These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

A question regarding the privacy of EVE-mail.

First post
Author
xxxTRUSTxxx
Galactic Rangers
#181 - 2015-02-16 15:12:44 UTC
Benny Ohu wrote:

which is a good case for our services being designed to cater to our stupid needs


what one post shows up talking bollox about API keys and how the OP didn't know what it does, even though it clearly explains on the API key management page what it does, so now the sky is falling?

what exactly do you want?




Benny Ohu
Royal Amarr Institute
Amarr Empire
#182 - 2015-02-16 15:15:07 UTC
Jenn aSide wrote:
Anyone with any brains knew from day one ( day two at the most) that video game email isn't secure in any way , even if the video game company doesn't tell you.

where the system looks like a normal mail client, but is designed to allow someone you didn't expect to have access to your information? no, when someone encounters something familiar, they'll assume it has the same qualities as what they're familiar with

that's why this in particular needs to be explained properly
xxxTRUSTxxx
Galactic Rangers
#183 - 2015-02-16 15:15:35 UTC
Benny Ohu wrote:
xxxTRUSTxxx wrote:
Benny Ohu wrote:

where the information is not obviously accessible or hidden in ten pages of legal bullshit, that can be considered a fault of the provider


it's the providers fault that someone refused to read ? or it's the providers fault for not explaining it barney style ?

because this is pretty clear.

where most people don't read it before using the evemail service, which i'm willing to bet occurs, yes, it needs to be more obvious. the issue is not comprehending the information, it is an issue of the information being delivered to the users effectively



what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
Jenn aSide
Worthless Carebears
The Initiative.
#184 - 2015-02-16 15:16:15 UTC
Benny Ohu wrote:
Godfrey Silvarna wrote:
If you call someone, they can record your phone call and send it to FOX News. Should phones have warnings about other telephone users?

If you send someone a letter, they can take a BILLION photocopies of it and scatter them all over the continent if they wish. Should mailboxes have warnings that you should not send mail to people you don't trust?

If you send someone an email, they can forward it to their entire contact list and all the mailing lists of the world. Should all computers come with warning stickers about not sending sensitive information to suspicious people?

If you send someone an EVEmail, they can copy paste it to anywhere, forward it to anyone or make it readable by anyone if they wish. Should EVE come with warnings about not trusting random people with sensitive information?

if you want to read my posts again, you can go to eve-search and see all the posts made just by me. please do so before replying again, and try to comprehend them this time



lol, I don't think it's everyone else with comprehension problems here.After time has passed, you've gotten up from your computer and thought about it for a while, You'll realize your in the wrong here, you fell into an enlargement trap (it happens to all of us).

You are basically defending indefensible stupidity on the part of users of video game software (not at all unlike the dumb people who put personal info on face book or teens who 'sext' each other and expect that to be 'private'). I'm sorry, but it's obvious to everyone who can think clearly, this is a video game, it's email is even less secure than real email, and you should have known that before using it (6 years prior if we're talking about the OP).
Benny Ohu
Royal Amarr Institute
Amarr Empire
#185 - 2015-02-16 15:16:19 UTC
xxxTRUSTxxx wrote:
Benny Ohu wrote:

which is a good case for our services being designed to cater to our stupid needs


what one post shows up talking bollox about API keys and how the OP didn't know what it does, even though it clearly explains on the API key management page what it does, so now the sky is falling?

what exactly do you want?

i want you to read and comprehend my posts before replying again, please
xxxTRUSTxxx
Galactic Rangers
#186 - 2015-02-16 15:17:59 UTC
Benny Ohu wrote:
xxxTRUSTxxx wrote:
Benny Ohu wrote:

which is a good case for our services being designed to cater to our stupid needs


what one post shows up talking bollox about API keys and how the OP didn't know what it does, even though it clearly explains on the API key management page what it does, so now the sky is falling?

what exactly do you want?

i want you to read and comprehend my posts before replying again, please


I'm sorry, i can't understand what you're saying, you're providing this point of view, so provider.

make it so i can understand Roll
Lucas Kell
Solitude Trading
S.N.O.T.
#187 - 2015-02-16 15:18:03 UTC
Indahmawar Fazmarai wrote:
The inbox should not be shared. And in any decent company, quoted mails would be censored before delivering them through API. My outgoing mail regarded as your incoming mail is nobody's business. You can not share it and certanly CCP can't make a shoddy work that forces you to share your inbox without warning everyone writing to you.
Uh, no. Once you send a mail to someone, the contents of that mail are theirs too. If you sent me an evemail for example, I can create a website about it, pop it up in pink comic sans with a sparkly border if I want to.

