| Pages: 1 2 3 4 :: [one page] |
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |

No Class
The Scope Gallente Federation
1
|
Posted - 2015.03.03 03:17:42 -
[1] - Quote
So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? |

Scipio Artelius
The Vendunari End of Life
34246
|
Posted - 2015.03.03 03:24:56 -
[2] - Quote
It's safe.
Just don't put anything personal or RL related in your eve mails and there's no problem.
If you have any concerns, ask the recruiter exactly what they are going to use it for.
Most of them will have no clue.
But they aren't a huge risk, just an inconvenience.
Come Win At Eve - Join The Vendunari
|

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2045
|
Posted - 2015.03.03 03:26:34 -
[3] - Quote
Yes it's safe, however it's your information and you have the right to keep it private if you want to.
Moreover, if someone wants it with no expiry that is potentially suspect, there's little reason for anyone to want to continuously look into everything you're doing in game.
Personally I've always felt really dubious about people who want to be able to read your mails, as if it's totally normal to want to read other people's private communications. |

Nevyn Auscent
Broke Sauce
1937
|
Posted - 2015.03.03 03:27:13 -
[4] - Quote
If you haven't learnt to use the search function on the forum to answer this question, yes, bad things will come of giving people your API.
|

Zoe Athame
Black Fox Marauders Spaceship Bebop
214
|
Posted - 2015.03.03 03:27:35 -
[5] - Quote
API Keys only allow people to look, not interact. |

Zealous Miner
7
|
Posted - 2015.03.03 03:30:08 -
[6] - Quote
A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe.
If at any time you want to stop them from seeing your information you can delete the key in the API Key Management tool. You can also see what information is made available to the people you give the key to when you're setting up the API.
I voted for Sabriz Adoudel for CSM10. You should too.
www.minerbumping.com
|

No Class
The Scope Gallente Federation
1
|
Posted - 2015.03.03 03:33:10 -
[7] - Quote
Wow, thanks for the honest responses. I feel allot better about it now. |

Storm Novah
Yada Industries
26
|
Posted - 2015.03.03 03:40:03 -
[8] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this?
I agree with previous posters. Be careful of the information you share in game in any form. As for the API requests I honestly don't see any reason that a 100% full API is necessary for any corp. IMO it's nobody's business what is in the wallet or assets and as such I never include that information in my submitted APIs for any corp. If a corp "requires" that info I take that as a red flag... while it's not always the case there are corps out there that are more interested in looking for victims than seeking new contributing members.
Other than that the API key does NOT give anyone access to your account login information and you can control every aspect of the API key and the information it gives. Anyways... good luck. |

Claud Tiberius
Fidelas Constans
101
|
Posted - 2015.03.03 03:47:50 -
[9] - Quote
The reason Corps ask for full API is to mainly:
- Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. - Other(?).
So a great example of what this can do: If your corp is on deployment and your not helping out - the CEO can confirm this by looking at your API.
I like to say, It's a great tool for people who inspire to be an NSA equivalent.
Once upon a time the Golem had a Raven hull and it looked good. Then it transformed into a plataduck. The end.
|

Pok Nibin
Filial Pariahs
557
|
Posted - 2015.03.03 06:01:03 -
[10] - Quote
Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable.
Dont fight it; Rejoin your Amarrian patriarchs; You know you want to.
|

Loraine Gess
Confedeferate Union of Tax Legalists
472
|
Posted - 2015.03.03 06:34:09 -
[11] - Quote
Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable.
So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. |

Nami Kumamato
School of Applied Knowledge Caldari State
556
|
Posted - 2015.03.03 09:31:11 -
[12] - Quote
Do deleted mails appear in the full API also ?
" And now my ship is oh so cloaked and fit -
I never felt so good, I never felt so hid ! "
- Ramona McCandless, Untitled
|

Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 09:34:17 -
[13] - Quote
our corp use our api keys to build cool tools on the corp website :)
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|

Serene Repose
2322
|
Posted - 2015.03.03 10:21:00 -
[14] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. "Better than..." maybe it's nappy time for you, hon. 
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|

Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:01:18 -
[15] - Quote
Safe or not....i do not give API key! ... to no one...Point! basta! can i have API key from recruiters, directors or from CEO?... no!
|

Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 11:04:58 -
[16] - Quote
Thora Zhubilai wrote:Safe or not....i do not give API key! ... to no one...Point! basta! can i have API key from recruiters, directors or from CEO?... no!
explains why you are and probably always will be in an npc corp. there is no danger submitting a api key its standard in any decent corp
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|

Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:08:48 -
[17] - Quote
Has nothing to do with safe or not... can i have Full API from CEO?...no, sure not.
Trust me or trust me not...simple as that. |

Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 11:17:31 -
[18] - Quote
well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2046
|
Posted - 2015.03.03 11:19:32 -
[19] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent.
70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions. |

ChromeStriker
Out of Focus Odin's Call
845
|
Posted - 2015.03.03 11:35:05 -
[20] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
This is true... but its alot easier to ask for a full api then just the important stuff anyway. Its faster for us and faster for you (select all button).
Just think, you could be trying to join a corp/alliance will billions of isk worth of assets... Capital fleets, Ratting ships in hostile space, Sov infomation.... That corp is just trying to protect itself and if you feel hard done by because of that... look somewhere else.
No Worries
|

Thora Zhubilai
University of Caille Gallente Federation
0
|
Posted - 2015.03.03 11:37:16 -
[21] - Quote
Lan Wang wrote:
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset
Do API really avoid "steal and awox"?...NOPE
Why should i trust Corpleaders if they don't trust me?
The paranoid mindset behind that "Controlling" is a good reason to stay in NPC.
|

Ka'Narlist
Dreddit Test Alliance Please Ignore
327
|
Posted - 2015.03.03 11:39:40 -
[22] - Quote
Claud Tiberius wrote: The reason Corps ask for full API is to mainly: - Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. None of those requires a full api key
|

War Kitten
Panda McLegion
5908
|
Posted - 2015.03.03 11:40:53 -
[23] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
If the information is irrelevant, why are you intent on hiding it? Industrial activities can tell your leaders whether or not you're building cap/supercaps and selling them to enemies. Faction war stats can indicate whether you're familiar with lowsec. Just because you haven't done any recruiting and don't think it is useful information doesn't mean it isn't.
... and for large alliances, the API is the best way to keep tabs on hundreds or thousands of people. An active API key is used to authenticate you on forums, teamspeak, jabber, mumble, and various other tools that your group might offer. It's going to be non-negotiable for most serious corps and alliances in the game to maintain an active API key.
But if you don't want to be a member of a large organized group, that's entirely your choice, and you can hide all your dirty secrets about faction warfare and how many scourge missiles you've built in the last 3 months.
I find that without a good mob to provide one for them, most people would have no mentality at all.
|

ChromeStriker
Out of Focus Odin's Call
845
|
Posted - 2015.03.03 11:44:16 -
[24] - Quote
Thora Zhubilai wrote:[quote=Lan Wang] Do API really avoid "steal and awox"?...NOPE
Why should i trust Corpleaders if they don't trust me?
The paranoid mindset behind that "Controlling" is a good reason to stay in NPC.
Yes... actually....
Because said corp leaders are willing to put in the effort to protect the corp... It isnt a matter of trust, they WANT you in their corp, but they have to look out for their members and protect their interests from the potential of theift or awoxing. An API check is the fastest and easiest way of doing this.
No Worries
|

