These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

Full API to join Corps

First post First post
Author
Previous Topic Next Topic
tiberiusric
Comply Or Die
Pandemic Horde
#141 - 2014-06-14 13:03:53 UTC
Sometimes they ask, and I used to, to check if you have been transacting with known dodgy people! However you should only need to worry about that if you are in a well know alliance or Corp. But a lot do it just cos. Don't give it if they are just random.

Funny thing is the large nullsec alliances have more spies than

All my views are my own - never be afraid to post with your main, unless you're going to post some dumb shit
Xuixien
Solar Winds Security Solutions
#142 - 2014-06-14 17:19:55 UTC
Grath Telkin wrote:
So theres a lot of people telling you that the API isn't that great of a security measure and that you shouldn't give it out 'unless the directors are willing to give you theirs" or some other inane nonsense.


Actually, people who say that are making a fair point in this day and age of EVE Online's recruitment scams, reverse safaris, etcetc. How do you know the person "recruiting" you is even a recruitment officer? And if they are, how do you know they're not friends ("blues") with one of your enemies, making them a security risk to you?

Grath Telkin wrote:
Spies happen in EVE, and while the API isn't ironclad protection its but one of many layers that add up to create protection against unwanted people.


API keys only catch bad spies who wouldn't have managed any damage anyway. Full API keys do not catch good spies, as evidenced by... Revenant kills.... ;)

There is no reason for a full API. You don't need to know what I build and research. You don't need to know my Faction Warfare stats. You don't even need to know who my contacts are (here's a tidbit for you dude - I don't have blues in my contact lists. I have a notepad document for that. All you'll find is neutrals and reds.)

You don't need to know what I buy and sell on the market either.

A focused API key is all you need. And again - any good spy who is capable of real damage is going to have a clean API.

There's no sound argument in favor of full API keys. But it makes you feel safe. lol@feelings.

Epic Space Cat, Horsegirl, Philanthropist
Solecist Project
#143 - 2014-06-14 17:49:29 UTC
Xuixien wrote:
100% valid.
To support her words in a practical sense ...


You recruit. You ask for full API keys.

I awox. I create a new clone.

You can easily have my full API key and it doesn't matter.

Depending on my corp"mates", a few days of skilling can be enough already.
All else, fitting a gnosis properly and getting logi support is really easy and fast to skill for.

The gnosis is a popular awoxing ship,
because it doesn't need a lot of skills for great performance.

With 6 midslots, you boost the resistances and simply have a clone give logi support.
There's no flag for repping people who have in-corp fights.


What you're doing is pretty much on the level of a noob who learns something new ...
... tries to do it right, but ...
... doesn't actually understand the reason why he does it in the first place.





No API check out there
can stop me
from being nice and friendly to you.

And you will like it!

That ringing in your ears you're experiencing right now is the last gasping breathe of a dying inner ear as it got thoroughly PULVERISED by the point roaring over your head at supersonic speeds. - Tippia
Amenity Project
Imperial Shipment
Amarr Empire
#144 - 2014-06-14 18:13:30 UTC
Trivia.

One doesn't need the API key to know somebody elses contacts.

All it needs is him to set you to Excellent standing.



What am I talking about? (:
Zaxix
State War Academy
Caldari State
#145 - 2014-06-14 18:15:42 UTC
Amenity Project wrote:
Trivia.

One doesn't need the API key to know somebody elses contacts.

All it needs is him to set you to Excellent standing.



What am I talking about? (:

Unless that person updates his evegate settings.

Bokononist

 
Amenity Project
Imperial Shipment
Amarr Empire
#146 - 2014-06-14 19:07:34 UTC
Zaxix wrote:
Amenity Project wrote:
Trivia.

One doesn't need the API key to know somebody elses contacts.

All it needs is him to set you to Excellent standing.



What am I talking about? (:

Unless that person updates his evegate settings.
Unless that person never finds out about his evegate settings. :D
Grath Telkin
Amok.
Goonswarm Federation
#147 - 2014-06-15 00:49:22 UTC
Xuixien wrote:

Actually, people who say that are making a fair point in this day and age of EVE Online's recruitment scams, reverse safaris, etcetc. How do you know the person "recruiting" you is even a recruitment officer? And if they are, how do you know they're not friends ("blues") with one of your enemies, making them a security risk to you?


You know because you aren't a foam couch cushion eating moron and researched a bit about the corp you're intending to join, which granted you that magical knowledge?

