormallen wrote:What you need to know about API's is:
- They can see your skills. They cannot change your training. - They can see your assets and wallet, and they can see who you have given money to in the past. They cannot take any of those assets or send them on to anyone else. - They can read your mails. They cannot read mails you have deleted, and they cannot send mails in your name. - They can see your contacts. They cannot change any of your personal contacts or add any personal contacts (although, if you join, you will inherit corp/alliance contacts)
If you are giving your API to anyone, you have to ask yourself:.. I'll ask myself whatever the F I want. I'm certainly not going to consult YOU to find out what I should ask my SELF. I find this attitude to be overbearing and useless...which are the two traits most in common with CEOs that demand full APIs. I don't want anyone to read my wallet. Why? It has nothing to do with PRIVACY. It has to do with, the information is useless. CEOs that think they're getting spy information from seeing member's wallets are IDIOTS. I don't want an IDIOT for a CEO, so I don't want my CEO looking at my wallet. I know that makes sense, but does it make sense to YOU? (I seriously doubt it.)
I do not want my CEO reading my contacts; none of my contacts. They are MY contacts. That's why they're called "MY CONTACTS." This informations is of no use to a CEO and can be hilariously manipulated by a SPY to create any impression a SPY wishes to create. If a CEO doesn't know this, then he/she is too dumb to be a CEO and I don't WANT a DUMB CEO so I don't want my CEO looking at MY CONTACTS! Is that too SUBTLE FOR YOU?
If anyone is asking for your API to be in their corp, you have to ask yourself, "Do I want to associate myself with people that are this STUPID?"
Dont fight it; Rejoin your Amarrian patriarchs; You know you want to.
|
Davir Sometaww
Snuff Box Snuffed Out
29
|
Posted - 2015.03.03 22:53:43 -
[34] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this?
Yes. |
Storm Novah
Yada Industries
27
|
Posted - 2015.03.04 00:29:04 -
[35] - Quote
knobber Jobbler wrote:Storm Novah wrote: And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Good one. I assume your corp is pretty irrelevant, otherwise it's full of spies and you have no way of knowing if they're on the take or not from another corp or alliance. Actually the corp is my own and all the drama that accompanies applying for a large corp (not to mention the political drama you deal with once you get in) is the main reason I don't even bother. |
Commander Spurty
Dimension Door We need wards.
1429
|
Posted - 2015.03.04 00:39:01 -
[36] - Quote
No Class wrote:Wow, thanks for the honest responses. I feel allot better about it now.
It's a READ ONLY view of your characters.
The purpose is often to allow for automation of access to secure resources such as forums, communications and 3rd party tools.
Now, if you need to 'hide' something from recruiters, you're probably already too much effort for any entity with over 100 characters in it.
Look here for more details https://developers.eveonline.com/resource/xml-api
Don't be too scared.
There are good ships
And wood ships
And ships that sail the sea
But the best ships are
Spaceships
Built by CCP
|
Jonah Gravenstein
Machiavellian Space Bastards
23191
|
Posted - 2015.03.04 01:07:00 -
[37] - Quote
Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder.
"Remember, as a non-combatant, your best tank is being elsewhere." ~ Abrazzar
Nil mortifi sine lucre.
|
Serene Repose
2325
|
Posted - 2015.03.04 01:22:41 -
[38] - Quote
War Kitten wrote:Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions. If the information is irrelevant, why are you intent on hiding it? Industrial activities can tell your leaders whether or not you're building cap/supercaps and selling them to enemies. Faction war stats can indicate whether you're familiar with lowsec. Just because you haven't done any recruiting and don't think it is useful information doesn't mean it isn't. ... and for large alliances, the API is the best way to keep tabs on hundreds or thousands of people. An active API key is used to authenticate you on forums, teamspeak, jabber, mumble, and various other tools that your group might offer. It's going to be non-negotiable for most serious corps and alliances in the game to maintain an active API key. But if you don't want to be a member of a large organized group, that's entirely your choice, and you can hide all your dirty secrets about faction warfare and how many scourge missiles you've built in the last 3 months. Please. Tell me you didn't say that. You need an API to tell if a corpy is selling capitals to the enemy? The only way this makes sense is if you AREN'T a CEO. Tell me, just how many people in this game can build caps? How many can build caps on the side - UNDETECTED? The best way to keep up with personnel in a large organization is by structural hierarchy and authority delegation. The best way to THINK you're doing all this is to monitor APIs and hallucinate.
...scourge missiles.....yeah...a lot of text you have, but no point.
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|
Scipio Artelius
The Vendunari End of Life
34302
|
Posted - 2015.03.04 01:47:43 -
[39] - Quote
Thora Zhubilai wrote:can i have API key from recruiters, directors or from CEO?... no!