Storm Novah
Yada Industries
27
|
Posted - 2015.03.03 11:46:14 -
[25] - Quote
Lan Wang wrote:well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp. |

Sisohiv
Center for Advanced Studies Gallente Federation
288
|
Posted - 2015.03.03 11:51:55 -
[26] - Quote
I've given both limited and full API at various times because I'm not quite as paranoid as the people who ask for it. I'm also very candid about the fact that I have 5 accounts, 4 almost always active at a time so they are gathering no useable data from my API.
It doesn't even provide effective meta any more assuming I only had one account. Once upon a time you could determine what I might be flying and use it to profile me for spy ganking but with the two accounts I send to large corps, they both have SP for every sub cap in the game. It isn't even a game advantage choice, it was just wise to Nerf proof.
tl;dr it's not a threat but it's an antiquated habit we have in the game and speaks volumes about the corp you are applying to. |

Lan Wang
Coreli Corporation The Kadeshi
223
|
Posted - 2015.03.03 12:07:25 -
[27] - Quote
Storm Novah wrote:Lan Wang wrote:well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk.
in a game where people can steal and awox corps and players the directors are only looking out for every other player in the corp. i see no issue with this and good luck getting into a decent corp with that mindset And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none! Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp.
whats so secret about it? if corps are building tools or using asset lists and wallet for building doctrines around what people can afford to fly or making sure they can afford to be deployed during wars and ever changing doctrines then whats the issue or to check people have carriers and other tactical assets for when they are needed, as said nobody really cares about your isk as long as your joining fleets (all my isk gets transferred to my trading alt anyway), but what use are you to a pvp corp if you dont have the right assets and no money to buy them? if its irrelevant then why even care about showing it.
it doesnt really do much as so many people have alts but having tools and stats are pretty cool
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|

Aralyn Cormallen
Wildly Inappropriate Goonswarm Federation
775
|
Posted - 2015.03.03 12:11:49 -
[28] - Quote
This is always an arguement between the "My Privacy!" crowd and the "Meh, who cares" crowd.
There are many completely acceptable reasons to want to see or check any and all parts of the API, but likewise, there are many reasons why those same parts don't need to be seen. It is all a matter of your point of view. Ultimately, it's going to depend on what you personally consider acceptable.
What you need to know about API's is:
- They can see your skills. They cannot change your training. - They can see your assets and wallet, and they can see who you have given money to in the past. They cannot take any of those assets or send them on to anyone else. - They can read your mails. They cannot read mails you have deleted, and they cannot send mails in your name. - They can see your contacts. They cannot change any of your personal contacts or add any personal contacts (although, if you join, you will inherit corp/alliance contacts)
If you are giving your API to anyone, you have to ask yourself:
- What are you lettimg them see? - Can allowing this information to be seen put you, your assets, or your plans at risk? - Can keeping information hidden place you, your assets, or plans at risk ? (bear in mind, any information a recruiter allows you to keep hidden, he is likely allowing others to keep hidden - what potential risk are you being put in by lax recruiting standards)
Ultimately it is your choice. Some places will ask for full APIs, others will ask for tailored APIs to cut out the irrelevant information. For example, to be a member of my corp and alliance, I have submitted three different APIs for each of my two accounts with information pertinent to what I am involved in. One of those does indeed include assets, something that a lot of people would balk at. Why? Because I am part of the Alliances Capital and Supercapital groups, and as part of that, its kinda mandatory to ensure I possess the Capital and Supercapital assets I claim I have (and that I have the skills to fly the vessel, and my ship fitted to the level required by alliance doctrine). It may not be much, but thats an extra level of security to my ships, since I know that random throwaway spy alts can't infiltrate those groups without having the needed skills and assets, and it also means I am not being put at risk on the field by discovering too late that my cap buddy doesn't have the skills or mods needed to maintain the chain. |

Loraine Gess
Confedeferate Union of Tax Legalists
474
|
Posted - 2015.03.03 12:50:14 -
[29] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions.
I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so. |

ChromeStriker
Out of Focus Odin's Call
846
|
Posted - 2015.03.03 12:50:20 -
[30] - Quote
Storm Novah wrote:
Which is why if a corp insists that the wallet and assets are "necessary" for an API check then I don't bother with pursuing membership with that corp.
Just to clear up this small point...
First it shows if you are self efficient, and able to support yourself effectivly. A corp will normally help in making isk but not hand holding.
Second it can flag up some annomilies... i interviewed a toon that transfered 5 billion isk between a couple of toons 3 months before and when i asked why they dropped the conversation never to be seen again. 
Its all little bits useful for an interviw... finding about alts they failed to mention, surprise income sources, aplicable for a training corp, they say they can do x but can really only do y....
No Worries
|

knobber Jobbler
Bat Country Goonswarm Federation
514
|
Posted - 2015.03.03 12:59:05 -
[31] - Quote
Storm Novah wrote: And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Good one. I assume your corp is pretty irrelevant, otherwise it's full of spies and you have no way of knowing if they're on the take or not from another corp or alliance. |

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2046
|
Posted - 2015.03.03 21:47:53 -
[32] - Quote
Loraine Gess wrote:I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so.
Actually we just prefer not to run our computer game guild like a totalitarian police state. |

Pok Nibin
Filial Pariahs
567
|
Posted - 2015.03.03 22:09:46 -
[33] - Quote
Aralyn Cormallen wrote:What you need to know about API's is:
- They can see your skills. They cannot change your training. - They can see your assets and wallet, and they can see who you have given money to in the past. They cannot take any of those assets or send them on to anyone else. - They can read your mails. They cannot read mails you have deleted, and they cannot send mails in your name. - They can see your contacts. They cannot change any of your personal contacts or add any personal contacts (although, if you join, you will inherit corp/alliance contacts)
If you are giving your API to anyone, you have to ask yourself:.. I'll ask myself whatever the F I want. I'm certainly not going to consult YOU to find out what I should ask my SELF. I find this attitude to be overbearing and useless...which are the two traits most in common with CEOs that demand full APIs. I don't want anyone to read my wallet. Why? It has nothing to do with PRIVACY. It has to do with, the information is useless. CEOs that think they're getting spy information from seeing member's wallets are IDIOTS. I don't want an IDIOT for a CEO, so I don't want my CEO looking at my wallet. I know that makes sense, but does it make sense to YOU? (I seriously doubt it.)
I do not want my CEO reading my contacts; none of my contacts. They are MY contacts. That's why they're called "MY CONTACTS." This informations is of no use to a CEO and can be hilariously manipulated by a SPY to create any impression a SPY wishes to create. If a CEO doesn't know this, then he/she is too dumb to be a CEO and I don't WANT a DUMB CEO so I don't want my CEO looking at MY CONTACTS! Is that too SUBTLE FOR YOU?
If anyone is asking for your API to be in their corp, you have to ask yourself, "Do I want to associate myself with people that are this STUPID?"
Dont fight it; Rejoin your Amarrian patriarchs; You know you want to.
|

Davir Sometaww
Snuff Box Snuffed Out
29
|
Posted - 2015.03.03 22:53:43 -
[34] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this?
Yes. |

Storm Novah
Yada Industries
27
|
Posted - 2015.03.04 00:29:04 -
[35] - Quote
knobber Jobbler wrote:Storm Novah wrote: And what exactly is seeing the assets and wallet of a player going to tell them that would in any way be related to the security of a corp? Answer: none!
Good one. I assume your corp is pretty irrelevant, otherwise it's full of spies and you have no way of knowing if they're on the take or not from another corp or alliance. Actually the corp is my own and all the drama that accompanies applying for a large corp (not to mention the political drama you deal with once you get in) is the main reason I don't even bother. |

