Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |

cosmoray
Cosmoray Construction
|
Posted - 2008.06.02 13:24:00 -
[1]
I have a question about auditing via the API key.
If you give out the "limited API key", what information does this allow someone to see. Does that person see: all trades? wallet balances? skills? other assets? previously held assets?
I do not know much about this subject.
|

Level4
Red Frog Investments Blue Sky Consortium
|
Posted - 2008.06.02 13:45:00 -
[2]
try this cosmoray
http://games.chruker.dk/eve_online/test_eve_api.php
Join channel Profit
|

PublicRelations Kwint
Lothian Quay Industries
|
Posted - 2008.06.02 13:49:00 -
[3]
Limited basically just gives kills and skills.
Full gives journal and transaction logs plus POS details if you're CEO.
Purchasing and Shipping Moon Minerals |

Kazuo Ishiguro
House of Marbles Zzz
|
Posted - 2008.06.02 14:25:00 -
[4]
According to that page, kill logs require a full key. A limited key reveals nothing except the characters on that account, the corps they're in (and the stuff that anyone can see on the relevant show info pages), the skills they have and the one that's in training.
A full key is much more wide ranging and lets people see virtually everything you can see, anywhere in the game, when logged in with any character on that account. Using asset managing & accounting tools, it's far easier to keep track of things out of game than it is when logged in.
In fact, I think the only thing a full key doesn't show is your evemails and any channel/forcefield passwords that are active (and I would actually find that quite useful). My research services Mineral compression for carrier/Rorqual pilots |

PublicRelations Kwint
Lothian Quay Industries
|
Posted - 2008.06.02 14:39:00 -
[5]
Originally by: Kazuo Ishiguro According to that page, kill logs require a full key. A limited key reveals nothing except the characters on that account, the corps they're in (and the stuff that anyone can see on the relevant show info pages), the skills they have and the one that's in training.
My bad, I guess it's even more limited than I thought. 
Purchasing and Shipping Moon Minerals |

cosmoray
Cosmoray Construction
|
Posted - 2008.06.02 14:44:00 -
[6]
If I hand over the full API key does that mean someone can track me going forward?
How do most people do API audits, full or limited?
After the audit is complete can you/should you change the APi key?
|

Shar Tegral
|
Posted - 2008.06.02 14:53:00 -
[7]
Originally by: cosmoray If I hand over the full API key does that mean someone can track me going forward?
Only if you allow the key to be unchanged. You can change them with a click of a button. Originally by: cosmoray How do most people do API audits, full or limited?
To confirm skills and alts, I use just limited. To do a proper background check I do full api. Originally by: cosmoray After the audit is complete can you/should you change the APi key?
Totally between you and the person doing the audit. I'm still providing auditing for several people as they simply find it useful.
To Shar -verb: 1 - To say what you mean. 2 - To say what it means. 3 - To say something mean. |

Roguehalo
RH Ship Brokers
|
Posted - 2008.06.02 14:55:00 -
[8]
You change your api key very shortly after handing it over. This means the auditor only ever has a snapshot of your affairs AT THE TIME you submitted the key.
i.e. He downloads your details upon receipt of your key but if he tried to download your details the next day nothing would happen.
The important thing is how your trusted 3rd party words his report.
Kazuo imho is totally trustworthy and is probably now becoming sufficiently experienced at this to know not to include any HARD INFO in the report.
|

Shar Tegral
|
Posted - 2008.06.02 15:06:00 -
[9]
Originally by: Roguehalo Kazuo imho is totally trustworthy and is probably now becoming sufficiently experienced at this to know not to include any HARD INFO in the report.
Hmmmm... does this imply you know some other auditor who gives hard info out?
To Shar -verb: 1 - To say what you mean. 2 - To say what it means. 3 - To say something mean. |

Roguehalo
RH Ship Brokers
|
Posted - 2008.06.02 15:12:00 -
[10]
Nope.........but i feel it's probably the thing that Cosmoray is most nervous about
|
|

Kazuo Ishiguro
House of Marbles Zzz
|
Posted - 2008.06.02 15:25:00 -
[11]
I imagine that the most valuable information to cosmoray is the set of locations at which he sells his ships, as the difference in margins would probably be enough to make or break the planned IPO.
If he's using sales alts (which tend to be quite stationary), someone who knew their names could track them down indefinitely via locator agents and determine, at the very least, the regions that they usually work in. Of course, there's always the option to recycle the alts and roll new ones, but that's probably too much of a pain. Mine would certainly take quite a while to replace (jump clones, 5 lab slots & various costly trade skills). My research services Mineral compression for carrier/Rorqual pilots |