Xuixien wrote:

You don't even need to know who my contacts are (here's a tidbit for you dude - I don't have blues in my contact lists. I have a notepad document for that. All you'll find is neutrals and reds.)


How do i know, am I supposed to take your word on it, I'm going to put a single hangar at your disposal that will at times contain 20ish billion in fuel that the collective 500 members of my corp pull from.

I think theres an easier way than taking your 'word' about your watchlist, and no amount of :words: you put in print relieve you of the responsibility of proving you're trust worthy before I take you in.



Solecist Project wrote:

You recruit. You ask for full API keys.

I awox. I create a new clone.

You can easily have my full API key and it doesn't matter.



Your account will show older than the alt you put on it, which is a red flag.

Malcanis - Without drone assign, the slowcat doctrine will wither and die.
Spectral Tiger
#148 - 2014-06-15 00:57:44 UTC
Grath Telkin wrote:
Your account will show older than the alt you put on it, which is a red flag.




Not if it's a new account.

If someone is going to the trouble to infiltrate your corp. they will have a lot of patience. They may already be using several accounts for this purpose.
Sibyyl
Garoun Investment Bank
Gallente Federation
#149 - 2014-06-15 06:06:13 UTC
Ranger 1 wrote:
Sibyyl wrote:
I'd be happy to lose the ability to read email in third party applications if it removed email as an API checkbox that is blindly ticked in a "full API" request that is so in vogue now.

Your email gets sifted through all the time anyway, and I'm not just talking about email in game.

You do realize that right? Blink

So by your logic, since the NSA is sifting through all my emails anyway I should give you the password to my Gmail account?

I get the need for intelligence on applicants, but I fail to see what kind of intelligence email is getting a recruiter.

Joffy Aulx-Gao for CSM. Fix links and OGB. Ban stabs from plexes. Fulfill karmic justice.
Grath Telkin
Amok.
Goonswarm Federation
#150 - 2014-06-15 17:31:19 UTC
Spectral Tiger wrote:
Grath Telkin wrote:
Your account will show older than the alt you put on it, which is a red flag.




Not if it's a new account.

If someone is going to the trouble to infiltrate your corp. they will have a lot of patience. They may already be using several accounts for this purpose.


Tell me more about spies and what they might do to infiltrate a corp.


Very few corps that ask for a full API would outright take a brand new account because that is also a warning sign. There are places that new accounts go to fly in player ran corps, and then there are all the other established corps that they dont reply to because of standing skill point requirements, so no, what you're suggesting doesn't actually work.

Malcanis - Without drone assign, the slowcat doctrine will wither and die.
Sibyyl
Garoun Investment Bank
Gallente Federation
#151 - 2014-06-15 17:40:14 UTC
^^ Grath, so account age can be extracted from API then? Didn't see a checkbox in the API creation page.

Joffy Aulx-Gao for CSM. Fix links and OGB. Ban stabs from plexes. Fulfill karmic justice.
handige harrie
Vereenigde Handels Compagnie
#152 - 2014-06-15 18:00:53 UTC
/account/AccountStatus.xml.aspx

Baddest poster ever
Seven Koskanaiken
Shadow Legions.
SONS of BANE
#153 - 2014-06-15 18:59:50 UTC  |  Edited by: Seven Koskanaiken
Only one corp has never asked for my full API.

I think the problem with APIs is not so much that they are useles for catching spies, but they get too many false positives. I mean the guy who I watch listed because he had probes out while I was in a plex and might be camping my outgate is now a big boobah, so now I risk being kicked out notice.

Of course if I were a spy, that would be exactly the sort of story I would spin.
Erika Mizune
Lucifer's Hammer
A Band Apart.
#154 - 2014-06-15 19:12:53 UTC
I am fine with partial character API's - but I'm not ok with full account API's. I understand larger corps need for them since they use it to check and weed out potential spy's - but I think it's a little bit "too" much. You can get a lot of information with a single character limited API just as well, the full API is just overkill.

I had a corp request a full API on me and when I didn't give them my full account API in they kicked me out after I explained my reasons for not wanting to disclose one of my characters on my account's information.

As for it being a standard: It seems to be for larger corps/alliances, but personally I would stay away from it since it is a little bit too much.