Commander Spurty
Dimension Door We need wards.
1429
|
Posted - 2015.03.04 00:39:01 -
[36] - Quote
No Class wrote:Wow, thanks for the honest responses. I feel allot better about it now.
It's a READ ONLY view of your characters.
The purpose is often to allow for automation of access to secure resources such as forums, communications and 3rd party tools.
Now, if you need to 'hide' something from recruiters, you're probably already too much effort for any entity with over 100 characters in it.
Look here for more details https://developers.eveonline.com/resource/xml-api
Don't be too scared.
There are good ships
And wood ships
And ships that sail the sea
But the best ships are
Spaceships
Built by CCP
|

Jonah Gravenstein
Machiavellian Space Bastards
23191
|
Posted - 2015.03.04 01:07:00 -
[37] - Quote
Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder.
"Remember, as a non-combatant, your best tank is being elsewhere." ~ Abrazzar
Nil mortifi sine lucre.
|

Serene Repose
2325
|
Posted - 2015.03.04 01:22:41 -
[38] - Quote
War Kitten wrote:Vimsy Vortis wrote:Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. If you think it's necessary to view someone's industry information and faction warfare stats when recruiting them then yes, you are incompetent. 70% of the information available via the API is totally irrelevant to a recruiter, but they still ask for all of those boxes to be ticked anyway. That is dumb, you shouldn't ask people for a bunch of information you don't want and don't intend to even look at. It just makes people suspicious of your intentions. If the information is irrelevant, why are you intent on hiding it? Industrial activities can tell your leaders whether or not you're building cap/supercaps and selling them to enemies. Faction war stats can indicate whether you're familiar with lowsec. Just because you haven't done any recruiting and don't think it is useful information doesn't mean it isn't. ... and for large alliances, the API is the best way to keep tabs on hundreds or thousands of people. An active API key is used to authenticate you on forums, teamspeak, jabber, mumble, and various other tools that your group might offer. It's going to be non-negotiable for most serious corps and alliances in the game to maintain an active API key. But if you don't want to be a member of a large organized group, that's entirely your choice, and you can hide all your dirty secrets about faction warfare and how many scourge missiles you've built in the last 3 months. Please. Tell me you didn't say that. You need an API to tell if a corpy is selling capitals to the enemy? The only way this makes sense is if you AREN'T a CEO. Tell me, just how many people in this game can build caps? How many can build caps on the side - UNDETECTED? The best way to keep up with personnel in a large organization is by structural hierarchy and authority delegation. The best way to THINK you're doing all this is to monitor APIs and hallucinate.
...scourge missiles.....yeah...a lot of text you have, but no point.
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|

Scipio Artelius
The Vendunari End of Life
34302
|
Posted - 2015.03.04 01:47:43 -
[39] - Quote
Thora Zhubilai wrote:can i have API key from recruiters, directors or from CEO?... no!
Have you ever asked?
If you applied to join Vendo and we wanted to look at your API (we only use limited when we need them at all), then I'd have no problem handing over mine. None of the Directors or the CEO would have a problem with it.
I'm sure we aren't unique in that regard. We know what people feel about being asked for an API. Only right that they be able to check us out as well.
Come Win At Eve - Join The Vendunari
|

Sibyyl
Gallente Federation
23612
|
Posted - 2015.03.04 02:53:28 -
[40] - Quote
Jonah Gravenstein wrote:Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder.
I had a conversation about this with a friend one time. Don't count on deleting your mails faster than your corp pinging the API and downloading what's there. It's a better policy to not have anything sensitive in email.
I have a hard time following that advice myself.. most or all my mails have some personal content so it is not trivial just to hide myself completely.
Rush to danger, wind up nowhere
Sabriz for CSM go go go
|

Eugene Kerner
TunDraGon Cynosural Field Theory.
1531
|
Posted - 2015.03.04 05:54:15 -
[41] - Quote
There is a chance to pick up Vaginal-Herpes in the process.
TunDraGon is recruiting!
"Also, your boobs [:o] " -á
CCP Eterne, 2012
"When in doubt...make a di++k joke."-áRobin Williams - RIP
|

Serene Repose
2326
|
Posted - 2015.03.04 06:00:05 -
[42] - Quote
I knew if we tried hard enough we'd hit the gutter eventually.
Treason never prospers. What is the reason?
Why, if it prospers, none dare call it "treason."
|

Yarda Black
Militaris Industries Northern Coalition.
576
|
Posted - 2015.03.04 11:17:39 -
[43] - Quote
Not asking for a full API is only viable if you have nothing and don't plan on being anything more than a casual player with no real ties .
The guy that stole 600 bill gave his full API, so its not even foolproof on its own. Thieves and spies can grow after recruiting them too. A proper spy will also take the time to manipulate what he can before submitting it. But just ignoring a full API simply means less work for spies and other "destructive" EVE careers. Or in other words; more spies and thieves.
Trusting somebody in EVE you've played with for years is a calculated (and often rewarding) risk. Trusting someone you don't know is plain stupid. Welcome to EVE.
For all ambitious folks out there only one option exists: Play the metagame. Get max intel about everything. That includes a simple thing like a full API. If you don't even take basic steps to try and get at least some intel and weed out the easiest to find scum, good luck protecting yourself against the more experienced ones ....
|

Cartheron Crust
Matari Exodus
160
|
Posted - 2015.03.04 11:39:16 -
[44] - Quote
Never had to submit an API key for a corp I've applied to crew checking in. |

Kiandoshia
Applied Anarchy SpaceMonkey's Alliance
2196
|
Posted - 2015.03.04 12:05:43 -
[45] - Quote
Claud Tiberius wrote: The reason Corps ask for full API is to mainly: - Find out where you are. - What you have been doing. - What your abilities are. - Tally corp statistics. - Other(?). So a great example of what this can do: If your corp is on deployment and your not helping out - the CEO can confirm this by looking at your API. I like to say, It's a great tool for people who inspire to be an NSA equivalent.
You can see that in the corp window and potentially the corp wallet journal =p
But yeah, most of the time, or in my experience, API keys are used to be able to tell what kind of ships you can fly, roles you can fill and that sort of stuff. Since a full API key pretty much shows everything except for private convos (I think), you can also use them to screen a character, figure out alts and all that. |

knobber Jobbler
Bat Country Goonswarm Federation
520
|
Posted - 2015.03.04 12:06:33 -
[46] - Quote
Cartheron Crust wrote:Never had to submit an API key for a corp I've applied to crew checking in.
Great, I can put an alt on this account into your corp for premium super easy awoxing opportunities and you'll never even know. Well I would if your corp was half way relevant. |

Wacktopia
Noir. No Not Believing
775
|
Posted - 2015.03.04 12:09:51 -
[47] - Quote
No Class wrote:Wow, thanks for the honest responses. I feel allot better about it now.
You can always delete the API key at a later date, cutting off the information instantly.
Kitchen sink? Seriousy, get your ship together - -áFleet-Up.com
|

Crest Zah Donartal
Center for Advanced Studies Gallente Federation
3
|
Posted - 2015.03.04 12:18:07 -
[48] - Quote
the largest thefts were not prevented by API...
The only one you can catch by analyzing API are the wouldbee spies/awoxer. The biger ones, ........................................just dream about.
|

