28 replies to this topic

[FeelsGood]

Someone named Demo has found a way to grab anyone's password on neopets, along with other information. My account and other big players were hacked recently.
This is probably due to a sql injection?

Just change your password and re-login into neopets. You should be safe.

tnt needs to patch this quick!

Edited by FeelsGood, 12 January 2012 - 02:43 PM.

[Waser Lave]

If it's an unpatched SQL injection then changing your password won't stop them getting in unless you change it every second 24 hours per day.

You could also try sending as much information as you can to The Neopets Team.

[FeelsGood]

It worked for me : )
I think tnt is patching it right now.

[ch33psh33p]

You're not safe at all, DEMO can just as easily get your password again.


The fun thing about this whole charade is that of munsterpoo, garet_jaxx, and featheralley, only featheralley got rolledback immediately.


Favorite of the favorite.

[Honey]

Now I now the reason I could snipe in the auctions so easily

[FeelsGood]

tnt has patched it so if you re-login your password wont show in plaintext. lmao

[Waser Lave]

tnt has patched it so if you re-login your password wont show in plaintext. lmao

How do you know they've patched it?

[FeelsGood]

Someone from sythe is tellin people that, but im going ask the noob to try to get my pwd now.

[Stitches]

Maybe this will distract TNT enough to lay off on the freezing. *hopeful*

[Lovato]

Maybe this will distract TNT enough to lay off on the freezing. *hopeful*

They'll just strike harder later...

[Yung]

Maybe this will distract TNT enough to lay off on the freezing. *hopeful*

Yeah don't bank on it... this is only going to fuel more freezings.

[itsfrananne]

WAIT, when did this happen?


what's been done D:

[Persuasion]

what's been done D:

garret_jaxx
featheralley

A few other big names... =P

[itsfrananne]

like hacked?
what did they do?

any thing else?

[Spirited]

How would we know if we've been hacked? Like self-froze or something? Or loss of items/pets?

How do we know if we've been hacked if nothing was done to it? Is there some file or something we can see?

tnt has patched it so if you re-login your password wont show in plaintext. lmao

[Scot]

OP's username expresses how I feel about this situation

[onlyme]

OP's username expresses how I feel about this situation

Pwahahaha!

[FeelsGood]

Bump!!

[Sweeney]

Bump!!

Why?
If it's resolved, no one cares.
It it's not, no one here can do anything about it.

[FeelsGood]

Why?
If it's resolved, no one cares.
It it's not, no one here can do anything about it.

not resolved and I posted a solution.
change your password and re-login c:

[Sweeney]

not resolved and I posted a solution.
change your password and re-login c:

I love how you can say it's not resolved, and there's a solution in the same sentence.
Pure genius.

[Waser Lave]

not resolved and I posted a solution.
change your password and re-login c:

If it's not resolved then your 'solution' is not a solution, it's a temporary solution at best.

[cibomatto]

Thank you for posting about this .




"If it's an unpatched SQL injection then changing your password won't stop them getting in unless you change it every second 24 hours per day."


I hope every one is safe.


Did you try notifying the TNT about this ? they better patch this soon!

[FeelsGood]

they are still vulnerable to sql injection...(not resolved)
changing your password = password no longer in plaintext ...so script kiddies can't get your password if its in plaintext(somewhat of a solution)

: )

[Yung]

It is a temporary solution at best and doesn't warrant bumping this thread. It is misleading.