Erica Dusette wrote:
You could say the same about TS, it's not a secure phone line yet corpies talk about personal stuff on there all the time and can (and are) often recorded while doing so.
Which they also shouldn't treat as private.

Erica Dusette wrote:
I agree with the OP that mail access from API is wrong, but I deal with it personally.
Well I like being able to read all my mails through the API, since it means I can serve them up to myself - for example on my phone. At the end of the day EVEmails aren't private. Accept that and use them accordingly.

Benny Ohu wrote:
at this point it's acceptable for the service provider to respond to how people might actually be using the service. this can easily be done without disrupting the function of the api
Out of curiosity, how would you do this without disrupting the API?

The Indecisive Noob - EVE fan blog.

Wholesale Trading - The new bulk trading mailing list.

Jenn aSide
Worthless Carebears
The Initiative.
#188 - 2015-02-16 15:18:28 UTC
Benny Ohu wrote:
Jenn aSide wrote:
Anyone with any brains knew from day one ( day two at the most) that video game email isn't secure in any way , even if the video game company doesn't tell you.

where the system looks like a normal mail client, but is designed to allow someone you didn't expect to have access to your information? no, when someone encounters something familiar, they'll assume it has the same qualities as what they're familiar with

that's why this in particular needs to be explained properly


See, you're clinging to nonsense. Like I said, you're smarter than this, you're probably just haivng a bad day.

As I said, unless the user FORGOT they logged in to EVE of EVE-gate to use evemail (due to some medical condition lol), there is no excuse for not knowing, and CCP hasn't done anything wrong.

People like you are why we live in this sue happy world btw.
Elenahina
Federal Navy Academy
Gallente Federation
#189 - 2015-02-16 15:19:22 UTC  |  Edited by: Elenahina
Benny Ohu wrote:
Jenn aSide wrote:
Anyone with any brains knew from day one ( day two at the most) that video game email isn't secure in any way , even if the video game company doesn't tell you.

where the system looks like a normal mail client, but is designed to allow someone you didn't expect to have access to your information? no, when someone encounters something familiar, they'll assume it has the same qualities as what they're familiar with

that's why this in particular needs to be explained properly


If they're familar with an email client, then they should be familar with the idea that if the recipient of your email allows other people to freely access their email, they have access to the mail you sent.

This is no different, despite the mental gymnastics. Let me break it down for you.

Bob sends Alice an mail containing their home address and phone number.
Alice allows Charles access to her mail account.
Charles can see Bob's mail.

There is literally no difference between a normal email client and in game mail. Hell it doesn't matter if it was sent in a letter via the postal system.

If Alice allows access to her mail, anyone with that access can read anything inside it, regardless of the Bob's personal privacy concerns.

Why is that such a hard concept to grasp?

Eve is like an addiction; you can't quit it until it quits you. Also, iderno

Jimmy Farrere
University of Caille
Gallente Federation
#190 - 2015-02-16 15:20:08 UTC
Jenn aSide wrote:


At what point does a person using EVE mail not know it's mail....in a video game?


That's exactly my point. The mail system in every other online game I have ever come across works exactly as you'd expect. It is secure as long a. No one gains access to my account b. No one gains access to the recipients account and c. No one gains access to the data stored on the servers of the game operator. That is a security level I am happy enough to share certain personal information under (eg. my real name, my email address or possibly my mobile phone number).

My problem is with Eve's in game mail system being several steps less secure than it first appears to be and not explicitly telling you about it.

There is no reason for a new player to think that Eve-mail is any less secure than the mail system in any other game, or their facebook or twitter accounts and nowhere are they told it is. That is the problem.
Lucas Kell
Solitude Trading
S.N.O.T.
#191 - 2015-02-16 15:21:21 UTC
xxxTRUSTxxx wrote:
what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
While not agreeing that evemail should be treated like email, you have missed the point Benny was making.

Take for example, Tim and Bob. They are friends and start EVE together. Tim EVEmails Bob something personal and private. Later, Bob signs up for the API key and joins the corp owned by Dave submitting his full API key.

