67 replies to this topic

[Noitidart]

What you can do to help is show us how to avoid these things. That would be totally awesome. Please make a topic on how to be safe from these exploits. I would definitely definitely appreciate that.

[Abradix]

Consider it done Noit. Working on it soon as this is posted


Edit:

I searched for any information I could find about the actual cookie grabbing process a few months back, but obviously had no luck. I'm interested in it simply from a nerd's perspective. I don't want to steal anybody's account, as (no offense) that's kind of a dick thing to do. I'm just really curious about the thing works.

How long has this particular exploit been working? Is it something quite difficult for TNT to prevent again?

The exploit has been working for about 6 months, but only recently have we decided to spread the knowledge. I will explain in more detail HOW its done in my guide.

Edited by Abradix, 19 January 2011 - 07:18 PM.

[fxckyouguys]

Well. Don't care about CGing, but you're cute.

[Abradix]

Well. Don't care about CGing, but you're cute.

I'm quite proud of the face I got stuck with! Hit me up if you're over 18 and in Cali

And heres the guide that was promised:
http://www.neocodex....d-of-being-cgd/

[fxckyouguys]

Hahahaha! 18 in 10 days and I actually plan on moving out to Norcal in the future, what luck. xD

[Abradix]

10 days? *sets a timer*

See you soon

[Bone]

CG the super-rich AC'ers.
The drama would be tremendous.

[Abradix]

lowest form of life

Haha, someone has been CGed before. Don't be mad. Embrace the chaos.

[Dayzee]

Ok, so I see the guide, but I'm afraid to click the link.

[Barophobia]

Take from TNT, nothing else

(though messing around with those snobs on BD chat sounds like a plan)

ETA: Oh yea, forgot to mention. Thanks for adding the guide Abradix, you're a pretty cool guy

Edited by Barophobia, 20 January 2011 - 04:16 AM.

[Dayzee]

And heres the guide that was promised:
http://www.neocodex....d-of-being-cgd/

I tried doing this in Chrome. Problem is, when I disable the javascript it screws up my functions. For example, if I click an item in my inventory this disables the pop-up window so I can't take any actions with my items Any suggestions?

[Dreww]

When you run noscript, you can either whitelist sites as you visit them or whitelist them beforehand. I recommend doing either of these for neopets.com . I'm fairly certain this won't affect your protection, as the current CG method uses an off-site image with the exploit embedded (don't allow the site, you won't be susceptible?) (None of this is certain, but it's the common thought on places like neomallers and jellyneo)

[Dayzee]

When you run noscript, you can either whitelist sites as you visit them or whitelist them beforehand. I recommend doing either of these for neopets.com . I'm fairly certain this won't affect your protection, as the current CG method uses an off-site image with the exploit embedded (don't allow the site, you won't be susceptible?) (None of this is certain, but it's the common thought on places like neomallers and jellyneo)

Ok, just to verify, I add neopets to the allowable sites and I am still protected? Sorry, I'm not very tech savvy.

[Dreww]

Wait for Abradix to get on to confirm this, but as far as anyone on the receiving end of these are concerned, yes.

[ArticTheTiger]

Ok, just to verify, I add neopets to the allowable sites and I am still protected? Sorry, I'm not very tech savvy.

Assuming the xhtml needs to be parsed through a 3rd party site (which it does) yes.

[Dayzee]

Okay Dreww and Arctic - Thanks!

Abradix, can you please confirm this for us?