
Cedric Diggory
Perfunctory Oleaginous Laocoon Mugwumps
|
Posted - 2008.02.18 17:26:00 -
[1]
Edited by: Cedric Diggory on 18/02/2008 17:26:35 One thing I haven't seen mentioned is that API keys are unusually useful for helping corp members - especially newer ones - plan out their skill training and so on. It gives their CEO (any anyone else given access to it) the ability to plug their character sheet into EFT and EVEMON and allows them to offer advice on training plans and ship setups far easier than before.
I would never accept someone into a corp who wasn't willing to give their API key, simply because I doubt anyone so paranoid would be a useful individual. Conversely, I wouldn't stay in a corp where other weren't willing to pass me theirs, as it really is a useful tool for planning ops and seeing what each other is capable of.
Quote: If handing out the limited API key isnt a big deal...
Then why hasnt a singular person in this thread been brave enough to post theirs?
Because there is a huge difference between handing it out to individuals you have chosen to trust and whom you assume trust you, and posting it on a public message board!
|

Cedric Diggory
Perfunctory Oleaginous Laocoon Mugwumps
|
Posted - 2008.02.18 17:48:00 -
[2]
Edited by: Cedric Diggory on 18/02/2008 17:49:20 Edited by: Cedric Diggory on 18/02/2008 17:48:24
Originally by: w0rmy Why? what harm can come of it?
If im applying to a corp... the trust isnt there yet, I dont yet trust the CEO, I dont know him...
So there is no difference between posting it here, and posting it to a complete stranger...
You give it out to a killboard... the killboard's SQL gets hacked... You give it out to a CEO, him and his mates are secretly collecting API's to spy on people and keep one big giantic data info network which they sell off to alliances... If none of these are concerns...
Then why would posting it here be one?

First off, my days of joining 100+ corporations are gone. If I can't get to know every one of my corp mates and speak to them all on vent, play other games with them and so on, I'm simply not interesting in playing eve with them.
Secondly, your API key is a more useful information tool than a killboard. It allows people to see exactly what you are capable of flying/using, and exactly how much you can tank etc. Handing out your key to a public forum is akin to giving it to someone you know is going to use that information against you.
So I'll say again: There's a huge difference between giving that information out on a public forum and sharing that information with corp mates.
I see where you're going, and you are correct: as a security measure, API keys are hopeless (but still better than the old fashioned login screenshot). As I said though, they are infinitely useful for other things.
Quote: So a users API key provides a CEO no security... just the ability to be nosey
It does, and it provides the CEO with a false sense of security. As I said before, sharing keys is a great thing - it allows you to better collaborate.
|