EVE New Citizens Q&A

I am responsible for recruitment within my corp. I want to implement some security checks to try to weed out spies and corp thieves. I know I can ask for their API key, but what information should I request they give me access to and what do I actually look for?

Any other security related tips would be appreciated. Thanks in advance.

Besides the API, you look at their corp history, too see if they are a jumper. You can also check the various killboards to see if they are an awox'er. API's are ok, but a good spy will be using an alternate account, so it wouldn't show anything anyways.

Just the fact that you are aware such a thing as corp thieves, awoxers and spies exist is a good thing.

Finding out, just by checking the API can be difficult, unless they are absolutely horrible. Usually the most interesting info comes from wallet journals, see if they have transferred ISK between characters and what these other characters are doing and possibly mail history.

In the end, the best way of defending yourself against a thief/awoxer is not giving them the opportunity to strike:
- Don't have any information worth stealing and the spies will just get bored and leave
- When out on a fleet, make sure you have logi ready to tank the damage of one awoxer. This especially applies to mining fleets.
- Don't give anyone access to anything, unless you know them IRL and can go punch them in the face if they screw up. Does your corp sponsor its members with ISK for expenses? Set up a max amount of ISK/items you give to a player each month so it's not worth sticking around.

A friend of mine, joined a highsec mining corporation yesterday. Within 24 hours he managed to get Director rights and has now stolen over 10 billion ISK worth of assets. The corp has not noticed it yet, and he will keep on stealing things until they do. How did he pull it off? He's a good talker. An API key wouldn't have saved them from him.

Be paranoid, it pays off!

and as far as weeding go, you should only wed brother and sister like the targaryens did (and they had their stuff together for 300 years straight)

Thank you for telling me that. I will relay that to my contact and they will take the appropriate action.

Back on topic, another way that I've noticed myself is that potential hostile spies usually talk funny in corp chat, they may make references to corps, alliances, people, etc. These are usually the more noobies spies and are ratted out more easily.

Only grant roles to a few trusted people, usually 1-2 for each timezone that you have memebership in. Trusting even 1 other person still leaves you vulnerable. This is EVE after all, the game where even a saintly old grandmother can let her never before seen evil side shine. If you constantly worry about corp thieves and spies you might want to ship down to a 1 man corp. I think at some point every large corp is going to experience some form of corp theft, I know every single large corp I've been in has had it happen. You deal with it and move on, its the price you pay to play with other people.

I find the whole "Full API" thing so ridiculous, it only deters to the most sloppy ones that can't be arsed to make clean slate account. I'd only provide my full API if I get the recruiter' in return. I don't give a **** letting them nose in my wallet transactions, but I won't leak corp/alliance intels to him if he's not going to do the same thing and it's my own business where and what assets I own.

You can't prevent them from getting in, it's the way you share intel and grant access to assets that makes their work more or less difficult. Partition as much as you can, keep track of who is granted access to what. If anything slips, you'll have an easier time cross-checking.