If you're paranoid or love your main account, even using a proxy, its a good idea to know some of the information websites gather when you visit and exploit that to your advantage. This information is submitted correctly through my elite vpn proxy (a vpn is not technically a proxy, but its purpose is the same and I will refer to it as one from time to time). For the most part this stuff isn't necessary but if you ever wonder how they chain iced your side accounts while using a proxy it is a mix of personal information, trends, and the following.
When someone visits my website, in addition to their ip and service provider I get (with a basic free stat gatherer-I could get a lot more info if I wanted to spend a few bucks a month):
Neopets can tell that you are using different computer and you can trick them into thinking you are.
Changing your screen resolution and color depth is the easiest, but least necessary. Using a user agent changer can make you appear to be on a different browser and operating system.
Also, through an elite proxy they can see your browsers plug-ins. Not a big deal and you wont get iced for it, but when deciding which of the 10 accounts they are thinking are yours having very generic plug-ins will help.
If you really, really, want to protect your account you can uninstall the latest java update leaving an older version and then reinstall. I'm still working on a way to spoof the java version if there is one and will update if I find a way to do it. I wouldn't go through any of this trouble for shells, but to make sure my main isn't linked with anything, I'll do anything.
The below has been rendered useless and added to a spoiler because of finding a good user agent switcher but I will leave it here because its an extremely interesting to boot a computer and access your hard drive from a different operating system.
Spoiler
p.s If you are savy and want to run a bunch of very, very legit looking accounts get a couple flash drives. Install live versions of different operating systems (one per flash drive) and set your bios to boot from usb. Tweak everything to run bare bones because flash drives are way slower than ram and tada as far as neopets is concerned you ARE on different computers. Changing your user agent renders this unnecessary but its still useful for other personal purposes.
The above is the premise of this post. Below you will find tools and information on how to actually do some of these things. ==============================================================================================================================================================================
Testing your proxy:
First and foremost when using a proxy use this page to check that your ip is actually different: Whats my ip. They have an excellent array of tools to test if your proxy is sending accurate information about you.
The first link they have is More Info About You. This is where you will find the majority of information that you are sending a website. It may disturb you to see how accurate some of it is through your proxy which is what prompted me to do more research on this subject.
Another helpful link, which helped me find the weakness in my first proxy is: Proxy Test.
The first spoiler is the information shown without a proxy. The second is with a proxy to compare what information is hopefully changed, and what information will be sent correctly anyway. After, some testing, the second proxy could get me in trouble, and I have moved onto a third proxy. The second spoiler will show the weakness of my first proxy. The third spoiler shows the strength of my new proxy.
Spoiler
Server & Network Information
Hostname: c-00-000-000-00.AAA0.ma.cox.net This is information about your service provider. Numbers and provider have been changed cause you don't need my information .
Proxy: No Proxy or Invisible Proxy Used In Georgina's proxy discussion you will find that some proxies identify themselves as proxies. When you find a good proxy this will remain saying "no proxy."
Internal (LAN) IP: 187.241.9.312 My ip address. Also changed for my protection.
HTTP_USER_AGENT: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729) This is information about your operating system on browser. The green text below it shows how my web stats interprets this.
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729) Again the operating system and browser information.
Screen Resolution: 1600 x 900 Screen resolution. Stat gather is in green.
Cookies: Enabled Cookies pretty much have to be enabled for neopets to keep you logged in.
