EVE General Discussion

private information in a video game hahahahahahahahahahahahahahahahaha

Can you, by any means guarantee, that there are no personal informations in email or otherwise: what are you looking for if NOT for personal informations? And the EULA is between you and CCP and not about making information public outside CCP empolyees.

That the information belongs to CCP is a legal construct so that you don't have any legal issues when they get lost.

And point 3 three more or less is exactly what I'm saying. You email has personal informations about you and the one you communicate with.

Okay, I'm out of it, we have different opinions on privacy. I'm also doubting that CCP intended the email API for this use.

FTFY and that sums up the whole point.

Corps want to know Geronimo McVain's personal information, not the RL dude's (except Goons, obviously).

The main reason is that, in the virtual world where Geronimo McVain exists, there are no laws, no government, no police, no democracy, etc. etc. It's a virtual ruthless place where virtual civil rights have no reason to exist because they would easily endanger every virtual person's virtual assets, the outcome of virtual wars, etc. etc.

^^ this. dont join the corp if you dont like giving out api, just dont expect to join a decent corp if you think the api is a an invasion of privacy

i guess asking for a full key isnt a security feature as such, it may just be a way to root out awkward people

Cant keep your bowhead pilot on a list?, you know thats a pretty terrible idea, you would be shot on sight from most for not having your alts blue and that would be your own fault.

a full key wont catch the best spais just like a car alarm wont stop the best car thieves, but it does help

its pretty simple though don't submit your full api then go find another corp who can fit your api requirements better.

Ps. we ask people to delete api's after joining because its not just risk to yourself it risks the whole alliance

It doesn't create "a lot" of risk, in most cases it creates no additional risk. Remember that people go handing out full API keys all the time anyway for 3rd party applications, so it really doesn't matter whether you get your corpmembers to only use a limited key or not. And someone getting a single full key from anyone in your corp (including a spy account) has just as much information on that corp as they will get for having everyone's keys. The only thing giving out limited keys prevents is access to individual characters data, which is at best irrelevant to other corp members from security point of view. But on the other hand holding full keys allows continuous monitoring, so spies and awoxers have to keep up the same level of effort in separating their accounts going forward, making it more of a challenge to maintain the account.

At the end of the day, the only reason corp security benefits from not using full keys is if the corp security policies suck. Again though, it's down to the individual corp to decide how they want to run their security. Whether they want no keys, limited keys of full keys is entirely up to them. Personally I'll only join if they want full keys (or I'm joining with the intention of stealing assets or intel, in which case limited or no keys are softer targets).

Except of course if you were able to raise to a high enough rank that you gained access to all of the API details held by the corp, you would undoubtedly be in a position to cripple the corp anyway and would already know the capability of the corp. Seeing individual members assets doesn't help with that.

The type of information you're talking about obtaining doesn't require the API since you can get most of that as a newbie line member simply by talking to members about fits for a bit. If you manage to get to the rank of a director level spy in the corporation, what type of API keys they hold is completely irrelevant (though a limited API key would be likely to show character sheet anyway), since API or not it will be part of your role to know what the corporations capabilities are, so you'll have access to that information.

I know you'll run with the "my main I keep hidden for :opsec: is a secret spymaster", but it's blindingly obvious you have no idea what you are talking about.

Except it doesn't since you have no way of knowing what is a corporation level asset and what is not. You can make wild assumptions but until the fleet actually forms you can't really see what will be used and what won't.

Sure, depending on the enemy, but I guarantee if you are a director level spy the individual player API keys are really not that useful to you compared to the information you gain from your position. Plus running off and fetching the APIs would pretty rapidly show up to anyone checking out their API logs potentially exposing you anyway.

In addition, you claim that you'd be able to pull all this useful information, yet you overlook that if you think the information is so useful for making tactical decisions, then surely by the corp not holding the API and thus not having that information, the legitimate directors would not be able to make tactical decisions themselves. You can't have it both ways, the information can't be useless enough to the real directorate that they shouldn't hold API keys, but important enough to a spy that even with director level access they would turn the tide of a war.

I am pretty great huh? I'm convinced of the value of information to the corporation itself, I'm just not convinced of your idea that holding full API keys exposes a corporation to an extreme amount of risk.

Effectively what you are saying here is that while you think this information is vitally useful, corporations should not hold keys to this information (and thus cripple their own internal intel) because in the off chance they recruit a director level spy the enemy might be able to use the information to pick and choose when to blueball you, something any FC level spy could do anyway.

Ed: Oh and yes, I call you out on that pretty easily since it speaks to what type of player you are. People that can't even voice an opinion without hiding behind an alt usually aren't the type of people who's opinions can be taken that seriously.

Actually the information isn't absolutely vital but does frequently give you a tactical advantage when you do know. As I mentioned, its a little edge you can get at times.

And It would not cripple a Corp's counter intelligence operations by not continuously tracking its member's asset information, but it could help your enemies to know that information. There are like a half dozen things that are useless for a Corp to track with a Full API, but it sounds really cool to demand one.

And as why for the alt; yeah, political reasons to be sure. Too outspoken at times, something about causing issues with allies.
Well since then I've always used an alt so I don't have to deal the that political BS.

No that's not it at all. You can try and push buttons with insults as you like. The post with your main or you are irrelevant is frequently a desperate attempt to gain more things to use against a poster when simply countering what they say falters.

As I learn more and more about how and why your Corp uses Full APIs its starting to sound more like scary tracking online than players having fun in a game, but to each their own.

Have fun with that.