At this point Dave has access to Tim's personal information which he sent to Bob though Bob's API, even though Tim has never visited the API page, thus has never read the API key terms.

The Indecisive Noob - EVE fan blog.

Wholesale Trading - The new bulk trading mailing list.

Jenn aSide
Worthless Carebears
The Initiative.
#192 - 2015-02-16 15:23:24 UTC
Jimmy Farrere wrote:
Jenn aSide wrote:


At what point does a person using EVE mail not know it's mail....in a video game?


That's exactly my point. The mail system in every other online game I have ever come across works exactly as you'd expect. It is secure as long a. No one gains access to my account b. No one gains access to the recipients account and c. No one gains access to the data stored on the servers of the game operator. That is a security level I am happy enough to share certain personal information under (eg. my real name, my email address or possibly my mobile phone number).

My problem is with Eve's in game mail system being several steps less secure than it first appears to be and not explicitly telling you about it.

There is no reason for a new player to think that Eve-mail is any less secure than the mail system in any other game, or their facebook or twitter accounts and nowhere are they told it is. That is the problem.


It's not a problem if you do the smart thing and treat ALL email as if it wasn't secure.

Somehow, expecting people to be smart about the internet (or life, or playing EVE) is considered being mean and uncaring lol.
Lucas Kell
Solitude Trading
S.N.O.T.
#193 - 2015-02-16 15:23:54 UTC  |  Edited by: Lucas Kell
Jimmy Farrere wrote:
Jenn aSide wrote:


At what point does a person using EVE mail not know it's mail....in a video game?


That's exactly my point. The mail system in every other online game I have ever come across works exactly as you'd expect. It is secure as long a. No one gains access to my account b. No one gains access to the recipients account and c. No one gains access to the data stored on the servers of the game operator. That is a security level I am happy enough to share certain personal information under (eg. my real name, my email address or possibly my mobile phone number).

My problem is with Eve's in game mail system being several steps less secure than it first appears to be and not explicitly telling you about it.

There is no reason for a new player to think that Eve-mail is any less secure than the mail system in any other game, or their facebook or twitter accounts and nowhere are they told it is. That is the problem.
It's actually just as secure, just in the case of B, the recipient is explicitly supplying access to his account to a third party. The same would be true in any game if someone you sent a mail to provided a third party access to their mails.

The Indecisive Noob - EVE fan blog.

Wholesale Trading - The new bulk trading mailing list.

Jenn aSide
Worthless Carebears
The Initiative.
#194 - 2015-02-16 15:24:19 UTC
Lucas Kell wrote:
xxxTRUSTxxx wrote:
what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
While not agreeing that evemail should be treated like email, you have missed the point Benny was making.

Take for example, Tim and Bob. They are friends and start EVE together. Tim EVEmails Bob something personal and private. Later, Bob signs up for the API key and joins the corp owned by Dave submitting his full API key.

At this point Dave has access to Tim's personal information which he sent to Bob though Bob's API, even though Tim has never visited the API page, thus has never read the API key terms.


I knew that commander save-the children would arrive eventually Big smile
Lucas Kell
Solitude Trading
S.N.O.T.
#195 - 2015-02-16 15:25:24 UTC
Jenn aSide wrote:
Lucas Kell wrote:
xxxTRUSTxxx wrote:
what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
While not agreeing that evemail should be treated like email, you have missed the point Benny was making.

Take for example, Tim and Bob. They are friends and start EVE together. Tim EVEmails Bob something personal and private. Later, Bob signs up for the API key and joins the corp owned by Dave submitting his full API key.

At this point Dave has access to Tim's personal information which he sent to Bob though Bob's API, even though Tim has never visited the API page, thus has never read the API key terms.
I knew that commander save-the children would arrive eventually Big smile
Indeed, commander save-the children is here and AGREEING WITH YOU, genius.

The Indecisive Noob - EVE fan blog.

Wholesale Trading - The new bulk trading mailing list.

