These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

Full API to join Corps

First post First post
Author
Previous Topic Next Topic
SurrenderMonkey
State Protectorate
Caldari State
#81 - 2014-06-09 14:39:02 UTC
I will cheerfully hand over a squeaky-clean full API to any corp I am planning on victimizing.

"Help, I'm bored with missions!"

http://swiftandbitter.com/eve/wtd/
TigerXtrm
KarmaFleet
Goonswarm Federation
#82 - 2014-06-09 15:28:47 UTC
If a corp asks for a full API, look for a different corp.

My YouTube Channel - EVE Tutorials & other game related things!

My Website - Blogs, Livestreams & Forums
Othran
Route One
#83 - 2014-06-09 15:33:52 UTC
TigerXtrm wrote:
If a corp asks for a full API, look for a different corp.


Or tell them they're not getting various sections & why. If they want you then they'll agree, if not then no big loss either way.
Da'iel Zehn
Evil Frosty's Premium Liqours and Fine Wines
#84 - 2014-06-09 18:01:47 UTC
I know of people who have 30+ accounts. APIs are pointless to keep out spies.

De'Veldrin
Republic University
Minmatar Republic
#85 - 2014-06-09 18:11:16 UTC
Andski wrote:
Requiring an API is the difference between potential spies simply using another character slot and paying for a separate account to spy on you. It may not keep out all spies but it keeps out those who don't wish to put much effort into it.


In that regard an API check is like a lock. It keeps the honest people honest. A true bastard will find a way to ass ream you despite your security checks.

De'Veldrin's Corollary (to Malcanis' Law): Any idea that seeks to limit the ability of a large nullsec bloc to do something in the name of allowing more small groups into sov null will inevitably make it that much harder for small groups to enter sov null.
Kijo Rikki
Killboard Padding Services
#86 - 2014-06-09 18:40:23 UTC
I give my full API out like I'm working a street corner under a pimp. Smile

You make a valid point, good Sir or Madam. 
Ramona McCandless
Silent Vale
LinkNet
#87 - 2014-06-09 18:41:30 UTC
Kijo Rikki wrote:
I give my full API out like I'm working a street corner under a pimp. Smile


"Hey kid, wanna buy an API? Fresh and clean *wink wink*"

"Yea, some dude came in and was normal for first couple months, so I gave him director." - Sean Dunaway

"A singular character could be hired to penetrate another corps space... using gorilla like tactics..." - Chane Morgann
IIshira
School of Applied Knowledge
Caldari State
#88 - 2014-06-09 19:15:41 UTC
I would ask for a limited API just to verify the basics and give advice on skills.

You can ask for someone's API but it's not going to list their ten accounts.

The biggest thing to check is killboards. You would be surprised how many pilots keep jumping corps to get free kills. No one bothers to check because they get too excited about recruiting.
Adira Nictor
Sebiestor Tribe
Minmatar Republic
#89 - 2014-06-09 21:09:04 UTC
Ramona McCandless wrote:
Kijo Rikki wrote:
I give my full API out like I'm working a street corner under a pimp. Smile


"Hey kid, wanna buy an API? Fresh and clean *wink wink*"


I'll take 3.

I might come back for more later.
BeBopAReBop RhubarbPie
University of Caille
Gallente Federation
#90 - 2014-06-09 21:31:51 UTC
Ramona McCandless wrote:
Jinn Aideron wrote:
Sibyyl wrote:
I have yet to see anyone make a strong (any?) case in this thread for why Mail needs to be in a full API. As mentioned before, I don't have issues sharing everything else.
Because they can ask for it. It's in the API CCP provides, so they ask it. If your payment details were in there, they'd ask that, too. As goes for sexual preferences and shoe size. And that's the whole case 'for' this.

It's for everyone to decide not to participate in this bullshit.


Exactly

If you dont like it, there's plenty of Corps willing to accept you without it

If your name is McCandless for example, you can join The Clan, we never ask for API.

Now I know the name of my next awox alt =D

OP, Full api is not necessary for corp background checks, however so many sections should be checked that it's often easier to ask for a full api. If I were running corp security for a corp that I felt needed decent security (read as actually has stuff worth stealing/blowing up) I would ask for the following sections:

Everything in the "Account and Market" section.

Mail Messages (If I found any suspicious in here, I might request mail bodies, or reject the application outright)
Mail Lists
Contact Notifications
Contact List

Contracts
CharacterInfo
Asset list
Character Sheet is useful for evaluating an applicant, but not for security reasons

That's the minimum. The api must be set to reveal all characters on the account, and any one way monetary transactions should be noted. The api background check should be combined with searches on eve-live, eve-search, killboards, and basic background checks on previous corporations/contacts.