Nami Kumamato
School of Applied Knowledge Caldari State
576
|
Posted - 2015.03.04 12:50:29 -
[49] - Quote
Sibyyl wrote:Jonah Gravenstein wrote:Nami Kumamato wrote:Do deleted mails appear in the full API also ? Depends on whether or not you remember to empty the trash folder. I had a conversation about this with a friend one time. Don't count on deleting your mails faster than your corp pinging the API and downloading what's there. It's a better policy to not have anything sensitive in email. I have a hard time following that advice myself.. most or all my mails have some personal content so it is not trivial just to hide myself completely.
Thanks Sibbs
" And now my ship is oh so cloaked and fit -
I never felt so good, I never felt so hid ! "
- Ramona McCandless, Untitled
|

ChromeStriker
Out of Focus Odin's Call
849
|
Posted - 2015.03.04 12:51:50 -
[50] - Quote
Crest Zah Donartal wrote:the largest thefts were not prevented by API...
The only one you can catch by analyzing API are the wouldbee spies/awoxer. The biger ones, ........................................just dream about.
It puts a barrier up between the corp and awoxers/theft.... my character has 75mil skill points all PvP orientated... im a good catch how do you know i havent awoxed before? i could go from corp to corp using my apparent skill to get in and no one would know different.
With api check this toon would be useless after the first time.... assuming the recruiter knows what to look for lol. That means to do it requires a lot more effort and effectivly burning a toon... THAT is the biggest deffence for a corp
DISCLAIMER! I have not and will not awox or steal from a corp... well... that can be proven
No Worries
|

Loraine Gess
Confedeferate Union of Tax Legalists
475
|
Posted - 2015.03.04 13:24:21 -
[51] - Quote
Vimsy Vortis wrote:Loraine Gess wrote:I take it you don't do recruitment, or you don't do it very well. Every scrap of information that appears can always be vetted later, if not meta checked immediately, to eliminate problems before they become large problems. The more facts someone has to juggle, the harder the liar finds to do so. Actually we just prefer not to run our computer game guild like a totalitarian police state.
And that is why your security is ****. |

Frostys Virpio
The Mjolnir Bloc The Bloc
1613
|
Posted - 2015.03.04 14:20:38 -
[52] - Quote
Hearing what the recruitement officers ***** about in my corp, I would assume many corps just ask for full API because they grew tired of asking the same potential recruit to re-send the same API 6 different time because clicking the requested boxes is hard. If you ask for select all, you know what you need will be there. |

Reiisha
Repracor Industries
721
|
Posted - 2015.03.04 15:13:03 -
[53] - Quote
Zealous Miner wrote:A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe.
There are legit reasons for not wanting to share your mail or wallet log without them involving a variation of the word 'spy'.
If a corp wants a full API i would ask myself "why" first. Lots of empire corps which really don't have a reason to do so ask for them....
If you do things right, people won't be sure you've done anything at all...
|

Novah Soul
112
|
Posted - 2015.03.04 17:22:07 -
[54] - Quote
Reiisha wrote:Zealous Miner wrote:A full API key allows them to look, but not touch.
They can see stuff like assets, EVE mails, characters, standings, contacts, skill queue, wallet, transactions, etc., etc. So, unless you have something to hide it is safe. There are legit reasons for not wanting to share your mail or wallet log without them involving a variation of the word 'spy'. If a corp wants a full API i would ask myself "why" first. Lots of empire corps which really don't have a reason to do so ask for them.... I agree. And the need for full API is even further reduced for those highsec corps whom have their friendly fire settings turned to illegal.
A man is known by the quality of his friends. - Lex Luthor
|

Kiandoshia
Applied Anarchy SpaceMonkey's Alliance
2198
|
Posted - 2015.03.04 17:44:05 -
[55] - Quote
Frostys Virpio wrote:Hearing what the recruitement officers ***** about in my corp, I would assume many corps just ask for full API because they grew tired of asking the same potential recruit to re-send the same API 6 different time because clicking the requested boxes is hard. If you ask for select all, you know what you need will be there.
This is probably the main reason.
You talk people through registration processes for 60 different third party services and by the time you get to the API, you just think you know what.. just tick everything. |

ACESsiggy
The Scope
34
|
Posted - 2015.03.04 22:56:35 -
[56] - Quote
Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å
GÇ£The open-minded see the truth in different things: the narrow-minded see only the differences.GÇ¥
|

Lan Wang
Coreli Corporation The Kadeshi
231
|
Posted - 2015.03.04 23:21:55 -
[57] - Quote
ACESsiggy wrote:Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å
this.
+ teamspeak x many, jabber, fleetup, pigeon, coalition channels, backup channels....i wish api was never invented
EVEALON Creative --á****Logo Design | Killboard Banners | -áWeb Design | Website Graphics
-á
|

Jonah Gravenstein
Machiavellian Space Bastards
23197
|
Posted - 2015.03.05 00:59:21 -
[58] - Quote
ACESsiggy wrote:Just wait until after the Api process when they ask you to visit their website to answer questionnaires, then just to proceed with a TS3 interview! I wouldn't be surprised if they soon ask new members for credit card numbers or social security #'s haha.GÇ+n+Å Relevant
"Remember, as a non-combatant, your best tank is being elsewhere." ~ Abrazzar
Nil mortifi sine lucre.
|

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2051
|
Posted - 2015.03.05 02:53:33 -
[59] - Quote
Loraine Gess wrote:And that is why your security is ****. Considering we've had zero security incidents in 5 years even when we've had notorious scammers in our alliance I'd tend to disagree. |

Nat Silverguard
Aideron Robotics
80
|
Posted - 2015.03.05 04:02:02 -
[60] - Quote
this is very funny, people are very afraid to give full APIs because somebody can see their uber RPing mails, nothing too kinky in there i hope. 
Just Add Water
|

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2051
|
Posted - 2015.03.05 04:35:09 -
[61] - Quote
Just space-bondage. |

MANDIGO COOTERSTANK
Republic Military School Minmatar Republic
0
|
Posted - 2015.03.05 04:36:07 -
[62] - Quote
IMO a full API key should never be necessary to join a corp. Now, if you are already established in a corp and are applying for roles, or dealing with ~very expensive things~ then its to be expected that you'll need to supply a full key. |

Nat Silverguard
Aideron Robotics
80
|
Posted - 2015.03.05 04:52:19 -
[63] - Quote
MANDIGO COOTERSTANK wrote:IMO a full API key should never be necessary to join a corp. Now, if you are already established in a corp and are applying for roles, or dealing with ~very expensive things~ then its to be expected that you'll need to supply a full key.
it is, if they want, if you don't wan't, don't join. simples.
Just Add Water
|

d0cTeR9
Astro Technologies SpaceMonkey's Alliance
62
|
Posted - 2015.03.05 05:40:17 -
[64] - Quote
Vimsy Vortis wrote:Yes it's safe, however it's your information and you have the right to keep it private if you want to.
Moreover, if someone wants it with no expiry that is potentially suspect, there's little reason for anyone to want to continuously look into everything you're doing in game.
Personally I've always felt really dubious about people who want to be able to read your mails, as if it's totally normal to want to read other people's private communications.
Wrong. A lot of forums, intel channels, markets, etc, run from the API key which must be set not to expire.
No one is going to 'keep looking' at it, but the system/software will, to make sure you have the proper 'credentials' to be using those services. |

