ESI Scopes that let others read your entire mail box

While I appreciate the suggestion to simply not agree to the scopes requested, this isn’t a practical solution for everyone. If a majority of powerful corporations in the game employ this feature, opting out could mean isolating oneself from a significant portion of Eve’s social and competitive environments.

It’s akin to telling someone to just not use the internet if they’re concerned about privacy. Yes, that’s technically a solution, but it’s not a realistic or satisfying one given the digital age we live in. Similarly, telling players to just avoid certain corporations or not play certain parts of the game is a way of sidestepping the root issue.

The real question is, why should players have to make that choice in the first place? A game’s design should prioritize user privacy and trust, not force players into compromising situations where they have to choose between privacy and participation.

With accessible regards
-James Fuchs

There are plenty of corps that do not require the scopes you are concerned about though. You’re argument is not a valid one. Don’t just settle for the first ten paranoid corp you see. Find a group that matches your mind set.

3 Likes

Oh its 100% a practical option for everyone, the issue is some people don’t want to make that choice, there is nothing wrong with the scope, the same as the ability to set autopilot destinations or view your wallet transactions, if you don’t want an entity to have that information you don’t grant it, end of

Its a transactional system, if you want to join x corp you agree to their recruitment requirements, if you’re not happy paying that price then you simply don’t join, like i said its 100% within the players choice

1 Like

It’s not quite as simple as that. I’ve had to do the ESI stuff when genuinely spying on a corp. So one can’t always avoid it. Fortunately they were convinced when I joined a fleet and helped defend them against Blackflag. I left the corp without them ever realising they had a spy in their midst. ESI can’t tell them what isn’t there.

Couldn’t imagine ever doing anything sneaky in New Eden ever!

Just hope nobody reads the recommendations that Aiko had written as no ESI access would ever explain such about this pilot.

And with every case when that doesn’t happen that trust gets eroded among the general population. Not counting the hundreds of times when the data of millions was stolen in hacks.

Trust is a big word and it goes both ways. EVE is a social game but also perpetual war by its very PvP nature. I know I wouldn’t want just any Alt joining my corporation without proper vetting.

The possibilities that

exist is true in every game, anywhere online and irl too yet there are a few ways to avoid it. Remember that corporation members are co-players and definitely not anything but that unless met irl. The chat doesn’t have to stray into private stuff. There’s plenty to chat about EVE…

Your privacy is up to you. It’s up to how you use the game and the internet and what you share and do with the players that you meet in game.

1 Like

what stuff did you do to the corp?

I just spied on their activities, chat, ship fittings, mining operations…all stuff that could easily be done without ESI especially given the propensity of people for blurting out confidential stuff in group chat or on Discord. They wanted ESI from my alt…but as the alt had no prior corp, no emails, etc, there was little they would have seen. I even made sure that any funds went via several noob alts so they could not be traced to me. And…not even the corp I was spying for knew who my spy was. That’s how to do it properly.

2 Likes

Riff-raff alliances are asking all the access these days, such is their entitlement

One of such alliances “explained” me that they have to do this because the alliance has “trilionaires”! Hello?

They are the spies, they are the ones spying on everybody and hoarding this, who knows what they will do in the future with everything… while being the spies themselves they preemptively accuse others of being spies

I was the loudest voice when WTM started checking your skills on their waitlist. (Incursions)

Darn government getting bigger and bigger everyday!

You’re right, trust gets eroded with every mishandling of data, and this is particularly concerning when we talk about data breaches caused by external hackers.

However, what I’m discussing here is not an unexpected external breach, but a deliberate, internal feature allowing for vast data access. It’s crucial to understand the disparity between a regulated entity like an ISP or a governmental agency and an in-game corporation managed by regular players. The former has strict legal guidelines, trained professionals, and usually an established reputation to maintain. They have protocols, and while certainly not infallible, they have a structure designed to handle data with a certain degree of responsibility.

On the other hand, giving similar data access to in-game corporations puts significant power into the hands of individuals who certainly do not have the training, and CERTAINLY not the ethical guidelines or the accountability that professional entities have.
It’s the difference between trusting a professional security firm with the keys to your house versus handing them to a stranger on the street.

While both scenarios carry risks, the nature, scale, and potential consequences of these risks can be drastically different. Hence, we shouldn’t just conflate trust and accountability between random strangers and trusted agencies, but instead realize the inherent risks of built-in access given to individuals without the proper frameworks of responsibility.

I get the need for vetting in a competitive PvP environment. But should the vetting process really include a player’s private mailbox? We can achieve trust and security without crossing certain boundaries. Instead of siphoning all their privately intended conversations and make notes on every little thing they wrote and said, why not instead talk to them and get to know them? Would that make things more difficult and thus undesireable?

While there’s truth in maintaining in-game conversations strictly about the game, it’s unrealistic to think players won’t occasionally touch upon personal subjects, even inadvertently. A game should not impose on its users the constant stress of self-censorship, or build in landmines that unaware users walk into and make them suddenly give up every single bit of private communication they ever had.

While I also believe in personal responsibility, it shouldn’t absolve developers from designing systems that respect and protect user privacy. It’s a joint responsibility. Players should be cautious, of course, but game developers should also create environments where players don’t feel their privacy is perpetually at risk.

In the end, Sienna, my aim is to highlight an issue that affects the player base and to have an open dialogue about it. I appreciate your perspective, and I hope to find common ground in this discussion.

With secure regards
-James Fuchs

I used to use EVEHQ to read the evemails on several accounts, to see if there was something that I had to log in a specific character to deal with or not. EVEHQ used the old API. Then CCP changed it and it no longer worked.

Are you saying that it’s possible for a new EVEHQ to be made, where I could read the evemails on my accounts using a desktop program, rather than having to log in to each account ? Amazing.

Dude if you are that concerned take the communications outside. Ccp allows that access and considering everything belongs to ccp anyway, why get all upset over it

1 Like

Allow me to ask this: Do you want your mail communications to be publicly accessible to everyone?

With open regards
-James Fuchs

Considering i dont post anything private in my evemails and use them for in game use only. And i dont join corps who require that scope. Then its a non issue

So, if it isn’t a problem for you, you’re fine with it being a problem for everyone else and oppose any discussion about addressing it?

With nice regards
-James Fuchs

I think a better question is “Why can’t people be responsible about to whom they give access to their Evemail, and why should I be penalized for that.”

External chat boxes are always an option people!

Can you please explain to me, how corporations not having access to user mailboxes is penalizing you?

With curious regards
-James Fuchs

I used ESI applications to read my mail. Remove the scope, and ESI is less useful to me.

ESI is just a developer tool to develop whatever you want. You can create things for personal use and just grant access to your own applications, and mail is a useful scope in my case. If one’s permission was not required to grant access to the messages, that would be a problem, but that permission /is/ required.