A couple (that I’ve spotted) of the reviews of iClone suggest I’m using it to capture people’s full API keys. I’m not. If you don’t believe me, then feel free to log the traffic coming out of your iPhone/iPod. There should only be connections going to the EVE API servers, the EVE image servers, and possibly some to Apple (though I’m not sure what that’s for). In addition, CCP logs API access per-account.
As I’ve stated on the E-O forums I do any in-game publicity on my coding alt, and people who’ve met me at Fanfest will know my in-game affiliation. However, I do iClone for fun, and don’t want to risk tarnishing that by abusing the trust people put into using their keys with the app. There’s precedent for people in alliances doing third party apps: EVEMon was originally written by a goon, and as far as I know hasn’t done anything untoward with anyone’s key (or login details, as your full account login was needed before the API came along).
Why an alt then? Seemed like a good idea at the time, and I’ve used him as the face for coding related side projects ever since.
Will I ever write code for iClone that sends me keys? Yes. At some point, fuelled by my complete lack of ability to focus on just one thing, I’m probably going to investigate push notifications. Skill training notifications will need a limited key, Mail and POS alerts will need the full key. In either case, there’s going to be an obvious warning (chances are it’ll be red, stripy or both) that you’re about to be giving your keys to me so you won’t stumble into it by accident!
If they really feel that way let them change their api keys and stop using the app.
I have complete confidence in your honesty. Im grateful for iclone and use it regularly with no problems from my api keys being used. If anything I wish ccp would allow more frequent access to one’s api keys.