These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
123Next pageLast page
 

New Goon vcode requirement - hacked accounts to ensue - will anybody be surprised?

First post
Author
Previous Topic Next Topic
scooter Kondur
Doomheim
#1 - 2012-01-28 18:27:00 UTC  |  Edited by: scooter Kondur
tldr;

why goons need full api list?
14 pgs of name calling but no answers except - acct hacking, ganking and intel against allies in CFC
one has to wonder why goons and alts keep attacking and not providing answers


Goons have a new requirement in order to be able to join their fleets - They want FULL ASSET list. Is there really any good reason for this? The topper on all of this is the shame list for corporations that don't comply.

The following was sent out to all members of the CFC:

vCode needs to have a minimum access mask of 50725130 (following the link above will create a key with this mask) which is the following access

Private Information: AccountStatus
Private Information: CharacterInfo
Private Information: SkillQueue
Private Information: SkillInTraining
Private Information: CharacterSheet
Private Information: AssetList
Public Information: KillLog

Your vCode needs to list ALL characters on your account and by of type Character
Your vCode needs to have no expiration date (make sure the No Expiry checkbox is checked)


Compliance numbers continue to climb with regards to the new vCode requirements, however there are still some alt corps that are not in compliance. There are also some member corps that aren't in compliance either, I've added these to the list.

To see the list of shame please visit: https://goonfleet.com/index.php?/topic/170093-required-corp-api-key-changes/

Please note that tomorrow we will be announcing fines for any corp not in compliance.

SHAME ON GOONS
Steve Celeste
Doomheim
#2 - 2012-01-28 18:33:12 UTC
You cannot hack accounts by using API keys.

Next.
Nova Fox
Novafox Shipyards
#3 - 2012-01-28 18:34:07 UTC
You also should know beetter that goons do not recruit ingame.

Dust 514's CPM 1 Iron Wolf Saber Eve mail me about Dust 514 issues.
Andski
Science and Trade Institute
Caldari State
#4 - 2012-01-28 18:35:48 UTC  |  Edited by: Andski
Why is the EVE playerbase so fucking stupid?

You can't hack accounts via API. We require full-access corp-level APIs for every corp in the alliance for audit reasons. That requirement has existed for years.

Twitter: @EVEAndski

"It's easy to speak for the silent majority. They rarely object to what you put into their mouths."    - Abrazzar
scooter Kondur
Doomheim
#5 - 2012-01-28 18:36:16 UTC
Not using the API to hack. Using the API to probe out the big fish. There are lots of other ways to hack an account. This method just lets whoever is doing the hacking figure out which account is worth the effort.
Andski
Science and Trade Institute
Caldari State
#6 - 2012-01-28 18:37:22 UTC
Because account hacking is a totally legitimate form of metagaming, right moron? You can't even see account details (username, e-mail) via API.

Twitter: @EVEAndski

"It's easy to speak for the silent majority. They rarely object to what you put into their mouths."    - Abrazzar
Ezurae
Science and Trade Institute
Caldari State
#7 - 2012-01-28 18:37:24 UTC  |  Edited by: Ezurae
scooter Kondur wrote:
Goons have a new requirement in order to be able to join their fleets - They want FULL ASSET list. Is there really any good reason for this? The topper on all of this is the shame list for corporations that don't comply.

The following was sent out to all members of the CFC:

vCode needs to have a minimum access mask of 50725130 (following the link above will create a key with this mask) which is the following access

Private Information: AccountStatus
Private Information: CharacterInfo
Private Information: SkillQueue
Private Information: SkillInTraining
Private Information: CharacterSheet
Private Information: AssetList
Public Information: KillLog

Your vCode needs to list ALL characters on your account and by of type Character
Your vCode needs to have no expiration date (make sure the No Expiry checkbox is checked)


Compliance numbers continue to climb with regards to the new vCode requirements, however there are still some alt corps that are not in compliance. There are also some member corps that aren't in compliance either, I've added these to the list.

To see the list of shame please visit: https://goonfleet.com/index.php?/topic/170093-required-corp-api-key-changes/

Please note that tomorrow we will be announcing fines for any corp not in compliance.

SHAME ON GOONS



add yourself to the list of shame because you got no clue what the api allows and what not...

fyi: API allows only the reading of information. nothing can be stolen through the api... AND the api doesnt provide any information that could help with hacking someones account (ie accountname, password (lol))
ugh zug
Aliastra
Gallente Federation
#8 - 2012-01-28 18:38:13 UTC
how exactly does this put you at risk of being hacked? i mean they already get your IP when you log into ventrilo or teamspeak, and it doesn't take much after that point to get into your system.

Want me to shut up? Remove content from my post,1B. Remove my content from a thread I have started 2B.
Prince Kobol
#9 - 2012-01-28 18:38:14 UTC
scooter Kondur wrote:
Not using the API to hack. Using the API to probe out the big fish. There are lots of other ways to hack an account. This method just lets whoever is doing the hacking figure out which account is worth the effort.


