Quantcast

Jump to content


Photo

[Guide]Multi Account - Anonymity beyond proxy -hide info a proxy does not.


  • Please log in to reply
12 replies to this topic

#1 bobsauce

bobsauce
  • 82 posts

Posted 04 September 2010 - 01:01 PM

If you're paranoid or love your main account, even using a proxy, its a good idea to know some of the information websites gather when you visit and exploit that to your advantage. This information is submitted correctly through my elite vpn proxy (a vpn is not technically a proxy, but its purpose is the same and I will refer to it as one from time to time). For the most part this stuff isn't necessary but if you ever wonder how they chain iced your side accounts while using a proxy it is a mix of personal information, trends, and the following.

When someone visits my website, in addition to their ip and service provider I get (with a basic free stat gatherer-I could get a lot more info if I wanted to spend a few bucks a month):

WinVista (1024x819x32) -operating system, screen resolution, color depth.
MSIE 8.0 (JavaScript: 1.3, Cookie: Yes, Java: Yes) -browser, java, etc

WinXP (1600x900x24)
Firefox 3.6 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Neopets can tell that you are using different computer and you can trick them into thinking you are.

Changing your screen resolution and color depth is the easiest, but least necessary. Using a user agent changer can make you appear to be on a different browser and operating system.

Also, through an elite proxy they can see your browsers plug-ins. Not a big deal and you wont get iced for it, but when deciding which of the 10 accounts they are thinking are yours having very generic plug-ins will help.

If you really, really, want to protect your account you can uninstall the latest java update leaving an older version and then reinstall. I'm still working on a way to spoof the java version if there is one and will update if I find a way to do it.
I wouldn't go through any of this trouble for shells, but to make sure my main isn't linked with anything, I'll do anything.

The below has been rendered useless and added to a spoiler because of finding a good user agent switcher but I will leave it here because its an extremely interesting to boot a computer and access your hard drive from a different operating system.
Spoiler


The above is the premise of this post. Below you will find tools and information on how to actually do some of these things.
==============================================================================================================================================================================


Testing your proxy:

First and foremost when using a proxy use this page to check that your ip is actually different: Whats my ip. They have an excellent array of tools to test if your proxy is sending accurate information about you.

The first link they have is More Info About You. This is where you will find the majority of information that you are sending a website. It may disturb you to see how accurate some of it is through your proxy which is what prompted me to do more research on this subject.

Another helpful link, which helped me find the weakness in my first proxy is: Proxy Test.

The first spoiler is the information shown without a proxy. The second is with a proxy to compare what information is hopefully changed, and what information will be sent correctly anyway. After, some testing, the second proxy could get me in trouble, and I have moved onto a third proxy. The second spoiler will show the weakness of my first proxy. The third spoiler shows the strength of my new proxy.
Spoiler


This is the second spoiler. I was using a vpn which I thought was secure but in looking at More Info About You I found a serious weakness. It was even more obviously on Proxy Test. I've excluded browser information and plug-ins since they are the same as the previous spoiler. Thus far, I have not been iced for multi using this vpn but down the road if I get flagged this could be bad, bad, bad.
Spoiler


Now for the information sent by my super awesome new proxy that makes me warm and fuzzy inside.
Spoiler


User Agent Switching.
(Your browser and operating system information)

First Install Chrispederik's User Agent Switcher for firefox. This allows you to tell websites that you are using a different browser and operating system. Some websites will actually display their page differently to you based on the browser you are using and you will notice a difference immediately when you switch user agents. This is due to code in their css/html that says "If browser is lower than I.E 7.0 use this code."

Then download: User Agent List. You can either go to the link and click File -> Save Page As or right click the link and Save Link As. This will save the page as a .XML file. Save it somewhere easy to access.

Next, Click Tools -> Default User Agent -> Scroll down until you see: Edit User Agents... Once you click that you will see a screen that looks like:
Spoiler


Click Import and select the file you previously saved. Now you have a ton of user agents to pick from.
In the spoiler is a screen shot of the huge list of User Agents you now can chose from.
Spoiler

Below are examples of how powerful user agent switching is. These are examples all from the same computer:

Mac OS X (1280x768x24)
Safari 1.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Win95 (1280x768x24)
Netscape 4.05 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Win2k3 (1280x768x24)
Opera 7.6 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Linux (1280x768x24)
Netscape 5.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Win7 (1280x768x24)
MSIE 7.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

WinXP (1280x768x24)
Firefox 2.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

Win3x (1280x768x24) -gasp ancient computer. Windows 3.1
AOL Browser 3.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)

If I use any bot user agent (yahoo, google, etc) and forget to turn it off neocodex tells me "Your posting privileges have been removed my an administrator." and I cannot log in.

Notice on all of the above examples my JavaScript versions and screen resolution are the same. I can change this by uninstalling the latest update of java and changing my resolution. While I don't think this is necessary to use multi accounts at all if you want your main account to look completely and utterly separate of you then added changes to your information can only help you in the long run.


*Near future tests*
Shortly I will be testing flash based stat gatherers and hopefully find a way to alert when a flash cookie is made and information on how to clear them. If neopets is smart they will have flash cookies here and there. I've been iced in other games due to not clearing flash cookies.

Java stat gatherer as java can send your correct ip rather than your proxy.

Hopefully a way to spoof the version of java installed rather and install and uninstall.

Edited by bobsauce, 12 September 2010 - 10:33 PM.


#2 Brennon

Brennon
  • 929 posts


Users Awards

Posted 04 September 2010 - 01:23 PM

Thanks! +1

#3 Ziz

Ziz
  • 936 posts

Posted 04 September 2010 - 01:25 PM

Actually, I have used different accounts on the same computer without any proxy support.
With different browsers each one (Firefox for my main, G-Metal for side) for about one year and a half.
Yet, I haven't been frozen or anything.

I think that by using different browsers (one for each account) they thought it was another computer on the same Ip.
I think that could work as long as you dont use programs or scam.

But if Im going to ab, I think I need proxy support.
I've tried to search IP support lately, but none of the htm proxies seems to be good :ohwell:
Either they have huge delays or doesnt work well...

Please, Could you tell me how to find a decent proxy?

#4 bobsauce

bobsauce
  • 82 posts

Posted 04 September 2010 - 01:46 PM

Actually, I have used different accounts on the same computer without any proxy support.
With different browsers each one (Firefox for my main, G-Metal for side) for about one year and a half.
Yet, I haven't been frozen or anything.

I think that by using different browsers (one for each account) they thought it was another computer on the same Ip.
I think that could work as long as you dont use programs or scam.

But if Im going to ab, I think I need proxy support.
I've tried to search IP support lately, but none of the htm proxies seems to be good :ohwell:
Either they have huge delays or doesnt work well...

Please, Could you tell me how to find a decent proxy?


I think you can definitely get away with a good amount that way, just have to be careful of trends. Depending on your isp they don't really have a way to know if you are on a public network. I would see georgina's thread on proxies but I typically prefer vpn proxies over any others. Even then the delay can be bad. With settings at .1-.2 I get anywhere from 2200ms-6000ms buy times. The connection is on the other side of the country from me though. I'm currently looking for one much closer to me. If you search "vpn proxy" with your city or a city near you that might help get a faster connection.

Edited by bobsauce, 04 September 2010 - 01:52 PM.


#5 Noitidart

Noitidart
  • Neocodex Co-Founder

  • 23,214 posts


Users Awards

Posted 05 September 2010 - 03:00 AM

Totally awesome. Thanks bob.
I still recommend single main and your sides for non-np making needs. :p

#6 bobsauce

bobsauce
  • 82 posts

Posted 05 September 2010 - 11:54 PM

Totally awesome. Thanks bob.
I still recommend single main and your sides for non-np making needs. :p


I agree with noitidart. If you want to be safe and love your main stick to one account and legit sides. Ab on your main if you wish to ab. There is nothing you can really do in the end that will truly prevent neopets from getting you for multi. These steps will help but until someone gets a job working for neopets security and sees the inner workings there is no way to know anything for sure. If you manage to pull that off I'm sure the contract you sign will land you significant jail time for leaking their secrets :p

#7 Noitidart

Noitidart
  • Neocodex Co-Founder

  • 23,214 posts


Users Awards

Posted 06 September 2010 - 02:19 AM

Hahaha dang jail time. Who's up for the risk? :p

#8 bobsauce

bobsauce
  • 82 posts

Posted 12 September 2010 - 10:04 PM

This guide is now finished outside of new tests. After I complete a few I will bump this thread but since for months I haven't been banned for multi using 3+ accounts to restock/do dailies I'm not really worried. However, the flash tests will be semi-important to see if neopets uses flash cookies or java to figure out if you are using separate accounts. Since I don't play games on more than one account this hasn't been an issue for me.

#9 jaredennisclark

jaredennisclark
  • 838 posts

Posted 22 September 2010 - 11:51 PM

My 'external LAN IP' value never changes no matter which proxy I use. I've used dozens of different proxies all of which connect and pass every other test described here. That External LAN IP value just won't leave. Help?

#10 carrice

carrice
  • 660 posts

Posted 05 November 2010 - 11:22 AM

thanks +1rep

#11 rezpirate

rezpirate

  • 171 posts


Users Awards

Posted 19 July 2015 - 05:42 PM

interesting, very interesting....



#12 fiend

fiend
  • 18 posts

Posted 29 August 2015 - 12:05 PM

I found a user-agent switcher for Chrome, since you only had firefox. Tried it with More Info About You and it seems to work fine!



#13 BlueVizz

BlueVizz
  • 11 posts

Posted 30 April 2017 - 01:45 PM

Thank you!


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users