Former DJ & Manager of Eve Radio | Blog | Sounds of New Eden | Twitch | Twitter
eFart
kiddos corect flight
#155 - 2014-06-15 19:59:37 UTC
most corps want full api because they think being demanding makes them leet some might be leet most not tho my account belongs too myself anyways u might give full to huge alliance but partial is ok for most corps
Spectral Tiger
#156 - 2014-06-16 00:27:19 UTC
Grath Telkin wrote:
Spectral Tiger wrote:
Grath Telkin wrote:
Your account will show older than the alt you put on it, which is a red flag.




Not if it's a new account.

If someone is going to the trouble to infiltrate your corp. they will have a lot of patience. They may already be using several accounts for this purpose.


Tell me more about spies and what they might do to infiltrate a corp.


Very few corps that ask for a full API would outright take a brand new account because that is also a warning sign. There are places that new accounts go to fly in player ran corps, and then there are all the other established corps that they dont reply to because of standing skill point requirements, so no, what you're suggesting doesn't actually work.


Yes, I know most corps have a SP limit anyway.

What I would do if I was looking to infiltrate a corp. would be to run at least 3 accounts and keep them completely separate at all times. Wouldn't even bother trying to infiltrate until at least after the accounts have been active for 6 months more likely longer. That's not to say all 3 would try to join your corp. just the most suitable one for your corp. The others would be ready to infiltrate another corp.

You wouldn't be able to tell and your security would most likely aid me as people that feel that their security is good tend to get sloppy.

Actually I'm almost tempted to try.
Ranger 1
Ranger Corp
Vae. Victis.
#157 - 2014-06-16 07:24:25 UTC
Spectral Tiger wrote:
Grath Telkin wrote:
Spectral Tiger wrote:
Grath Telkin wrote:
Your account will show older than the alt you put on it, which is a red flag.




Not if it's a new account.

If someone is going to the trouble to infiltrate your corp. they will have a lot of patience. They may already be using several accounts for this purpose.


Tell me more about spies and what they might do to infiltrate a corp.


Very few corps that ask for a full API would outright take a brand new account because that is also a warning sign. There are places that new accounts go to fly in player ran corps, and then there are all the other established corps that they dont reply to because of standing skill point requirements, so no, what you're suggesting doesn't actually work.


Yes, I know most corps have a SP limit anyway.

What I would do if I was looking to infiltrate a corp. would be to run at least 3 accounts and keep them completely separate at all times. Wouldn't even bother trying to infiltrate until at least after the accounts have been active for 6 months more likely longer. That's not to say all 3 would try to join your corp. just the most suitable one for your corp. The others would be ready to infiltrate another corp.

You wouldn't be able to tell and your security would most likely aid me as people that feel that their security is good tend to get sloppy.

Actually I'm almost tempted to try.

Yes, actually you should. You will be taking your first steps into a larger world. Smile

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.
Altrue
Exploration Frontier inc
Tactical-Retreat
#158 - 2014-06-16 08:03:46 UTC
I'm tempted to say... You're not giving your full API to the government or the NSA, you're giving it to your corp leader... Which you will have to trust once you're in anyway.

I'm also tempted to say... If you have nothing to hide, there should not be a problem. And anyway, if you the fact that a corp asks for a full API is enough to turn you away, then maybe that corp wasn't that attractive in the first place.

EVE is a game where you can be evil. Financian losses, a corp can get over it. But betrayal, sometimes its harder than any other kind of loss to get over it. Its understandable for corps to take precautions against this.

Also, except if you are in a corp with an army of recruiters, or in a very small corp, your API informations will probably not be looked into too much at recruitment, and not at all after you join.

Signature Tanking Best Tanking

[Ex-F] CEO - Eve-guides.fr

Ultimate Citadel Guide - 2016 EVE Career Chart
Victoria Sin
Doomheim
#159 - 2014-06-16 10:47:57 UTC
What did I hear someone say once? In Eve don't trust anyone you can't walk 20m out of your house and go punch in the face. Even people you call friends and think are trustworthy can have senior moments in-game and go completely nuts. There's nothing you can do to defend against that. An API key is just not going to help you. And of course always assume everyone is a spy unless you're flying with your mom. She's probably not a spy. But if she's anything like you and you are a spy, she might be, because you two are pretty closely related genetically and probably behaviourally too.

That's all there is to Eve really.
Doc Severide
Caldari Provisions
Caldari State
#160 - 2014-06-16 11:06:40 UTC
It's stupid. I won't give it. Not becuse I'm afraid of what someone will see but because it's stupidly ineffective.

What next? Stool and Urine samples? Semen in a jar?

And no I don't care about not getting into another "regular, boring, run of the mill, same as every other" corp...