Sometimes even with all of this info its not enough. The reality is that recruiting is only the first line of security around a corporation. Even weeding out 80% of potential spies and awoxers makes the corp significantly safer. Internal corp security should be used to try to handle the ones that get in. Policies to demand activity, and force corp members to have a stake in the corp's survival are important as is careful distribution of information.

Founder of Violet Squadron, a small gang NPSI community! Mail me for more information.

BeBopAReBop RhubarbPie's Space Mediation Service!
James Amril-Kesh
Viziam
Amarr Empire
#91 - 2014-06-09 21:36:23 UTC
TigerXtrm wrote:
If a corp asks for a full API, look for a different corp.

If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp.

Enjoying the rain today? ;)
Adira Nictor
Sebiestor Tribe
Minmatar Republic
#92 - 2014-06-09 21:36:40 UTC
BeBopAReBop RhubarbPie wrote:
Ramona McCandless wrote:
Jinn Aideron wrote:
Sibyyl wrote:
I have yet to see anyone make a strong (any?) case in this thread for why Mail needs to be in a full API. As mentioned before, I don't have issues sharing everything else.
Because they can ask for it. It's in the API CCP provides, so they ask it. If your payment details were in there, they'd ask that, too. As goes for sexual preferences and shoe size. And that's the whole case 'for' this.

It's for everyone to decide not to participate in this bullshit.


Exactly

If you dont like it, there's plenty of Corps willing to accept you without it

If your name is McCandless for example, you can join The Clan, we never ask for API.

Now I know the name of my next awox alt =D

OP, Full api is not necessary for corp background checks, however so many sections should be checked that it's often easier to ask for a full api. If I were running corp security for a corp that I felt needed decent security (read as actually has stuff worth stealing/blowing up) I would ask for the following sections:

Everything in the "Account and Market" section.

Mail Messages (If I found any suspicious in here, I might request mail bodies, or reject the application outright)
Mail Lists
Contact Notifications
Contact List

Contracts
CharacterInfo
Asset list
Character Sheet is useful for evaluating an applicant, but not for security reasons

That's the minimum. The api must be set to reveal all characters on the account, and any one way monetary transactions should be noted. The api background check should be combined with searches on eve-live, eve-search, killboards, and basic background checks on previous corporations/contacts.

Sometimes even with all of this info its not enough. The reality is that recruiting is only the first line of security around a corporation. Even weeding out 80% of potential spies and awoxers makes the corp significantly safer. Internal corp security should be used to try to handle the ones that get in. Policies to demand activity, and force corp members to have a stake in the corp's survival are important as is careful distribution of information.



This is really sound advice. I am glad dumb CEOs and Recruitment officers don't read the forums. It would make my job that much harder.
Alphea Abbra
Project Promethion
#93 - 2014-06-09 21:44:02 UTC
Othran wrote:
I simply said that IME if somebody could read your evemails then at some point they will. There WILL be someone in the corp/alliance sad enough to go do that just because they can.

Its not like you're going to be a spai & evemail from the spai account anyway Roll
tl;dr its not that big a deal IME to say you're not getting mail/contacts
I just checked what kind of mails I have, right now:
2 mails from former CSM Trebor during his mail-campaign in 2012, 1 with the questionnaire to join the corp that merged into my current one, 1 mail about a station undock status during an OP, 1 about helping a coalitionmate with some website, 2 from a corp mate about some ships and mods he moved for me, 1 from CCP Games about the 2013 CSM campaign, 1 mail regarding corp courier service, 2 from alliance mates about hangar-sales, 1 as an answer after I checked some moons (And POSes), 3 about my avatar looking good and goth, and 1 from Solecist about liking a post.
I have one thing to say to whoever wants to read through these mails: You brought that on yourself, GLHF.
Now, I also have a ton of alliance and corp mails. If they (You know who I am talking about! The evildoers, those bastards) want to look up corp or alliance mails from I joined till now, I think they are wasting their time.
Now, I did delete all the corp and alliance mails from corps I left. First, because I fail to see why they'd want months old poor intel they could also get via eveskunk, and secondly because I intend to do the same favour if I leave this one. I think, deep down, on the balance, they'd rather want that than they want the impeccable insight into IRC's alliance mails during my time there.
I can't remember if it was a full API then, or if that came later.

James Amril-Kesh wrote:
Here's one thing I've wondered about this. I gave my corp full API (and alliance some API details too, don't remember exactly what though). So at the very least my corp can read my mail.

I have two messages from GMs in my mailbox. It's against the EULA to share GM correspondence. So if someone pulls a GM mail from my API (and I know you can since I can see them in EVEMon) and posts it somewhere, does this mean that I've violated the EULA? Even if it doesn't, is some trigger happy GM going to assume that it was me who shared it, and bring the hammer down anyway?

I think I'll file a support ticket.

I could just delete the message but any rule that says I'm obligated by EULA to delete private correspondence is a rule that needs revision.
Reverse rule lawyer? Awesome, I like that.
Make sure to get them to mail the response to you though.