Have you ever asked?
If you applied to join Vendo and we wanted to look at your API (we only use limited when we need them at all), then I'd have no problem handing over mine. None of the Directors or the CEO would have a problem with it.
I'm sure we aren't unique in that regard. We know what people feel about being asked for an API. Only right that they be able to check us out as well.
Come Win At Eve - Join The Vendunari
|
Sibyyl
Gallente Federation
23612
|
Posted - 2015.03.04 02:53:28 -
[40] - Quote
Jonah Gravenstein wrote:Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder.
I had a conversation about this with a friend one time. Don't count on deleting your mails faster than your corp pinging the API and downloading what's there. It's a better policy to not have anything sensitive in email.
I have a hard time following that advice myself.. most or all my mails have some personal content so it is not trivial just to hide myself completely.
Rush to danger, wind up nowhere
Sabriz for CSM go go go
|
|
Eugene Kerner
TunDraGon Cynosural Field Theory.
1531
|
Posted - 2015.03.04 05:54:15 -
[41] - Quote
There is a chance to pick up Vaginal-Herpes in the process.
TunDraGon is recruiting!
"Also, your boobs [:o] " -á
CCP Eterne, 2012
"When in doubt...make a di++k joke."-áRobin Williams - RIP
|
Serene Repose
2326
|
Posted - 2015.03.04 06:00:05 -
[42] - Quote
I knew if we tried hard enough we'd hit the gutter eventually.
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|
Yarda Black
Militaris Industries Northern Coalition.
576
|
Posted - 2015.03.04 11:17:39 -
[43] - Quote
Not asking for a full API is only viable if you have nothing and don't plan on being anything more than a casual player with no real ties .
The guy that stole 600 bill gave his full API, so its not even foolproof on its own. Thieves and spies can grow after recruiting them too. A proper spy will also take the time to manipulate what he can before submitting it. But just ignoring a full API simply means less work for spies and other "destructive" EVE careers. Or in other words; more spies and thieves.
Trusting somebody in EVE you've played with for years is a calculated (and often rewarding) risk. Trusting someone you don't know is plain stupid. Welcome to EVE.
For all ambitious folks out there only one option exists: Play the metagame. Get max intel about everything. That includes a simple thing like a full API. If you don't even take basic steps to try and get at least some intel and weed out the easiest to find scum, good luck protecting yourself against the more experienced ones ....
|
Cartheron Crust
Matari Exodus
160
|
Posted - 2015.03.04 11:39:16 -
[44] - Quote
Never had to submit an API key for a corp I've applied to crew checking in. |
Kiandoshia
Applied Anarchy SpaceMonkey's Alliance
2196
|
Posted - 2015.03.04 12:05:43 -
[45] - Quote
Claud Tiberius wrote: The reason Corps ask for full API is to mainly: - Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. - Other(?). So a great example of what this can do: If your corp is on deployment and your not helping out - the CEO can confirm this by looking at your API. I like to say, It's a great tool for people who inspire to be an NSA equivalent.
You can see that in the corp window and potentially the corp wallet journal =p
But yeah, most of the time, or in my experience, API keys are used to be able to tell what kind of ships you can fly, roles you can fill and that sort of stuff. Since a full API key pretty much shows everything except for private convos (I think), you can also use them to screen a character, figure out alts and all that. |
knobber Jobbler
Bat Country Goonswarm Federation
520
|
Posted - 2015.03.04 12:06:33 -
[46] - Quote
Cartheron Crust wrote:Never had to submit an API key for a corp I've applied to crew checking in.
Great, I can put an alt on this account into your corp for premium super easy awoxing opportunities and you'll never even know. Well I would if your corp was half way relevant. |
Wacktopia
Noir. No Not Believing
775
|
Posted - 2015.03.04 12:09:51 -
[47] - Quote
No Class wrote:Wow, thanks for the honest responses. I feel allot better about it now.
You can always delete the API key at a later date, cutting off the information instantly.
Kitchen sink? Seriousy, get your ship together - -áFleet-Up.com
|
Crest Zah Donartal
Center for Advanced Studies Gallente Federation
3
|
Posted - 2015.03.04 12:18:07 -
[48] - Quote
the largest thefts were not prevented by API...
The only one you can catch by analyzing API are the wouldbee spies/awoxer. The biger ones, ........................................just dream about.
|
Nami Kumamato
School of Applied Knowledge Caldari State
576
|
Posted - 2015.03.04 12:50:29 -
[49] - Quote
Sibyyl wrote:Jonah Gravenstein wrote:Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder. I had a conversation about this with a friend one time. Don't count on deleting your mails faster than your corp pinging the API and downloading what's there. It's a better policy to not have anything sensitive in email. I have a hard time following that advice myself.. most or all my mails have some personal content so it is not trivial just to hide myself completely.
