These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

Customizable API breaks spy-checking method; intended?
Author
Previous Topic Next Topic
Petrus Blackshell
Rifterlings
#1 - 2011-12-31 05:47:29 UTC  |  Edited by: Petrus Blackshell
With the old API, you could request somebody's limited key, and run a quick check of their account for possible other characters they could be a spy for. It was an useful tool in the recruitment arsenal... and is no longer available.

With the customizable API, the same function exists, but if the given key is a single-character key, then it appears that the account has a single character on it, and any same-account wannabe spy can use that as an excuse.

The issue stems mainly in that the response the API does not differentiate between a single-character API key and a multi-character key but with a single character in the account.

Is this just an oversight, or do I need to start lots of spy endeavors now that I can't be caught as easily?

Edit: Proof: you can only see my character, not my two alts.

Accidentally The Whole Frigate - For-newbies blog (currently on pause)
MadMuppet
Critical Mass Inc
#2 - 2011-12-31 05:54:35 UTC
I believe it was intentional. Time to don the cloak and grab the dagger.

This message brought to you by Experience(tm). When common sense fails you, experience will come to the rescue. Experience(tm) from the makers of CONCORD.

"If you are part of the problem, you will be nerfed." -MadMuppet
Petrus Blackshell
Rifterlings
#3 - 2011-12-31 05:57:12 UTC
A possible "solution" for recruiters is to demand an account-wide key with more than a single character on there (even if it's a dummy character made for this sole purpose). There is no way to include 2/3 characters in a key, so that would ensure you see all the characters on the account.

However, this would mean not accepting anyone who has a single character -- and there are a fair amount of those people.

Accidentally The Whole Frigate - For-newbies blog (currently on pause)
Lors Dornick
Kallisti Industries
#4 - 2011-12-31 06:22:53 UTC
Petrus Blackshell wrote:
With the old API, you could request somebody's limited key, and run a quick check of their account for possible other characters they could be a spy for. It was an useful tool in the recruitment arsenal... and is no longer available.

With the customizable API, the same function exists, but if the given key is a single-character key, then it appears that the account has a single character on it, and any same-account wannabe spy can use that as an excuse.

The issue stems mainly in that the response the API does not differentiate between a single-character API key and a multi-character key but with a single character in the account.

Is this just an oversight, or do I need to start lots of spy endeavors now that I can't be caught as easily?

Edit: Proof: you can only see my character, not my two alts.


If you want a key check all the characters on one account, then why don't you ask for an account wide key?

The data that is returned does actually tell you if it's a character or account key.

So working as intended and as before.

CCP Greyscale: As to starbases, we agree it's pretty terrible, but we don't want to delay the entire release just for this one factor.
doomlord289
KarmaFleet
Goonswarm Federation
#5 - 2011-12-31 08:22:51 UTC
Lors Dornick wrote:
Petrus Blackshell wrote:
With the old API, you could request somebody's limited key, and run a quick check of their account for possible other characters they could be a spy for. It was an useful tool in the recruitment arsenal... and is no longer available.

With the customizable API, the same function exists, but if the given key is a single-character key, then it appears that the account has a single character on it, and any same-account wannabe spy can use that as an excuse.

The issue stems mainly in that the response the API does not differentiate between a single-character API key and a multi-character key but with a single character in the account.

Is this just an oversight, or do I need to start lots of spy endeavors now that I can't be caught as easily?

Edit: Proof: you can only see my character, not my two alts.


If you want a key check all the characters on one account, then why don't you ask for an account wide key?

The data that is returned does actually tell you if it's a character or account key.

So working as intended and as before.


The forum ate my long-winded post about the ApiKeyInfo page, so just click the link in the OP and change Characters.xml.aspx to ApiKeyInfo.xml.aspx and find the "type" attribute in the "key" element. This will tell you if it's a Character, Account, or Corporation key.
Messoroz
AQUILA INC
Verge of Collapse
#6 - 2011-12-31 08:39:09 UTC
spy-check method wasn't an actual intended use/"bullet point of use" of API, hence everything is worked as intended. CCP is free to do as they wish with the API.
Ranger 1
Ranger Corp
Vae. Victis.
#7 - 2011-12-31 08:46:06 UTC
Sometimes I think the primary usefulness of asking an applicant for an API key of any type is simply to sort out the dolts that think they shouldn't have to.

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
Elegbara
White Wolf Enterprises
Harmonious Ascent
#8 - 2011-12-31 09:32:16 UTC
Petrus Blackshell wrote:
Edit: Proof: you can only see my character, not my two alts.

I see that you could have other characters since you have provided character key, not account key.

Open your eyes. And awaken.
Petrus Blackshell
Rifterlings
#9 - 2011-12-31 10:45:27 UTC  |  Edited by: Petrus Blackshell
Elegbara wrote:
Petrus Blackshell wrote:
Edit: Proof: you can only see my character, not my two alts.

I see that you could have other characters since you have provided character key, not account key.


Thank you! That is what I was looking for. Curious, though, how did you find that?

CCP seem to have forgotten about the devs again, what with ApiKeyInfo.xml not being documented on their EVE API Functions page... Roll

Edit: Oh, it's on EVEDev. I am dumb, nothing to see here.

Accidentally The Whole Frigate - For-newbies blog (currently on pause)