That'll show them!
Paul Panala
Brave Empire Inc.
Brave United
#94 - 2014-06-09 21:44:33 UTC
Yes, it is common. I find access to eve mail to be a bit invasive. I normally give them everything but that and they don't typically complain. If I had eve mail I wanted to hide, I would just delete it.

IMO about the only thing they can get from an API is what you typically do in-game and if they have any alts you exchange ISK with. And the fact that you are willing to provide an API key says a little...
Ireland VonVicious
Vicious Trading Company
#95 - 2014-06-10 02:18:39 UTC
Othran wrote:
I've been in corps/alliances where it was standard practice to demand a full API.

Most corps probably will insist on an API which pulls your wallet transactions though - if you're bothered about someone seeing the specifics of how you make isk then make a trade alt.


This only works for high sec and small time traders.

Rorqual/Jump Freighter/Max trade skills are just a few reasons trade alts are not always the way to go.

Although anyone who uses all those has 2 alts on the same account to use as trade alts. (( War time hauler / cynos ))
It won't help much since anyone asking for an API with half a brain will ask for full account not just pilot. (( This goes for custom API's as well ))

In short your idea doesn't always work.
Adira Nictor
Sebiestor Tribe
Minmatar Republic
#96 - 2014-06-10 02:28:14 UTC
Ireland VonVicious wrote:
Othran wrote:
I've been in corps/alliances where it was standard practice to demand a full API.

Most corps probably will insist on an API which pulls your wallet transactions though - if you're bothered about someone seeing the specifics of how you make isk then make a trade alt.


This only works for high sec and small time traders.

Rorqual/Jump Freighter/Max trade skills are just a few reasons trade alts are not always the way to go.

Although anyone who uses all those has 2 alts on the same account to use as trade alts. (( War time hauler / cynos ))
It won't help much since anyone asking for an API with half a brain will ask for full account not just pilot. (( This goes for custom API's as well ))

In short your idea doesn't always work.


You would be amazed how many people don't know the difference between All character api and just a single character api, or how to tell which one you gave them.
Inxentas Ultramar
Ultramar Independent Contracting
#97 - 2014-06-10 15:13:20 UTC  |  Edited by: Inxentas Ultramar
James Amril-Kesh wrote:
TigerXtrm wrote:
If a corp asks for a full API, look for a different corp.

If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp.

You normally aren't this blunt, James. Lol

You do realize you can define hanger access using Roles and Titles right? Then you might also realize you can fully control who has access to what hanger, making it possible to recruit new people without them having access to sensitive corporate hangers.

Since assets can be remotely moved from one office hanger to another, proper access settings are more usefull to prevent actual theft then an API key, as they can be used to 100% guarantee a person doesn't get access to expensive assets. I'd be more concerned with awoxing then theft.
BeBopAReBop RhubarbPie
University of Caille
Gallente Federation
#98 - 2014-06-10 19:34:54 UTC
Inxentas Ultramar wrote:
James Amril-Kesh wrote:
TigerXtrm wrote:
If a corp asks for a full API, look for a different corp.

If a corp doesn't ask for a full API, they don't have anything worth stealing/destroying and thus probably aren't a very good corp.

You normally aren't this blunt, James. Lol

You do realize you can define hanger access using Roles and Titles right? Then you might also realize you can fully control who has access to what hanger, making it possible to recruit new people without them having access to sensitive corporate hangers.

Since assets can be remotely moved from one office hanger to another, proper access settings are more usefull to prevent actual theft then an API key, as they can be used to 100% guarantee a person doesn't get access to expensive assets. I'd be more concerned with awoxing then theft.

I was astounded to learn that a corp that I joined awhile back flew bhaalgorns and capitals, and never asked for an api.

Founder of Violet Squadron, a small gang NPSI community! Mail me for more information.

BeBopAReBop RhubarbPie's Space Mediation Service!
Ramona McCandless
Silent Vale
LinkNet
#99 - 2014-06-10 19:47:57 UTC
BeBopAReBop RhubarbPie wrote:
Ramona McCandless wrote:


If your name is McCandless for example, you can join The Clan, we never ask for API.

Now I know the name of my next awox alt =D


You will be in good company

We are all AWOX alts

Well, apart from me

Im an AWOX main

"Yea, some dude came in and was normal for first couple months, so I gave him director." - Sean Dunaway

"A singular character could be hired to penetrate another corps space... using gorilla like tactics..." - Chane Morgann
Kristalll
Caldari Provisions
Caldari State
#100 - 2014-06-10 19:55:54 UTC
Conrad Lionhart wrote:
Sher Rayet wrote:
If you give away full API they read your mails and transactions etc. Go ahead...


But is it standard practice?
Would you do it if you wanted to join a new corp?


Yes, and I do.

“Die trying” is the proudest human thing.