These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

Alliance & Corporation Recruitment Center

 
  • Topic is locked indefinitely.
 

What do you do with my Full API key?

Author
hydraSlav
Synergy Evolved
#1 - 2014-02-19 15:11:40 UTC
https://forums.eveonline.com/default.aspx?g=posts&t=6329&find=unread
CCP Spitfire wrote:
Use this channel [...] to ask recruiters what their requirements are [...]


If i post this question anywhere else, the wrong people will see/reply. Hope i am still within the forum rules here, as i have a direct question to recruiters.

My question is to all recruiters asking for the Full API key for verification.
QuestionWhat do you do with it?
Please, walk me through your process of evaluating the information of my Full API key.

tl;dr:
Bottom line is: the Full API reveals too much information and makes me feel naked and exposed Roll. At the same time, it does not prevent the recruiter from the things that they want to be protected from using this API. It does not protect against a dedicated spy/awox. I understand it is a deterrent against a "casual" corp thief. But for that purpose, a limited key should suffice.

I understand it's for security. When i recruited into my corp, i also asked for the API key, but that was only to check other characters on the account, to make sure i was getting the "main", not some low(er)-SP alt of an enemy alliance. Obviously, i only needed a limited key.

So what do you check for, having the full key?

- Characters, Skills, Queue
Yeah, no problems there

- Wallet and Market (and Contracts)
Premise: I guess the idea here is to make sure the character is not funded by some known enemy through player donation.
Reality: If i really wanted to fund a spy/awox alt, i could direct trade in-station without any trace.
Concerns: I don't mind as much about the corp knowing how much ISK i have, or what my sources of income are (this one is a little iffy), but if i have a Jita trade alt, then those trades are, well, trade secrets. I would not want to reveal that.

- Asset list
Premise: ??? Don't understand at all why you would need this info
Reality: Again, for a dedicated spy/awox, hiding the assets is a very easy thing to do
Concerns: When i go to work, i give the employer my bank details, my SIN number, but i don't give him the itinerary listing of everything in my house. This is just too much. On the flipside, what if i have some rare ship in my possession? By providing this info to a recruiter whom i don't even know, i am putting myself at risk.

- Science and industry
Premise: ??? Why?
Reality: Same as above, easily hidden
Concerns: Same as above, what if my alt is building capitals or something on a side as a business. If i am joining a casual small PVP group for fun, doesn't mean i need nor should share my industrial business with them.

- Evemails and Contacts
Premise: By reading through years of old communications, you can deduce the character's real affiliations
Reality: Really? Someone will read through years of my old emails? But the biggest issue here is that incriminating emails/standings can be outright deleted with no trace
Concerns: Sometimes i share private "business" information between my characters through evemails, sometimes there are simply private conversations, for example with my business clients. There is also the issue that while i may be "voluntarily" providing a private conversation to a recruiter, the other party in this private conversation neither consented, nor is aware of this.

Thanks
The Feuror
The Scope
Gallente Federation
#2 - 2014-02-19 17:05:46 UTC
I surf through mails contact list and see your assets and how u make your isk. So when I tell yoh these are the fits for these ships I want in fleet I know you can afford it and can afford to lose it.

Other then that really all thats left is eveforums to see if you bought the toon.

Honestly could care less if your a spy just show up in the fleets and kill **** when i tell you to.EvilTwistedPirate

VVOOF is recruiting able pvpers for WH BLOPS operations

Kai Tari
Viziam
Amarr Empire
#3 - 2014-02-19 21:25:27 UTC  |  Edited by: Kai Tari
I guess the short answer here would be: " TRUST ". As we all know, EvE is a game that not only allows corruption, sabotage, and betrayal.. it encourages it. For me, the more you expose your information , the more i believe you have nothing to hide. If you're to earn the trust of your corporation, you'll sometimes have to leave yourself feeling "naked and exposed" , as you put it.

I agree with your reality comments regarding being able to hide certain info, but a lot of players in EvE are not: 1- smart enough to hide it, 2- dedicated enough to hide it or, 3- just too damn lazy to try. So if a corporation can help weed out the dedicated applicants from the bull$h^t ones, right off the bat.. they've just protected their assets that much more.

In regards to the emails.. ya i doubt they will all be read, but i guarantee the contacts list will be skimmed over, and if any one of them raises a red-flag.. that email will be read.

Try not to get too offended when someone asks for a full API on application. Most corporations have tried very hard to be successful and don't want to lose that because they weren't paranoid enough. Also some large corps employ hundreds of people, so you can imagine how easy it might be to let just one saboteur infiltrate the ranks.

My advice..? Strike up a convo with a recruiter and chat about how u feel regarding the API. You'd be surprised how many just post that to deter the would-be spies, and might just let you join with a few questions answered.

GL

-Kai
Anhenka
The New Federation
Sigma Grindset
#4 - 2014-02-20 00:55:22 UTC
As the people above stated, asking for a full API is largely just a deterrent to the people that have a reason not to hand them out in the first place.

Most places will just check your skills, wallet, and corp history, maybe feed it into an assets page to check you are financially stable. Often recruiters will check your kills to make sure you didn't Awox your last corp or whatever, then check your forum posting history to see if you are a nutty raging lunatic.

