Why do I get so many blog hits from a Reddit page? Because it has this very interesting leak: 
This screenshot was taken by someone with higher access rights from the TEST API system, which pulls submitted API keys from the CCP server. It stores the last info it could pull down before I quit TEST. I posted summary of my accounts several times and this leak contains the 3 accounts that had TEST API keys submitted:
Of course it doesn't mean you shouldn't give your API key, even your full API key to anyone. Since you need two accounts to play EVE unless you are very casual, have a separate moneymaking account(s) and make sure that your personal pilots are there. Have a different public nullsec/PvP account(s). Your nullsec pilots cannot have secrets anyway, I can tell without keys that your combat pilot flies alliance doctrine ships, trains for them, have doctrine ships and jump clones in staging and deployment systems outlined in your SotA. The only interesting thing they can get from even a full API key is the name of the moneymaking pilot who sent ISK or assets to the combat pilot. The solution is having a zero-skill alt in the private account(s), only this pilot should receive or send anything to your nullsec pilot(s), so the only thing they learn is the name of a zero-skill pilot. If they ask for API key of that pilot, give them a finger. Never, ever give out the API key of your personal account(s) to anyone! Being kicked from your alliance is much better than losing all your assets.
If they know the locations and assets of your moneymaking pilots, they can gank it. If they can, they will. Just think of the PL supercapital pilots who were ganked by their own FC. I'm not saying you shouldn't trust your alliance mates, just that you shouldn't trust them with everything you have. You nullsec assets should be enough for them. Combat ships are considered lost on fitting anyway. But if you keep your moneymaking assets safe, you can always rebuild after a loss.

- Gevlon Goblin is my highsec main, I never kept that secret. He only undocks for baiting gankers. He was training Ice Harvesting at the time of the API pull, because I'm going to mine White Glaze in the upcoming weeks. You'll hear about my mining stories tomorrow.
- Helga Kolan is my Hek trader and I'm pretty sad that her name got out. There is a lvl2 research agent in Hek who gives courier missions that can be completed in a shuttle for corp standings. One mission a day, I've been doing them every time I log in. I guess I won't get to 9.8 Boundless Creation standings, because my fans will surely pop that little shuttle.
- Cindy Sasen is my well-known scout/cyno pilot who started my nullsec career as an AFK cloaker in -A- space
- Avat Goblin is my dreadnought pilot, who was in TEST (somehow the API updated after I quit).
- Botmuncher Goblin was started when I was ganking in highsec, to have a secondary ganker so I don't have to wait out GCC. His training has stopped. Now I have a new plan for him so activated dual character training. Hopefully you'll hear from his exploits.
- Titania Goblin is my logi pilot who was flying with TEST the most and now gets her carriers.
- Okami Kusoni is just sitting in a trade hub to PLEX this nullsec account.
- Botslayer Goblin is the famous ganker who killed 52B worth of miners in a month.
Of course it doesn't mean you shouldn't give your API key, even your full API key to anyone. Since you need two accounts to play EVE unless you are very casual, have a separate moneymaking account(s) and make sure that your personal pilots are there. Have a different public nullsec/PvP account(s). Your nullsec pilots cannot have secrets anyway, I can tell without keys that your combat pilot flies alliance doctrine ships, trains for them, have doctrine ships and jump clones in staging and deployment systems outlined in your SotA. The only interesting thing they can get from even a full API key is the name of the moneymaking pilot who sent ISK or assets to the combat pilot. The solution is having a zero-skill alt in the private account(s), only this pilot should receive or send anything to your nullsec pilot(s), so the only thing they learn is the name of a zero-skill pilot. If they ask for API key of that pilot, give them a finger. Never, ever give out the API key of your personal account(s) to anyone! Being kicked from your alliance is much better than losing all your assets.
If they know the locations and assets of your moneymaking pilots, they can gank it. If they can, they will. Just think of the PL supercapital pilots who were ganked by their own FC. I'm not saying you shouldn't trust your alliance mates, just that you shouldn't trust them with everything you have. You nullsec assets should be enough for them. Combat ships are considered lost on fitting anyway. But if you keep your moneymaking assets safe, you can always rebuild after a loss.
0 comments:
Post a Comment