Shar Tegral
|
Posted - 2008.06.02 15:25:00 -
[12]
Originally by: Roguehalo Nope.........but i feel it's probably the thing that Cosmoray is most nervous about
I'm sure he is. However your inflammatory statements call into question your intent. In simpler words, I don't make any money auditing so I couldn't give a crap ass if Kaz does it for him or any other person. No need to come along and torpedo anyone else in the "auditing" industry.
To Shar -verb: 1 - To say what you mean. 2 - To say what it means. 3 - To say something mean. |

cosmoray
Cosmoray Construction
|
Posted - 2008.06.02 15:32:00 -
[13]
Thanks for the information guys.
Kazuo I will try to talk to you later, whats best way to get you? I'll be in game later.
I don't have access to IM at work. let me know.
|

northwesten
Trinity Corporate Services
|
Posted - 2008.06.02 15:42:00 -
[14]
I will ask!
my question is who is trust worthy?
Trinity Corporate Services
|

Kazzac Elentria
|
Posted - 2008.06.02 15:43:00 -
[15]
Originally by: northwesten I will ask!
my question is who is trust worthy?
No one really |

YouGotRipped
Ewigkeit
|
Posted - 2008.06.02 15:46:00 -
[16]
Edited by: YouGotRipped on 02/06/2008 15:46:38 Edited by: YouGotRipped on 02/06/2008 15:46:14
Originally by: Kazuo Ishiguro I imagine that the most valuable information to cosmoray is the set of locations at which he sells his ships, as the difference in margins would probably be enough to make or break the planned IPO.
I would imagine he's buying time till he transfers chars to another account. hahah Anyone else got ideas on this one?
Motherships |

northwesten
Trinity Corporate Services
|
Posted - 2008.06.02 15:46:00 -
[17]
Originally by: Kazzac Elentria
Originally by: northwesten I will ask!
my question is who is trust worthy?
No one really
ok well i have another question when you guys do this! what are you looking for? just so i understand whats going on thats all
Trinity Corporate Services
|

Kazuo Ishiguro
House of Marbles Zzz
|
Posted - 2008.06.02 16:06:00 -
[18]
Originally by: cosmoray Thanks for the information guys.
Kazuo I will try to talk to you later, whats best way to get you? I'll be in game later.
I don't have access to IM at work. let me know.
Well, you could leave me a PM at www.scrapheap-challenge.com. I'm known as kzig there. My research services Mineral compression for carrier/Rorqual pilots |

Kazuo Ishiguro
House of Marbles Zzz
|
Posted - 2008.06.02 16:13:00 -
[19]
Originally by: northwesten
Originally by: Kazzac Elentria
Originally by: northwesten I will ask!
my question is who is trust worthy?
No one really
ok well i have another question when you guys do this! what are you looking for? just so i understand whats going on thats all
If someone wants to work with public funds on the basis of claims they make about their skills and experience, many potential investors will want to know whether or not those claims are valid. Crucially, the API gives access to a player's trading history going back 7 days or 1000 transaction entries, whichever is more, and the information it provides cannot be faked, as it is obtained directly from CCP.
An audit by a single trusted person is usually preferable to making a key publicly available, as most trading depends on sensitive information.
This still isn't a guarantee of security- far from it- but it helps establish a degree of trust. My research services Mineral compression for carrier/Rorqual pilots |

Roguehalo
RH Ship Brokers
|
Posted - 2008.06.02 16:14:00 -
[20]
Originally by: Shar Tegral
Originally by: Roguehalo Nope.........but i feel it's probably the thing that Cosmoray is most nervous about
I'm sure he is. However your inflammatory statements call into question your intent. In simpler words, I don't make any money auditing so I couldn't give a crap ass if Kaz does it for him or any other person. No need to come along and torpedo anyone else in the "auditing" industry.
Hmm tbh I didn't even know there was an auditing industry 
And it most certainly was never my intention to 'torpedo' it
|
|

Kazuo Ishiguro
House of Marbles Zzz
|
Posted - 2008.06.02 16:31:00 -
[21]
I only know of a handful of people who have ever done pure audits - I think Hexxx used to do quite a lot of more general consulting before he became so strongly involved with EBANK. My research services Mineral compression for carrier/Rorqual pilots |

Kazzac Elentria
|
Posted - 2008.06.02 17:02:00 -
[22]
Originally by: Kazuo Ishiguro I only know of a handful of people who have ever done pure audits - I think Hexxx used to do quite a lot of more general consulting before he became so strongly involved with EBANK.
Hexxx provided full auditing + consulting. IE taking a look at your books and offering suggestions to your business process to improve things. Quite good at it as well from what I've heard. |

Siriosa
|
Posted - 2008.06.03 02:05:00 -
[23]
Kazuo was kind enough to do an audit for me, and I had no issues with the information he gave out. I'd definitely reccomend him if you're looking for a good third party to do an audit.
And yeah, I would not reccomend posting the API key to the forums directly. If that info is out there publicly, people will definitely use it, and it could suck pretty badly.
|
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |