EVE General Discussion

I don't know, some super-sleuth type might be able to help you.

What you can do, however, is not trust people you don't personally know (and maybe not even then). I have people in my alt corp and i've never suffered a loss because I've never kept anything of importance anywhere someone else could get to it. If you need it and I'm not online, buy yourself one (cutting out the need to have me give you something) lol.

Assuming he asked for one, this thread would seem to suggest that isn't the case.

Idd, was just pointing out the ways an API would have helped.

If they're good, and assuming they even care enough to take precautions, you probably can't.

API could help, but a savvy infiltrator could trivially have a clean API. It's not like a new account is hard to come by.

The part where he was given permissions sufficient to "steal everything" is where it all went wrong. Don't do that.

pretty much as stated above. however, if you believe the guys main might sitll be in yoru corp, you can retoactively ask all members for a full api. Anyone who complains you mark as a suspect. Anyone who quits is most likly your culprit. Most players, if you explain why you are now requiring an api, will hand one over. thouse who don;t you talk to them about it and typically if your honest they will pass it on. or you kick them. *shrugs*

Another way is to send an message to his past ceo's (ceo's of big corps) that might get you info.

if he has only been in yoru corp, then your a bit screwed. if he has been in a small corp (under 10 members) then you have found his alt corp, and that will give you another clue.

If he is careless, you cna use evewho.com to chekc a corps join and part history. that will help you isloate who his alt might be. For exsample, if Dareaper alt and DaReaper were in mega corp a, and DaReaper left on 20/12/2014 at 9:00am and Dareaperalt lefts at 20/12/2014 at 9:01am you have a good case for a possible alt/main parting at the same time.

Just do some sluthing, you will most likly not know for sure, but people are people and at times they do careless things, esp if they had no interntions of ever stealing, and woke up one day and stole.

Never promise access, in fact state at recruitment that access isn't going to happen. Never give people access to more than the effort they put into the corp and on top of that bait them, it's worth it to bait folks with something juicy (while they're under the impression that they'll never get access) for them to steal. Whatever it's worth (as long as it's not silly), it's less than the time you would invest into that person down the line and whatever heist he'll be doing once he does get more access.

Having said that, if you have a sleeper on board then there's pretty much nothing you can do other than never giving out anything. Other than that it's the basic precaution and if you still don't know what those are you are not fit to lead a corp and are in fact a liability to your corp members.

Don't spell out the recruitment process, if you tell them (on your forum or in mail or whatever) what all the steps are they can prepare. Don't tell them anything upfront forcing them to provide info on the fly. A really shrewd one could still prepare anyway but you'll be making it difficult for him.

which is why you harvest IPs from forum and comms access, and even that's not enough if the spy knows what they're doing.

any decently skilled infiltrator (eg: the ones you need to worry about) won't be caught out by an API alone.

simplest solution, lock down everything and don't give out more access permissions than you absolutely have to. I've been in my corp for a year and I can only access two of the five corp hangers: the NewBros hanger (full of basic stuff no-one else wants that EVERYONE gets access to on joining) and the POS hanger (usually full of fuel & stront) for helping refuel corp towers.

I don't "need" access to anything else, so I don't have it.

Personally, I think some people take this stuff way too far. Don't put anything in the corp hanger that you don't want people to take/use/lose. Also you can control what goes into and who has access to each individual hanger.

The CEO of the last player corp I was in went on and on about what he supposedly saw in my full API. First, he didn't know how to use it, so some how I must have given him a fraudulent API (he kept putting my Key ID, but his Code) and then he got all antsy about a couple of corps from several years ago now being closed. It was "suspicious." Also, not having any mail in my inbox was "suspicious."

That kind of attitude wears me out frankly...needless to say, I'll be staying with my NPC corp from now on.

Surely any serious Awoxer infiltrating a Corp would not do so with a character on the same account as his main, if for no other reason then once the character is outed it is semi useless.