Browser Plugins: getPlusPlus for Adobe 16263 (np_gp.dll) NetExtender Launcher 3.0.1.73 (npNELaunch.dll) Netextender is my vpn proxy software. This could be a huge clue to neopets since it will show on any account I use regardless of proxy. AOL Media Playback Plugin (npunagi2.dll) Much of this is standard and not to worrisome. I'm still trying to find a way to spoof or hide this information. BitTorrent (npbittorrent.dll) Windows Genuine Advantage (npLegitCheckPlugin.dll) DivX Web Player (npdivx32.dll) Adobe Acrobat (nppdf32.dll) Java Deployment Toolkit 6.0.200.2 (npdeployJava1.dll) RealPlayer Version Plugin (nprpjplug.dll) RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (nppl3260.dll) RealJukebox NS Plugin (nprjplug.dll) Mozilla Default Plug-in (npnul32.dll) QuickTime Plug-in 7.5.5 (npqtplugin.dll) QuickTime Plug-in 7.5.5 (npqtplugin2.dll) QuickTime Plug-in 7.5.5 (npqtplugin3.dll) QuickTime Plug-in 7.5.5 (npqtplugin4.dll) QuickTime Plug-in 7.5.5 (npqtplugin5.dll) QuickTime Plug-in 7.5.5 (npqtplugin6.dll) QuickTime Plug-in 7.5.5 (npqtplugin7.dll) Google Update (npGoogleOneClick8.dll) Shockwave Flash (NPSWF32.dll) Shockwave for Director (np32dsw.dll) Silverlight Plug-In (npctrl.dll) Windows Presentation Foundation (NPWPF.dll) RealPlayer™ HTML5VideoShim Plug-In (32-bit) (nprphtml5videoshim.dll) RealNetworks Rhapsody Player Engine (nprhapengine.dll) VLC Multimedia Plug-in (npvlc.dll) Java™ Platform SE 6 U13 (npdeploytk.dll) Java™ Platform SE 6 U20 (npjp2.dll) Windows Media Player Plug-in Dynamic Link Library (npdsplay.dll) Microsoft® DRM (npwmsdrm.dll) Microsoft® DRM (npdrmv2.dll)
This is the second spoiler. I was using a vpn which I thought was secure but in looking at More Info About You I found a serious weakness. It was even more obviously on Proxy Test. I've excluded browser information and plug-ins since they are the same as the previous spoiler. Thus far, I have not been iced for multi using this vpn but down the road if I get flagged this could be bad, bad, bad.
Spoiler
Hostname: 219.89.212.141
Proxy: No Proxy or Invisible Proxy Used Yes! Proxy is not identifying itself as a proxy! This is good.
Proxy Type: 1.1 TMG Uh-oh, proxy type should not be here if there is no proxy. Some information is getting through that shouldn't be.
Internal (LAN) IP: 127.151.306.502 Another uh-oh. This ip is similar to my routers information and is leaked information that I do not want neopets to see.
HTTP_VIA: 1.1 TMG Correlates with the proxy type info that I do not want to be sending. Neopets doesn't need to know I'm on a proxy. No they don't know I'm multi-ing, but yes, this will be bad if I'm flagged later.
HTTP_USER_AGENT: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729) Same as before as I'm not spoofing anything.
Proxy Test This request appears to have come via a proxy. Even though whatsmyip.org says I'm not a proxy this site easily identifies me as a proxy and provides the same 1.1 TMG info. Not good.
The proxy host has ip address 219.89.212.141
The proxy server has announced itself as 1.1 TMG
Now for the information sent by my super awesome new proxy that makes me warm and fuzzy inside.
Spoiler
Hostname: 101.109.341.759-s.t.n.com Ip address nowhere near mine.
Proxy: No Proxy or Invisible Proxy Used Woot, no proxy ftw.
Internal (LAN) IP: 1.3.9.123 Internal lan is nothing like the ip from my router. Progress indeed.
Proxy Test This request appears NOT to have come via a proxy. Winner. This proxy is in fact elite.
The request appears to have originated from host blah blah, same ip info above in this spoiler. To lazy to insert changed ip info but you get the point.
User Agent Switching. (Your browser and operating system information)
First Install Chrispederik's User Agent Switcher for firefox. This allows you to tell websites that you are using a different browser and operating system. Some websites will actually display their page differently to you based on the browser you are using and you will notice a difference immediately when you switch user agents. This is due to code in their css/html that says "If browser is lower than I.E 7.0 use this code."
Then download: User Agent List. You can either go to the link and click File -> Save Page As or right click the link and Save Link As. This will save the page as a .XML file. Save it somewhere easy to access.