Thanks Sibbs
" And now my ship is oh so cloaked and fit -
I never felt so good, I never felt so hid ! "
- Ramona McCandless, Untitled
|
ChromeStriker
Out of Focus Odin's Call
849
|
Posted - 2015.03.04 12:51:50 -
[50] - Quote
Crest Zah Donartal wrote:the largest thefts were not prevented by API...
The only one you can catch by analyzing API are the wouldbee spies/awoxer. The biger ones, ........................................just dream about.
It puts a barrier up between the corp and awoxers/theft.... my character has 75mil skill points all PvP orientated... im a good catch how do you know i havent awoxed before? i could go from corp to corp using my apparent skill to get in and no one would know different.
With api check this toon would be useless after the first time.... assuming the recruiter knows what to look for lol. That means to do it requires a lot more effort and effectivly burning a toon... THAT is the biggest deffence for a corp
DISCLAIMER! I have not and will not awox or steal from a corp... well... that can be proven
No Worries
|
|
Loraine Gess
Confedeferate Union of Tax Legalists
475
|
Posted - 2015.03.04 13:24:21 -
[51] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so. Actually we just prefer not to run our computer game guild like a totalitarian police state.
And that is why your security is ****. |
Frostys Virpio
The Mjolnir Bloc The Bloc
1613
|
Posted - 2015.03.04 14:20:38 -
[52] - Quote
Hearing what the recruitement officers ***** about in my corp, I would assume many corps just ask for full API because they grew tired of asking the same potential recruit to re-send the same API 6 different time because clicking the requested boxes is hard. If you ask for select all, you know what you need will be there. |
Reiisha
Repracor Industries
721
|
Posted - 2015.03.04 15:13:03 -
[53] - Quote
Zealous Miner wrote:A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe.
There are legit reasons for not wanting to share your mail or wallet log without them involving a variation of the word 'spy'.
If a corp wants a full API i would ask myself "why" first. Lots of empire corps which really don't have a reason to do so ask for them....
If you do things right, people won't be sure you've done anything at all...
|
Novah Soul
112
|
Posted - 2015.03.04 17:22:07 -
[54] - Quote
Reiisha wrote:Zealous Miner wrote:A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe. There are legit reasons for not wanting to share your mail or wallet log without them involving a variation of the word 'spy'. If a corp wants a full API i would ask myself "why" first. Lots of empire corps which really don't have a reason to do so ask for them.... I agree. And the need for full API is even further reduced for those highsec corps whom have their friendly fire settings turned to illegal.
A man is known by the quality of his friends. - Lex Luthor
|
Kiandoshia
Applied Anarchy SpaceMonkey's Alliance
2198
|
Posted - 2015.03.04 17:44:05 -
[55] - Quote
Frostys Virpio wrote:Hearing what the recruitement officers ***** about in my corp, I would assume many corps just ask for full API because they grew tired of asking the same potential recruit to re-send the same API 6 different time because clicking the requested boxes is hard. If you ask for select all, you know what you need will be there.
This is probably the main reason.
You talk people through registration processes for 60 different third party services and by the time you get to the API, you just think you know what.. just tick everything. |
ACESsiggy
The Scope
34
|
Posted - 2015.03.04 22:56:35 -
[56] - Quote
Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å
GÇ£The open-minded see the truth in different things: the narrow-minded see only the differences.GÇ¥
|
Lan Wang
Coreli Corporation The Kadeshi
231
|
Posted - 2015.03.04 23:21:55 -
[57] - Quote
ACESsiggy wrote:Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å
this.
+ teamspeak x many, jabber, fleetup, pigeon, coalition channels, backup channels....i wish api was never invented
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|
Jonah Gravenstein
Machiavellian Space Bastards
23197
|
Posted - 2015.03.05 00:59:21 -
[58] - Quote
ACESsiggy wrote:Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å Relevant
"Remember, as a non-combatant, your best tank is being elsewhere." ~ Abrazzar
Nil mortifi sine lucre.
|
Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2051
|
Posted - 2015.03.05 02:53:33 -
[59] - Quote
Loraine Gess wrote:And that is why your security is ****. Considering we've had zero security incidents in 5 years even when we've had notorious scammers in our alliance I'd tend to disagree. |
Nat Silverguard
Aideron Robotics
80
|
Posted - 2015.03.05 04:02:02 -
[60] - Quote
this is very funny, people are very afraid to give full APIs because somebody can see their uber RPing mails, nothing too kinky in there i hope.
Just Add Water
|
|
|
|
|
Pages: 1 [2] 3 4 :: one page |
First page | Previous page | Next page | Last page |