EVE General Discussion

Most people do it and don't even think about it. EVE Mon anyone?

For most people the API is not a threat. Just don't become a target in EVE and by target I mean, don't ever amount to anything.

API Keys are used by corporations to see what you have been up to recently, to make sure that you're not an awoxer (somebody who infiltrates a rival corporation to cause harm). It's for security protocols n' stuff, but be careful. If your API key falls into the wrong hands (example Goonswarm) you are face-deep in a pile of sh*t.
Always hand your API key with caution!

Information about past behavior isn't always an indicator of future behavior. In a setting like EvE with disposable, transferable characters, there is absolutely no way of knowing someone's intention when they join a corp. No amount of API checking will tell you that a 3-month-old rookie pilot all alone in their account is really a bittervet looking to cause you issues and willing to pay to do so.

That's why, as in the real world, good security is about access and compartmentalization, not background checks. Assume that your background checks are going to fail, and design your security protocols to handle a determined infiltrator. If you limit the access that any one person has to corp assets, you limit the damage they can do as well. Don't fly stupidly expensive ships in situations where you don't have a GTFO plan. And for Heaven's sake, learn how to PvP because at some point or another in your EvE career you will need to.

One more reason why the only API keys I give to any tool, site, or (in my past incarnation) prospective corps are either killmail only, or deactivated within 24 hours. Security works both ways....

QTF. Proper access management is the most important factor to corp security. Awoxing is a constant and unchanging possibility, all your API checking might diminish is it's probability. Another factor is investment. Someone that has put considerabe effort into building your corp along with you, is less likely to burn the very things they are proud of themselves. Don't put in a public hanger what your corp cannot afford to lose. The old adage of flying what you cannot afford also applies here.

That being said, API data such as your character sheet can be a massive boon to the guys working on your groups doctrine fits and such. Even a limited one is usefull. I've played the villain before and I still do, I'm actively involved in spreading what I know about PVP shenanigans. When a past awox comes up in a recruitment talk I'd be more interested in the story, and share some of my own.

It really comes down to what corp you are running. If you risk billions on a daily basis your security needs to be top notch. If you run a rag-tag band of intermediate SP lowsec PVPers, you can be a bit more lax. I've found exchanging an API for actual roles & titles works fine. Some granularity is in order, corp security isn't that black and white.

2010 character and it took you 4 years that ticking all those boxes that exactly say what acces they grant to be that intrusive.


Fail.

I've played 4 months out of those 4 years. I feel I've no reason to explain my short time of actual gameplay so I won't.

Proof that a background check doesn't tell you everything ;)

Eve Mon has access to a limited API that has skill info and not much else, hell you can see pretty much all that info on http://eveboard.com/pilot/Chainsaw_plankton