The main thing you have to realize is that these recruiters are quite likely having to examine dozens of API's and several times that number worth of characters each week. They don't give a **** about your mails unless the topic is glaringly obviously about scamming, stealing, corp theft, or awoxing.

A corp recruiter won't care if you are building caps, or having trade alts, or whatever. They almost certainly have their own ways to make plenty of money after all. Concealing the existence of alts and the recruiter finding out is something that can get you into deep **** though.

The only places where everything might get raked over with a fine tooth comp is in high class WH corp, simply due to the potentially massive damage that a thief/awoxer can do where most people are in some form of community living situation, at least initially. Don't take it personally in that case, there are lot's of tales of WH thieves running off with dozens or hundreds of billions of isk in individual or corp assets/cash.

The TLDR though is that the recruiter does not care at all about your personal life, all he/she is looking for is signs that might show you are a threat to the corporation.
Alric Rosenthal
Black Fox Marauders
Pen Is Out
#5 - 2014-02-20 01:04:56 UTC  |  Edited by: Alric Rosenthal
The average player generates between 1M and 1.2M SP per month. Most notable corporations have an SP floor. Even if this floor is only 5M SP it means that a character would have to remain clean and clear of negative contacts/transactions/interactions for about five months and invest $75.00 - $99.95 or around 3,250,000,000 ISK. Trading in station does show up on the journal. The only transactions that are not logged are those done in space by jetcan or ejection from a ship. Even those can be viewed if not traced to source because the pilot suddenly has a brand new ship and no history of them purchasing or making it.

A clever and truly patient spy master can get through any security screen. A full API screen done by someone that knows their **** will stop most people that have foul intentions. Contacts are the life blood of EVE. You can not have fun in this game without making contacts, trading, and interacting with other players. In doing so you build a history and it is your history that a CEO or director looks at to determine two things: What level of risk you pose to the corporation and the other members of the corporation should you be accepted and also what you can contribute to the organization based on your history.

“War is cruelty. There's no use trying to reform it. The crueler it is, the sooner it will be over.” - William Tecumseh Sherman

hydraSlav
Synergy Evolved
#6 - 2014-02-20 01:21:14 UTC
Valid points from everyone, thanks

I do want to make a note regarding contacts. I've been playing since 2005 when we didn't have fancy standings in local. We used to add enemies to our contact list, so that they would show with a green dot in local (meaning: bad guy). I still have a ton of contacts from that time.

I guess i should be cleaning up my contact list before i apply anywhere.

Anhenka
The New Federation
Sigma Grindset
#7 - 2014-02-20 01:32:19 UTC
hydraSlav wrote:
Valid points from everyone, thanks

I do want to make a note regarding contacts. I've been playing since 2005 when we didn't have fancy standings in local. We used to add enemies to our contact list, so that they would show with a green dot in local (meaning: bad guy). I still have a ton of contacts from that time.

I guess i should be cleaning up my contact list before i apply anywhere.



Red contacts are not really a big deal, everyone uses poor standings contracts to keep an eye out for things like wardeccers before a war starts, suspected enemy out of corp alts, people who gank your cynos, or just someone you want to keep tabs who is not an ally.

It's the blue standings that are of more interest. It can be a good idea to clear the ones you don't need out on a regular basis, if for no other reason that an overview with only neutral/bad standings targets won't show them, when they might be perfectly fine in shooting you.
The Cue
Violence is the Answer
#8 - 2014-02-20 02:39:34 UTC
Mails are always my biggest thing. I've caught two or three corp thieves based solely off of reading their mail.

There was a guy on here a few days ago looking for a corp who said in his post he was unwilling to give out mail on his API, which was a pretty instant no in my book for just that reason.
Robby Altair
#9 - 2014-02-20 02:59:32 UTC
Feel free to give a recruiter your full api. If recruited, or rejected feel free to delete your full api. Can always create a new one on demand.

Room 3420 Boelter Hall UCLA

Almiel
University of Caille
Gallente Federation
#10 - 2014-02-20 04:04:17 UTC  |  Edited by: Almiel
• Mails - who he talks to and about what. Carebear, spying, pvp, griefing, scamming content
• Contacts - known enemies or friends, griefers or scammers
• SP - Age of characters vs. SP
• Assets - location and type
• ISK activity - Who he trades often for alt's, what he buys and if it's in line with his SP, large isk transactions

All that and more is checked AFTER we've talked with him for a little bit. The talking part is more to get him to open up and talk a little bit about himself. Gently lead him into talking about things that can be verified and checked in the api. If any anomalies pop up between what he says and what's in the api, be sure to lead the questioning about it and not be lead into hearing what he thinks you want to hear as a plausible excuse.

A good info base will allow you to cross reference between contacts, other characters on the account and lists on eve who.

Most of all it gives you an idea of who you are, how you act and if you'll be a good fit for the rest of the corp. 75% of the time they're nothing to think twice over. Then there's days that you put on your tinfoil hat on the first api ckeck right off the bat and it doesn't come off all week.