EVE Assets Viewer Info
EVE Assets Trac (svn updates etc)
The assets viewer is a JavaScript and PHP driven AJAX web application. It is intended as an out-of-game tool to help view, estimate, and find your assets. The design is based in large part off the in-game assets viewer with some nice additions such as the ability to look inside containers as well as using price data to estimate your the worth of your assets.
Prices come from my median price project which is based, in turn, from prices reported to eve-central.
Some Notes on Security and Privacy
Your API Key
I do not store full API keys at this time. I may add the ability to store your API key(s) at a later point after implementing a login system to make it easier to update your assets. I do store all the information about your assets in a database as well as the character ID that owns them. There are some caveats to this which I address below.
Your Assets Information
This data is not viewable to the public if you use my application. Your asset data can only be accessed if you know the specific URL hash for your character or your full API key. This hash is a combination of your character ID (which is not hard to obtain) and the exact time that you first imported your assets into my system. This hash is not guessable. The only possible way to find your character without having access to your key would be to brute force through all possible keys. Needless to say, this takes more time than is feasible and I would probably notice any brute force attempts and ban the offending IP before any damage was caused.
General API Key Security
You can always check the EVE API Access Log directly from CCP to make sure my application, as well as others, are only accessing the information they say they will access. For reference, the IP address of my server where the assets view lives is 66.160.141.197 and that’s the IP that will show up when I download your assets. It will also hit the character data API pages to get the list of your characters. I may add other API calls in the future as functionality expands.
Me
Of course, you should not use this application if you do not trust me or if your full API key exposes sensitive information.
Your full API key exposes a lot of information about your character (assets, transactions, skills, etc) and your corporation, especially if you are a director (corporate assets, POS locations, members, etc). If my trustworthiness is in question, you should download the source to my application and install it on your own secure site and limit access only to those that you do trust.
My characters are part of Eve University and primarily PvE/mission-running/Empire weenies.
I hang out in the #eve-dev channel on irc.coldfront.net a decent portion of the time. You can also contact me at sollaires@gmail.com if you have any questions.