Nevyn Auscent
Broke Sauce
1942
|
Posted - 2015.03.05 06:38:57 -
[65] - Quote
d0cTeR9 wrote: Wrong. A lot of forums, intel channels, markets, etc, run from the API key which must be set not to expire.
No one is going to 'keep looking' at it, but the system/software will, to make sure you have the proper 'credentials' to be using those services.
Amazingly, none of those services need any information from the API at all in order to operate. It's simply a made up requirement because 'you need to prove you are trustworthy', while the directors never have to prove that you can trust them in return. It's a one way street, feudalism, and it only works because most of the Null sec alliance members are sheep prepared to accept feudalism. |

ChromeStriker
Out of Focus Odin's Call
850
|
Posted - 2015.03.05 08:17:25 -
[66] - Quote
Nevyn Auscent wrote:d0cTeR9 wrote: Wrong. A lot of forums, intel channels, markets, etc, run from the API key which must be set not to expire.
No one is going to 'keep looking' at it, but the system/software will, to make sure you have the proper 'credentials' to be using those services.
Amazingly, none of those services need any information from the API at all in order to operate. It's simply a made up requirement because 'you need to prove you are trustworthy', while the directors never have to prove that you can trust them in return. It's a one way street, feudalism, and it only works because most of the Null sec alliance members are sheep prepared to accept feudalism.
Ok ok look, a full api really isnt absolutly needed, but as said before its easier to just ask for everything than pick out the few things not needed (as already stated)
As for what you said above, my old corp (not even alliance) had a forum that you could only join if you were in the corp. Had a ship doctrine tool that would show what you could fly. A buy back programe, ship replacement, gambaling hall, and a bunch of other stuff... all run off the API... The leadership could also track K/d and a bunch of other stuff not to kick people out (never did that) but to rewqard those that put in effort towards the corp...
API's are really useful. Simple as that really.
No Worries
|

Nat Silverguard
Aideron Robotics
82
|
Posted - 2015.03.05 09:01:01 -
[67] - Quote
Nevyn Auscent wrote: It's simply a made up requirement because 'you need to prove you are trustworthy', while the directors never have to prove that you can trust them in return
then why did you even bothered applying to them in the 1st place if from the start you don't even trust them already? 
you're wierd dude....
Just Add Water
|

Vicky Somers
Rusty Anchor
274
|
Posted - 2015.03.05 10:18:01 -
[68] - Quote
If you're using your alt on that same account to shitpost a lot, it's probably a bad idea to give out your API key. That's pretty much the only reason why multiple accounts are so popular in Eve.
Moderate strength is shown in violence, supreme strength is shown in levity.
|

Leannor
Central Builders Incorporated Northern Associates.
123
|
Posted - 2015.03.05 14:01:17 -
[69] - Quote
Scipio Artelius wrote:It's safe.
Just don't put anything personal or RL related in your eve mails and there's no problem.
If you have any concerns, ask the recruiter exactly what they are going to use it for.
Most of them will have no clue.
But they aren't a huge risk, just an inconvenience.
you're fit ...
"Lykouleon wrote:
STOP
TOUCHING
ICONIC
SHIP
PARTS"
|

WhyYouHeffToBeMad IsOnlyGame
6308
|
Posted - 2015.03.05 15:07:51 -
[70] - Quote
API keys are like facebook, except you can't put false information in because the server feeds them your information automatically.
and it's revealing information on a snowden level.
Cat? I'm a kitty cat
and I dancedancedance
and I BURN YOUR EYES
Frostys Virpio > CCP: Continously Crying Playerbase
|

WhyYouHeffToBeMad IsOnlyGame
6308
|
Posted - 2015.03.05 15:08:48 -
[71] - Quote
Leannor wrote:Scipio Artelius wrote:It's safe.
Just don't put anything personal or RL related in your eve mails and there's no problem.
If you have any concerns, ask the recruiter exactly what they are going to use it for.
Most of them will have no clue.
But they aren't a huge risk, just an inconvenience. you're fit ...  spie detected.
Cat? I'm a kitty cat
and I dancedancedance
and I BURN YOUR EYES
Frostys Virpio > CCP: Continously Crying Playerbase
|

WhyYouHeffToBeMad IsOnlyGame
6308
|
Posted - 2015.03.05 15:09:52 -
[72] - Quote
MANDIGO COOTERSTANK wrote:IMO a full API key should never be necessary to join a corp. Now, if you are already established in a corp and are applying for roles, or dealing with ~very expensive things~ then its to be expected that you'll need to supply a full key. true words of wisdom(no jokes here, seriously)
Cat? I'm a kitty cat
and I dancedancedance
and I BURN YOUR EYES
Frostys Virpio > CCP: Continously Crying Playerbase
|

Anslo
Scope Works Overload Everything
31293
|
Posted - 2015.03.05 15:14:19 -
[73] - Quote
Thora Zhubilai wrote:Has nothing to do with safe or not... can i have Full API from CEO?...no, sure not.
Trust me or trust me not...simple as that. Yeah not that simple. This is Eve. When you get to the point that the alliance you built over a few years is throwing around hundreds of billions of isk worth of ships, one pissed off sperg leaking intel because he got called a name would ruin it all, and it couldn't be prevented because an API wasn't in hand to see said sperg mailing people about an OP to third party on.
[center]-_For the Proveldtariat_/-[/center]
|

d0cTeR9
Astro Technologies SpaceMonkey's Alliance
64
|
Posted - 2015.03.05 18:22:12 -
[74] - Quote
Nevyn Auscent wrote:d0cTeR9 wrote: Wrong. A lot of forums, intel channels, markets, etc, run from the API key which must be set not to expire.
No one is going to 'keep looking' at it, but the system/software will, to make sure you have the proper 'credentials' to be using those services.
Amazingly, none of those services need any information from the API at all in order to operate. It's simply a made up requirement because 'you need to prove you are trustworthy', while the directors never have to prove that you can trust them in return. It's a one way street, feudalism, and it only works because most of the Null sec alliance members are sheep prepared to accept feudalism.
Wrong, i know for a fact it's needed... Heck i checked 10 minutes ago... yupp, API key is still needed for what i was doing using one of the services of the CFC.
Also everyone i know is required to provide it, from the recruit to the CEO of every single corp. Only people that have something to hide are worried. 99% of the other's are completely fine and there's ZERO issues. If you can't trust them... why should they trust you? |

Bloody Slave
Republic Military School Minmatar Republic
196
|
Posted - 2015.03.05 18:57:28 -
[75] - Quote
d0cTeR9 wrote: If you can't trust them... why should they trust you?
Exactly!!!!
If you are the CEO, director or whomever is in charge of recruitment and cannot trust the new members why should they trust you?
Bingo!
Dito!