Next, Click Tools -> Default User Agent -> Scroll down until you see: Edit User Agents... Once you click that you will see a screen that looks like:
Spoiler
Click Import and select the file you previously saved. Now you have a ton of user agents to pick from. In the spoiler is a screen shot of the huge list of User Agents you now can chose from.
Spoiler
To show the power of user agent switching below is the same computer with different user agents:
Below are examples of how powerful user agent switching is. These are examples all from the same computer:
Mac OS X (1280x768x24) Safari 1.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)
Win3x (1280x768x24) -gasp ancient computer. Windows 3.1 AOL Browser 3.0 (JavaScript: 1.8, Cookie: Yes, Java: Yes)
If I use any bot user agent (yahoo, google, etc) and forget to turn it off neocodex tells me "Your posting privileges have been removed my an administrator." and I cannot log in.
Notice on all of the above examples my JavaScript versions and screen resolution are the same. I can change this by uninstalling the latest update of java and changing my resolution. While I don't think this is necessary to use multi accounts at all if you want your main account to look completely and utterly separate of you then added changes to your information can only help you in the long run.
*Near future tests* Shortly I will be testing flash based stat gatherers and hopefully find a way to alert when a flash cookie is made and information on how to clear them. If neopets is smart they will have flash cookies here and there. I've been iced in other games due to not clearing flash cookies.
Java stat gatherer as java can send your correct ip rather than your proxy.
Hopefully a way to spoof the version of java installed rather and install and uninstall.
Actually, I have used different accounts on the same computer without any proxy support.
With different browsers each one (Firefox for my main, G-Metal for side) for about one year and a half.
Yet, I haven't been frozen or anything.
I think that by using different browsers (one for each account) they thought it was another computer on the same Ip.
I think that could work as long as you dont use programs or scam.
But if Im going to ab, I think I need proxy support.
I've tried to search IP support lately, but none of the htm proxies seems to be good
Either they have huge delays or doesnt work well...
Please, Could you tell me how to find a decent proxy?
Actually, I have used different accounts on the same computer without any proxy support. With different browsers each one (Firefox for my main, G-Metal for side) for about one year and a half. Yet, I haven't been frozen or anything.
I think that by using different browsers (one for each account) they thought it was another computer on the same Ip. I think that could work as long as you dont use programs or scam.
But if Im going to ab, I think I need proxy support. I've tried to search IP support lately, but none of the htm proxies seems to be good Either they have huge delays or doesnt work well...
Please, Could you tell me how to find a decent proxy?
I think you can definitely get away with a good amount that way, just have to be careful of trends. Depending on your isp they don't really have a way to know if you are on a public network. I would see georgina's thread on proxies but I typically prefer vpn proxies over any others. Even then the delay can be bad. With settings at .1-.2 I get anywhere from 2200ms-6000ms buy times. The connection is on the other side of the country from me though. I'm currently looking for one much closer to me. If you search "vpn proxy" with your city or a city near you that might help get a faster connection.
Totally awesome. Thanks bob. I still recommend single main and your sides for non-np making needs.
I agree with noitidart. If you want to be safe and love your main stick to one account and legit sides. Ab on your main if you wish to ab. There is nothing you can really do in the end that will truly prevent neopets from getting you for multi. These steps will help but until someone gets a job working for neopets security and sees the inner workings there is no way to know anything for sure. If you manage to pull that off I'm sure the contract you sign will land you significant jail time for leaking their secrets
This guide is now finished outside of new tests. After I complete a few I will bump this thread but since for months I haven't been banned for multi using 3+ accounts to restock/do dailies I'm not really worried. However, the flash tests will be semi-important to see if neopets uses flash cookies or java to figure out if you are using separate accounts. Since I don't play games on more than one account this hasn't been an issue for me.
My 'external LAN IP' value never changes no matter which proxy I use. I've used dozens of different proxies all of which connect and pass every other test described here. That External LAN IP value just won't leave. Help?