I swear to god people who play this game are getting dumber by the day.
scooter Kondur
Doomheim
#10 - 2012-01-28 18:38:44 UTC
No in order to join GSF coms you need to provide all this information. And anyways only reason to know complete asset list is to probe out the big fish and hack their account...or gank them...you know that there are sites where once you have the API you can see where assets are in real time?
scooter Kondur
Doomheim
#11 - 2012-01-28 18:41:53 UTC
Why do goons need to see my assets?
Nova Fox
Novafox Shipyards
#12 - 2012-01-28 18:42:47 UTC
Market intel before api used to be a very hard portfolio to put together but if you have anyone's portfolio you can easily ruin them with your wallet by hitting htier wallet.

EIther way you'd be an idiot trader trying to join goomswarm in this manner.

Dust 514's CPM 1 Iron Wolf Saber Eve mail me about Dust 514 issues.
Andski
Science and Trade Institute
Caldari State
#13 - 2012-01-28 18:42:53 UTC
scooter Kondur wrote:
No in order to join GSF coms you need to provide all this information. And anyways only reason to know complete asset list is to probe out the big fish and hack their account...or gank them...you know that there are sites where once you have the API you can see where assets are in real time?


what do they put in the water these days? goddamn

Twitter: @EVEAndski

"It's easy to speak for the silent majority. They rarely object to what you put into their mouths."    - Abrazzar
scooter Kondur
Doomheim
#14 - 2012-01-28 18:43:47 UTC
Why do goons need to see anyone's assets? Have yet to hear an answer that makes any sense.
Andski
Science and Trade Institute
Caldari State
#15 - 2012-01-28 18:44:18 UTC
Nova Fox wrote:
Market intel before api used to be a very hard portfolio to put together but if you have anyone's portfolio you can easily ruin them with your wallet by hitting htier wallet.

EIther way you'd be an idiot trader trying to join goomswarm in this manner.


too bad nobody has access to view my market orders, heh, or even my assets

Twitter: @EVEAndski

"It's easy to speak for the silent majority. They rarely object to what you put into their mouths."    - Abrazzar
Jovan Geldon
The Scope
Gallente Federation
#16 - 2012-01-28 18:45:57 UTC
scooter Kondur wrote:
Why do goons need to see anyone's assets? Have yet to hear an answer that makes any sense.


I don't quite understand how, but you got me good bro. I actually had a proper rage post written out and everything.

9/10. I'm docking 1 point for unoriginality because you used GoonSwarm as your example.
Andski
Science and Trade Institute
Caldari State
#17 - 2012-01-28 18:46:45 UTC
scooter Kondur wrote:
Why do goons need to see anyone's assets? Have yet to hear an answer that makes any sense.


why do you care

Twitter: @EVEAndski

"It's easy to speak for the silent majority. They rarely object to what you put into their mouths."    - Abrazzar
scooter Kondur
Doomheim
#18 - 2012-01-28 18:48:03 UTC  |  Edited by: scooter Kondur
Let me spell this out a bit more simply because GOONS AND ALTS seem to like to try and cloud the issue.

Anyone who wants to join mumble has to provide this information in order to get on - that includes allies....so no not just goons....

Once the api is provided assets can be tracked in real time

you are either going to be ganked by goon alt or information will be used to hack your account...yes you cant use api to hack account but there are other ways for it to be done...not including the usual goons social engineering tactics.
Nova Fox
Novafox Shipyards
#19 - 2012-01-28 18:48:59 UTC
Andski wrote:
Nova Fox wrote:
Market intel before api used to be a very hard portfolio to put together but if you have anyone's portfolio you can easily ruin them with your wallet by hitting htier wallet.

EIther way you'd be an idiot trader trying to join goomswarm in this manner.


too bad nobody has access to view my market orders, heh, or even my assets


Spam Agent finder.

buy random items from market

Check journal to see who you bought items from

passive targeters

and

cargo hold scanner.

This would only give a partial porfolio but after two three weeks youll have more than enough of an idea about a persons buying and selling habbits if they are serious traders to ruin them if they dont coin flip thier entire stratagey.

Dust 514's CPM 1 Iron Wolf Saber Eve mail me about Dust 514 issues.
Nova Fox
Novafox Shipyards
#20 - 2012-01-28 18:49:49 UTC
scooter Kondur wrote:
Let me spell this out a bit more simply because GOONS AND ALTS seem to like to try and cloud the issue.

Anyone who wants to join mumble has to provide this information in order to get on - that includes allies....so no not just goons....

Once the api is provided assets can be tracked in real time

you are either going to be ganked by goon alt or information will be used to hack your account...yes you cant use api to hack account but there are other ways for it to be done...not including the usual goons social engineering tactics.



Good sir, I can gaurantee goonswarm would be able to disown me of having any alts in thier corproation, I am not part of thier petting zoo.

Dust 514's CPM 1 Iron Wolf Saber Eve mail me about Dust 514 issues.
123Next pageLast page