If your balls are hurt and bleeding don't sit in a pool full of piranhas (note to myself: don't complain in GD)
|

Frostys Virpio
The Mjolnir Bloc The Bloc
1622
|
Posted - 2015.03.06 19:31:38 -
[76] - Quote
Bloody Slave wrote:d0cTeR9 wrote: If you can't trust them... why should they trust you? Exactly!!!! If you are the CEO, director or whomever is in charge of recruitment and cannot trust the new members why should they trust you?Bingo! Dito! 
They kinda have to trust you since they are joining your corp. If you don't trust your leadership, don't join the corp/alliance... |

Shey Nabali
Collapsed Out Overload Everything
14
|
Posted - 2015.03.07 00:20:26 -
[77] - Quote
Storm Novah wrote:No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? I agree with previous posters. Be careful of the information you share in game in any form. As for the API requests I honestly don't see any reason that a 100% full API is necessary for any corp. IMO it's nobody's business what is in the wallet or assets and as such I never include that information in my submitted APIs for any corp. If a corp "requires" that info I take that as a red flag... while it's not always the case there are corps out there that are more interested in looking for victims than seeking new contributing members. Other than that the API key does NOT give anyone access to your account login information and you can control every aspect of the API key and the information it gives. Anyways... good luck.
Any corp that fields capitals (and especially supers) will want your asset and transaction info, as that is a very easy way of catching careless/lazy spies. |

BrundleMeth
Caldari Provisions Caldari State
389
|
Posted - 2015.03.07 14:12:13 -
[78] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course. But he is right APIs are completely unnecessary..."Everyone does it" isn't good enough. Please tell me now how "You will never get into a good corp, bla, bla bla"...I don't believe that and don't care anyway...
|

Josef Djugashvilis
2911
|
Posted - 2015.03.08 00:21:20 -
[79] - Quote
I would not wish to join any corp that demands to to be allowed to read my eve-mails about how well or not Ireland are doing in the 6 Nations, and they would not allow me to join unless they can read my eve-mails.
Works well for both parties really.
This is not a signature.
|

Nat Silverguard
Aideron Robotics
88
|
Posted - 2015.03.08 04:14:37 -
[80] - Quote
Josef Djugashvilis wrote:I would not wish to join any corp that demands to to be allowed to read my eve-mails about how well or not Ireland are doing in the 6 Nations, and they would not allow me to join unless they can read my eve-mails.
Works well for both parties really.
why, something kinky going on in there? 
Just Add Water
|

No Class
The Scope Gallente Federation
1
|
Posted - 2015.03.10 16:06:41 -
[81] - Quote
MANDIGO COOTERSTANK wrote:IMO a full API key should never be necessary to join a corp. Now, if you are already established in a corp and are applying for roles, or dealing with ~very expensive things~ then its to be expected that you'll need to supply a full key.
To me this is a key point. When i have joined past corporations, I start with no roles and responsibilities. Basically, you start at the bottom of the ranks and have to prove yourself worthy to work your way up. That being said, you guys have made it pretty clear that an API key is not necessary in this instance of corp recruitment. Thanks for all the info though. Very educational to see all this input on the subject. |

Oraac Ensor
608
|
Posted - 2015.03.10 17:17:29 -
[82] - Quote
Yarda Black wrote:Trusting someone you don't know is plain stupid. Exactly.
The number one reason why nobody gets my API (except possibly the guy who built this computer for me). |

Errata Sum
Center for Advanced Studies Gallente Federation
0
|
Posted - 2015.03.10 17:32:59 -
[83] - Quote
Never given out my full API, never will.
Inb4 NPC corp comments. |

Lady Ayeipsia
Red Federation RvB - RED Federation
850
|
Posted - 2015.03.10 18:19:22 -
[84] - Quote
One point not made here... Asking for a full api then receiving a partial or lip service/internet lawyering is a sign that a potential recruit may be more trouble than they are worth.
Think about some of the hostile responses in this topic. If asking for something simple like a full api results in such hostility, what will happen when you ask them to help or be a part of an arduous move operation? If they can't follow the simple instructiona of clicking "select all", will they be able to follow fleet commands? If they are such a special snowflake that they must be given special treatment during recruiting, then will they be such a prima donna during normal Corp life that it becomes problematic?
In other words, it's not just about what the key grants access to, but your own behavior to the request itself. And yes, this may sound like me saying be a sheep. However, I never said don't ask questions, just obey. I'm only pointing out that your behavior to this request will be judge to see if you are a fit for the Corp. |

Celise Katelo
State War Academy Caldari State
60
|
Posted - 2015.03.10 18:43:40 -
[85] - Quote
I wonder how many players sell API details... 
EVEBoard ...Just over 20million skill points, each skill was chosen for a reason. I closed my eyes & clicked another skill to train... "BINGO...!!!" ... "This time i got something usefull"
|

Oraac Ensor
608
|
Posted - 2015.03.10 19:38:56 -
[86] - Quote
Lady Ayeipsia wrote:If they can't follow the simple instructiona of clicking "select all", will they be able to follow fleet commands?
>>>
However, I never said don't ask questions, just obey. Instructions????? Obey????? Jeez ... the arrogance. |

BrundleMeth
Caldari Provisions Caldari State
393
|
Posted - 2015.03.12 01:21:38 -
[87] - Quote
Lady Ayeipsia wrote:One point not made here... Asking for a full api then receiving a partial or lip service/internet lawyering is a sign that a potential recruit may be more trouble than they are worth.
Think about some of the hostile responses in this topic. If asking for something simple like a full api results in such hostility, what will happen when you ask them to help or be a part of an arduous move operation? If they can't follow the simple instructiona of clicking "select all", will they be able to follow fleet commands? If they are such a special snowflake that they must be given special treatment during recruiting, then will they be such a prima donna during normal Corp life that it becomes problematic?
In other words, it's not just about what the key grants access to, but your own behavior to the request itself. And yes, this may sound like me saying be a sheep. However, I never said don't ask questions, just obey. I'm only pointing out that your behavior to this request will be judge to see if you are a fit for the Corp. What crap. You are saying not wanting to give away personal information about my account is the same as disobeying their FC in a fleet? It's not as you say "they can't follow a simple rule". It is rather they don't WANT to follow a stupid demand for personal information. Hardly the same as following commands when "playing a bloody game".
Just an absolute stupid comparison... |

Gilbaron
Free-Space-Ranger Nulli Secunda
1745
|
Posted - 2015.03.12 02:14:50 -
[88] - Quote
No Class wrote:MANDIGO COOTERSTANK wrote:IMO a full API key should never be necessary to join a corp. Now, if you are already established in a corp and are applying for roles, or dealing with ~very expensive things~ then its to be expected that you'll need to supply a full key. To me this is a key point. When i have joined past corporations, I start with no roles and responsibilities. Basically, you start at the bottom of the ranks and have to prove yourself worthy to work your way up. That being said, you guys have made it pretty clear that an API key is not necessary in this instance of corp recruitment. Thanks for all the info though. Very educational to see all this input on the subject.
that statement could not be more wrong
it's very simple
if there is a corp that's letting you in without checking your API first, you don't want to be a part of that corp if you plan to be anything more than a highsec lvl2 mission runner
Build your empire !
Rent Space in Feythabolis and Omist
Contact me for details :)
|

Vimsy Vortis
Shoulda Checked Local Break-A-Wish Foundation
2079
|
Posted - 2015.03.12 04:36:53 -
[89] - Quote
If you want to join a corporation and the recruiter can actually give you a sincere reason why he wants an API and can explain what he wants to look at and you don't object to him looking at those things there's no reason not to submit one.
However I give out the API of my spy alts all the time to highsec corporations and it doesn't prevent anything. Hell I don't know what they're even doing with them once I give them it. |

Leannor
Caldari Provisions Caldari State
128
|
Posted - 2015.03.12 09:38:08 -
[90] - Quote
Vimsy Vortis wrote:If you want to join a corporation and the recruiter can actually give you a sincere reason why he wants an API and can explain what he wants to look at and you don't object to him looking at those things there's no reason not to submit one.
However I give out the API of my spy alts all the time to highsec corporations and it doesn't prevent anything. Hell I don't know what they're even doing with them once I give them it.
not even sure they know.
It's the Erin Brockovich effect ... information deluge.
"Lykouleon wrote:
STOP
TOUCHING
ICONIC
SHIP
PARTS"
|