Benny Ohu
Royal Amarr Institute
Amarr Empire
#196 - 2015-02-16 15:26:42 UTC
Lucas Kell wrote:
Benny Ohu wrote:
at this point it's acceptable for the service provider to respond to how people might actually be using the service. this can easily be done without disrupting the function of the api
Out of curiosity, how would you do this without disrupting the API?

one-time suppressable info message with a link to api info on the first time eve-mail is opened.

the main issue is the idea that someone other than the recipient can access the mail without the recipient sharing the contents directly, and that it's plausible for an average user to believe that evemail is reasonably secure from third parties (assuming a basic degree of trust between the sender and the service provider)

providing additional info on a game mechanic in this manner i wouldn't usually advocate, but it's also plausible the average user'll mail something personal to a friend or something if they're in the belief that third-party users wouldn't have access. the plausible real-life link is why it's partially on the service provider to ensure as far as is practical that the user is aware of the true functions of the mail service

i don't think anything more than a warning message is practical without causing disruption to others. at least, i can't think of anything vOv
xxxTRUSTxxx
Galactic Rangers
#197 - 2015-02-16 15:28:14 UTC
Lucas Kell wrote:
xxxTRUSTxxx wrote:
what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
While not agreeing that evemail should be treated like email, you have missed the point Benny was making.

Take for example, Tim and Bob. They are friends and start EVE together. Tim EVEmails Bob something personal and private. Later, Bob signs up for the API key and joins the corp owned by Dave submitting his full API key.

At this point Dave has access to Tim's personal information which he sent to Bob though Bob's API, even though Tim has never visited the API page, thus has never read the API key terms.



i get his point.. this is my point..


tim sent personal information to bob (stupid person) who gave access to a third party.

did bob read the API key terms?

maybe,, maybe not,, it's not CCP's fault. don't you think the fault is with Tim and Bob ? lol
Jenn aSide
Worthless Carebears
The Initiative.
#198 - 2015-02-16 15:28:29 UTC
Lucas Kell wrote:
Jenn aSide wrote:
Lucas Kell wrote:
xxxTRUSTxxx wrote:
what ??

it's on the fecking page you get the API keys from. if dumb fecker No.1 refuses to read it that's their own stupid fault.

you're making no sense at all, what do you want ? someone from CCP to phone the new user and walk them through it? ffs.Roll
While not agreeing that evemail should be treated like email, you have missed the point Benny was making.

Take for example, Tim and Bob. They are friends and start EVE together. Tim EVEmails Bob something personal and private. Later, Bob signs up for the API key and joins the corp owned by Dave submitting his full API key.

At this point Dave has access to Tim's personal information which he sent to Bob though Bob's API, even though Tim has never visited the API page, thus has never read the API key terms.
I knew that commander save-the children would arrive eventually Big smile
Indeed, commander save-the children is here and AGREEING WITH YOU, genius.



Upon seeing Lucas Kell agree with me I have discovered that i am wrong (must be if Lucas agrees) and surrender peacefully to Benny Ohu in exchange for protect from commander Save'Em Kell!!!
Benny Ohu
Royal Amarr Institute
Amarr Empire
#199 - 2015-02-16 15:29:12 UTC
Jenn aSide wrote:
See, you're clinging to nonsense. Like I said, you're smarter than this, you're probably just haivng a bad day.

As I said, unless the user FORGOT they logged in to EVE of EVE-gate to use evemail (due to some medical condition lol), there is no excuse for not knowing, and CCP hasn't done anything wrong.

People like you are why we live in this sue happy world btw.

Jenn aSide wrote:
lol, I don't think it's everyone else with comprehension problems here.After time has passed, you've gotten up from your computer and thought about it for a while, You'll realize your in the wrong here, you fell into an enlargement trap (it happens to all of us).

fallacious garbage
Lors Dornick
Kallisti Industries
#200 - 2015-02-16 15:36:10 UTC
The security of any form of electronic communication whether it be e-mail, eve-mail, eve-chat or any other chats is bordering close to none.

With very few and special exceptions everything you type, say or display on the Internet is about as secure as a postcard, with the possible addition of a padlock on a siblings diary that can be picked with a paper clip.

If you want security, apply it _outside_ the channel, encrypt locally, use AAA pinpads and so on.

But most of all, ponder what information your are willing to share, with whom and over what channel.

Never ask why someone else isn't protecting your privacy if you can't be arsed to keep those 3 questions in your head before transmitting.

Information Security isn't about technology or corporate rules, it's a process that starts in the mind of every single user.

CCP Greyscale: As to starbases, we agree it's pretty terrible, but we don't want to delay the entire release just for this one factor.