Irya Boone
Never Surrender.
442
|
Posted - 2015.03.12 11:20:47 -
[91] - Quote
you should only apply to corp which ask for DNA samples ... just sayin
In my corp we ask dna samples real life Photos , of you you husband/spouse, children ... dog or cat if you have and your IP adress ..
we have to be sure you know 
CCP it's time to remove Off Grid Boost and Put Them on Killmail too, add Logi on killmails
.... Open that damn door !!
|

BrundleMeth
Caldari Provisions Caldari State
394
|
Posted - 2015.03.13 13:12:12 -
[92] - Quote
Irya Boone wrote:you should only apply to corp which ask for DNA samples ... just sayin  In my corp we ask dna samples real life Photos , of you you husband/spouse, children ... dog or cat if you have and your IP adress .. we have to be sure you know  I AM prepared to supply urine and fecees samples... |

HiltoftheDragons
Grievance3
14
|
Posted - 2015.03.13 21:01:57 -
[93] - Quote
I have to agree with the majority here.
Ive never given my full api to anyone and never will. Ive really never had any issues with any recruiter harassing me for a full api anyway but i'll always stick to my personal rule.
Ive given my limited one plenty of times. I tend to agree its all anybody needs to determine if your a good addition to any corp.
P.S. I blame this game for making me so vigilant and prone to giving everybody i meet in any game a raised eyebrow. Im sure that will be a behavior ill never be able to let go.
Destiny always seems decades away, but suddenly it's not decades away; it's right now. But maybe destiny is always right now, right here, right this very instant, maybe
|

Vega Makutu
Fault Line Industries Greater Western Co-Prosperity Sphere
8
|
Posted - 2015.03.13 21:18:06 -
[94] - Quote
If you want to join a certain corp and they have an application and operations process you don't agree with, then don't join.
What's to complain about. |

Axloth Okiah
Future Corps Sleeper Social Club
596
|
Posted - 2015.03.13 22:35:17 -
[95] - Quote
Good luck joining any decent wormhole corp without handing over APIs, for example. I hope you wouldnt mind sharing all your blingy ships with random dudes who might be corp thieves and werent checked out.
Also good luck asking FCs, diplos and op planners for their APIs from your position of unknown and unproven dude who wants to join their corp.
W-Space Realtor
|

Nicolai Serkanner
Jebediah Kerman's Junkyard and Spaceship Parts Co. Brave Collective
294
|
Posted - 2015.03.13 23:56:09 -
[96] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this?
Join Brave Newbies.
|

Grima The Mad
Ideal Empire Ideal Society
3
|
Posted - 2015.03.17 10:47:46 -
[97] - Quote
A lot of corporations provide services such as forums for it's members to post in as well as teamspeak/mumble/jabber etc. Brave does require an API as well, but that's because it allows those services to check and make sure that you're in a corporation.
Keep in mind too, even if they don't ask for it during an interview, if you EVER enter it on a service any corporation provides it can be pulled on their side. So if you sign up for a corp and they have you signup for a site that requires an API like core services or anything like that, you are giving them your api. As it stand right now though API's are read only. |

Falken Falcon
31591
|
Posted - 2015.03.17 10:52:48 -
[98] - Quote
Celise Katelo wrote:I wonder how many players sell API details...  You'd be surprised 
Aye, Sea Turtles
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 14:09:05 -
[99] - Quote
No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? Safe.
Here is a tool commonly used by recruiters to do audits. Cut yourself full keys and load them there to see what they can see. 'onepage' summary is dank.
F
Would you like to know more?
|

Tipa Riot
Federal Navy Academy Gallente Federation
175
|
Posted - 2015.03.17 14:13:07 -
[100] - Quote
Feyd Rautha Harkonnen wrote:No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? Safe. No it is not, never not post a full API to some internet page 
I'm my own NPC alt.
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 14:17:22 -
[101] - Quote
Tipa Riot wrote:Feyd Rautha Harkonnen wrote:No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? Safe. No it is not, never not post a full API to some internet page  API's are read-only access to info and don't provide any form of EvE account logon, so please expand on how 'not safe'?
Would you like to know more?
|

Tipa Riot
Federal Navy Academy Gallente Federation
175
|
Posted - 2015.03.17 14:28:22 -
[102] - Quote
Feyd Rautha Harkonnen wrote:Tipa Riot wrote:Feyd Rautha Harkonnen wrote:No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? Safe. No it is not, never not post a full API to some internet page  API's are read-only access to info and don't provide any form of EvE account logon, so please expand on how 'not safe'? Sure, it does not provide real life information directly, if you were cautious with what you do in game. But I'm not sure everybody is aware, that a full API provides your mails, your wallet transactions, your inventory, your location, your industry jobs, your market orders, etc. on all chars ...which allows a 3rd party to compile a nice profile about your life in New Eden.
To interact with 3rd party software you are using restricted APIs.
I'm my own NPC alt.
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 14:40:43 -
[103] - Quote
BrundleMeth wrote: What crap. You are saying not wanting to give away personal information about my account is the same as disobeying their FC in a fleet? It's not as you say "they can't follow a simple rule". It is rather they don't WANT to follow a stupid demand for personal information. Hardly the same as following commands when "playing a bloody game".
Just an absolute stupid comparison...
There are epic levels of misinformation about what EvE API's are and are not being thrown about in this thread, by people that clearly haven't a fricken clue, and in the absence of real knowlege are confusing normal internet security practices around protecting personal information with EvE toon API's...
- EvE API keys provide a way for someone else to view your characters in-game information in a read-only manner only. The API does not provide the ability to post changes or updates, of any kind. So first off, its READ ONLY.
- Secondly, EvE API keys do not provide any account level information, like your logon id, password or personal details kept in your EvE account by CCP. The only information exposed through API's is in-game toon information, no real life information.
In short, the worst 'exposure' you get from giving someone a full set of API keys, is they can read your in-game EvE mails and see all your in-game transactions on the marketplace etc etc. Whoop-de-fricken-doo, and if you were dumb enough to EvE mail someone in game any personal info in the first place, the security issue is you, not an API after the fact....
F
Would you like to know more?
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 14:46:36 -
[104] - Quote
Tipa Riot wrote: Sure, it does not provide real life information directly, if you were cautious with what you do in game. But I'm not sure everybody is aware, that a full API provides your mails, your wallet transactions, your inventory, your location, your industry jobs, your market orders, etc. on all chars ...which allows a 3rd party to compile a nice profile about your life in New Eden.
To interact with 3rd party software you are using restricted APIs.
See my previous post, no real life (account) information is exposed directly or otherwise by the API's, so you are confabulating the issue by mixing 'real life information' security concerns with TOON information...
Secondly, having someone else compile a profile of your TOON life in New Eden is exactly the point of a new-applicant security review by a recruiter brainiac.
Where you cross the line into autism is by portraying EvE API's as 'unsafe', when there are no internet security concerns with it, just your personal preference not to allow a recruiter to see what you have been up to IN EVE. Thats a TOON privacy concern, NOT a security/safety one, or a real-life information one.
F
Would you like to know more?
|

TigerXtrm
Black Thorne Corporation Black Thorne Alliance
1044
|
Posted - 2015.03.17 14:56:43 -
[105] - Quote
Loraine Gess wrote:Pok Nibin wrote:Full APIs are unnecessary, and any CEO asking for one demonstrates a lack of knowledge about the game sufficient to call his or her competence into question. Should a corp ask it of you, take that in consideration and ask yourself if you really want to be part of a group if their leadership is so...questionable. So apparently everyone better than you, including all the large nullsec organizations, are incompetent. Of course.
With the API system these days being capable of including only specific information, there should be no reason for anyone to ask a Full API key. If they want to see your kill history, mails, location, wallet and assets then they should ask for a key that covers just those 5 things. Not everything else on top of that.
Honestly it's little effort as a corp to just generate a pre-made link for people to use... Full API's are so 2007.
My YouTube Channel - EVE Tutorials & other game related things!
My Website - Blogs, Livestreams & Forums
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 15:02:19 -
[106] - Quote
TigerXtrm wrote: With the API system these days being capable of including only specific information, there should be no reason for anyone to ask a Full API key. If they want to see your kill history, mails, location, wallet and assets then they should ask for a key that covers just those 5 things. Not everything else on top of that.
Honestly it's little effort as a corp to just generate a pre-made link for people to use... Full API's are so 2007.
You missed character sheet for skill checks, standings (to see who you have blue'd etc), and actual transactions to audit money sent to/from undisclosed alts or enemy spymasters, etc... There are reasons why full keys are needed by recruiters and on an going basis by internal-security directors guys....
You want to be part of a quality alliance/corp? Prepare to hand over full keys. Anyone not requiring them is more of a risk to you and your assets by being scrublords, who will get you killed (in game) by someone else they didn't check IMHO... think about that.
F
Would you like to know more?
|

Tipa Riot
Federal Navy Academy Gallente Federation
176
|
Posted - 2015.03.17 15:29:41 -
[107] - Quote
Feyd Rautha Harkonnen wrote: Where you cross the line into autism is by portraying EvE API's as 'unsafe', when there are no internet security concerns with it, just your personal preference not to allow a recruiter to see what you have been up to IN EVE. Thats a TOON privacy concern, NOT a personal security/safety one, or a real-life information one. F
Yes, it's char privacy. Yes, we all live in a perfect rational world, where people read Terms of Use and strictly separate social interaction with their chars in-game and real-life interaction (on both sides). Also seeing char information exploited could negatively influence your real-life experience playing that char. Hence it's not just plain safe, there are risks you need to be aware of, even if they are not directly connected to your account.
I'm my own NPC alt.
|

Feyd Rautha Harkonnen
Origin. Black Legion.
2032
|
Posted - 2015.03.17 18:14:44 -
[108] - Quote
Tipa Riot wrote: Yes, it's char privacy. Yes, we all live in a perfect rational world, where people read Terms of Use and strictly separate social interaction with their chars in-game and real-life interaction (on both sides).
Nothing in an API key breaks that separation, as I mentioned.
If someone crosses that line by putting personal info in an EvE mail in the first place, they screwed up at mail creation time, not at API key publish time. Elvis has already left the building.
Quote: Also seeing char information exploited could negatively influence your real-life experience playing that char. Hence it's not just plain safe, there are risks you need to be aware of, even if they are not directly connected to your account.
Let's clarify 'safe' and 'risks' here, because you (and others) seem to be disingenuously confusing the 'risks' of EvE character API use, with real life internet privacy and security concerns...not cool.
So, is your toon exposed to more 'risk' of being 'meta-gamed' by other entities in-game if your API key leaks and an enemy alliance sees your EvE-mails and gets intel on where you park your Vindicator? Ok, let's say they use that intel from your API keys to camp the station your Vindy is in, or they see in your EvE mails where you are going to be mission-running with it the next day...so they blap your ship...
Whoop-de-do.
That's the type of 'risks' we are talking about here to in-game toons and leaks of in-game information (just as if you did it in corp chat or Teampseak to a spy). Guess what, meta gaming is EvE, it will happen with or without API keys, deal with it...
Key however is that none of this relates to real life personal info or risk, provided again you aren't putting that crap in your EvE mails to others in the first place, which again isn't an API key issue, but a stupid person issue.
F
Would you like to know more?
|

Dun'Gal
Myriad Contractors Inc.
212
|
Posted - 2015.03.17 20:32:30 -
[109] - Quote
Haven't read through all the posts yet, so I'm sure it's been said. Full API is only harmful to you if you are up to no good when getting recruited, it's as simple as that. The only reason it's asked for is to pick out the careless spai's, ie the ones who don't bother creating new characters for future thefts, etc. Anyone determined enough is going to slip past even this scrutiny, wallet api's allow one to see player to player ISK transfers and if it's between, shall we say, unscrupulous types then that could raise flags. Also there are corporations who only accept mains, wallet information can also help detect this, in the same way. No reputable corp is likely to give a rats ass about your current wallet ballance, or assets, they just want to see who you know, and what you are up to. |

Tipa Riot
Federal Navy Academy Gallente Federation
176
|
Posted - 2015.03.17 20:47:10 -
[110] - Quote
Feyd Rautha Harkonnen wrote:No Class wrote:So i'm looking for a new corp, but on the adverts i'm seeing almost all of them want my FULL API key. Is this safe? Can anything bad come of this? Safe. Here is a tool commonly used by recruiters to do audits. Cut yourself full keys and load them there to see what they can see. 'onepage' summary is dank. F Before we lose context, I replay the question/answer leading to the dispute. I think the meaning of "anything" does not restrict the potential scope of answers to only real life threats.
I'm my own NPC alt.
|

Mithandra
Catastrophic Operations Nulli Secunda
245
|
Posted - 2015.03.18 13:06:47 -
[111] - Quote
Most corps require full api keys because its a small defence against corp thieves, awoxers and spys. A small defence,not a good defence.
Is it safe?
No real life personal data is made available. No ability to hack your account is granted..... unless you've done something stupid like record your details in an evemail.
A full api lets the recruiter know everything about your character, not you personally.
Once the recruiter has looked at your full api and made a decision one way or the other... delete that api key.
Eve is the dark haired, totally hot emo gothchild of the gaming community
|

Alt Two
Tribal Liberation Force Minmatar Republic
134
|
Posted - 2015.03.18 20:59:01 -
[112] - Quote
Lan Wang wrote:well the fact that api's are used for all sorts of stuff including verifying who you are and also verifying you are actually in the corp before being able to use teamspeak and forums etc, not every situation where an api is requested is for spying on you or looking at your assets, i mean who really cares if you have something shiney in your hanger or you have 100bil isk. If you need a full api key to verify if someone is in your corp or not you are doing it terribly terribly wrong. https://api.eveonline.com/eve/CharacterAffiliation.xml.aspx?ids=91801779
Oh look it has your corp info. I guess that means I must have your full api key then. |

Xpaulusx
Naari LLC
299
|
Posted - 2015.03.18 23:51:30 -
[113] - Quote
You should be more concerned if they don't ask you for Full API that's a Red Flag either their judgement stinks or they are going to pull something on you so API doesn't matter IMO.
......................................................
|

Gallowmere Rorschach
Enlightened Industries Goonswarm Federation
952
|
Posted - 2015.03.19 01:53:14 -
[114] - Quote
A couple of people have already posted anything I could possibly have to say on the subject. Feyd conveyed it very well.
However, this:
Xpaulusx wrote:You should be more concerned if they don't ask you for Full API that's a Red Flag either their judgement stinks or they are going to pull something on you so API doesn't matter IMO. is probably one of the most important takeaways. Seriously, if a corp doesn't even try to give a damn about who they let in; well, that's when you really need to worry about what could happen to your stuff. |
| |
|
| Pages: 1 2 3 4 :: [one page] |