69 replies to this topic

[magda11us]

Watch out what userlookup and petpages you go to. I just found out some hackers are putting cookie grabbers in neopets and they just hacked someone with 70 million worth of weapons. They actually put them in the shop for buyable price. There also neomaling people saying to go to there userlookup. Just a brief warning to those that don’t want to get hacked.

Edited by magda11us, 28 December 2005 - 01:53 AM.

[Noitidart]

Thanks for the heads up mag

[murderousfiend]

I lost: SOS x 2, H4k, HP, Sray, BOD, WOR, RSS, G-BOMB and 284mil pure damn scammers.... its going to take me forever to get back my np, im accually thinking of getting ahold of Kaos or someone and buying NP

[Noitidart]

Oh man soo sorry about that How long did it take you to make that?

[murderousfiend]

ive been playing for 30 months just lost it all today, im not to mad about the items, as I make my np as a trader and was just doing the "buy low, sell high" thing, but all my pure I was sooo close to buying a SuAP... ah well, looks like I become an all-out cheater now!

other than the "private" proggies *points to rank* as I aint there yet, whats a great way to make np quick... any tips?

[zdzd]

would firewalls be useless??

[SpikeOut]

What the CENSORED? I thought Neopets blocked all suspicious code and Javascript? It's impossible to inject a cookie grabber into user lookup/petpage last time.

[Silk]

Thats what I would of thought too SpikeOut
magda11us- you got any usernames or anything? If we can report them then thats all groovy

[Robert]

yeah as soon as neopets know a name of the user lookup they will look through the code and block it....I say give them until the end of the year and all will be good

[murderousfiend]

They figured out a new way to bypass the no -no js- on Neopets. thus alowing them to use scripts in user-edited places on neopets

It could probably be easily done with a .tiff file and perhaps even .png if they've figured out the library. I dont know I havent looked into it extensivly yet.

people are crediting eggy and Kaos with figguring out how to do it, dont know if this is true tho....

either way, I would love to do immense physical harm to whomever took all my stuff I know its just a game, but damnit I spend 3 years building up my account

[Frizzle]

I suggest changing your password daily and deleting cookies.

[magda11us]

They figured out a new way to bypass the no -no js- on Neopets. thus alowing them to use scripts in user-edited places on neopets

It could probably be easily done with a .tiff file and perhaps even .png if they've figured out the library. I dont know I havent looked into it extensivly yet.

people are crediting eggy and Kaos with figguring out how to do it, dont know if this is true tho....

either way, I would love to do immense physical harm to whomever took all my stuff I know its just a game, but damnit I spend 3 years building up my account

I was lurking on the boards. Someone said it was Kaos fault. But someone must have found a new way. I just hope TNT does something. There after premium members thats what I heard.

[Silk]

Just stay off the boards and try and keep a low profile
You'll be fine

[japser_be]

but when they can hack your account like that they are genious

[redlion]

but when they can hack your account like that they are genious

Cookie grabbing is not hacking I'm thinking I've already lost my account though. All those 1 np sales and whatnot all went to user edited areas.

[towkay]

Do not display the Adam avatar on the chatboard so at least they don't know you are so rich!

[Solance]

Ok people I am going to explain how this is most likely done, There is a thing called PHP dynamic images ((all these sigs that show IP and stuff)) Well all this is is PHP script dynamically eidting a image, you use it just like html ex img src = http://shiznit.com/blah.php?.gif

and now you have a "image file" that can execute ANY php code.

this could be a possiblity on how they are doiing it though I am not sure


Mumei:
Edited the URL as it was a real one and not appropriate

Edited by Mumei, 28 December 2005 - 05:55 PM.

[Bains]

kaos is behind this I heard, if eggy is thats pretty sad... and murderous I'm pretty sure someone would have noticed an auction where 284mil was bidded on it maybe check if anyone saw. Not dissin on em but its sad because this is like a major part of Kaos's life lol messin up neopets, probably has a scrap book now for it. Also are programs here still trustworthy? like if eggy was really behind this then I wouldn't put anything past him.

Edited by Bains, 28 December 2005 - 08:15 AM.

[Silk]

Programmes here have been checked by admins I shouldn't think there is anything wrong with them

[Bains]

k thanks, eggy I aint sayin u did it I just heard a couple ppl name you, I'm sorry if I'm falsely blamin u.

[Silk]

Im not eggy o.0

sorry though you though I was eggy
His programmes work fine for me so dont be scared

Edited by Zulfi, 28 December 2005 - 08:42 AM.

[Bains]

nnoo ikno u aint eggy lol I'm just sayin that incase he reads this thread

[Kyle]

Dont suspect Eggy. Hes really a good guy. And anyway, admin's check programs over a few times before their submited, so no worries. We all love Eggy anyway.

[SupermanFTM]

Yup, it couldn't be our eggy! Anyway, that's pretty tricky, new ways around TNT.

[Johnbon]

dont forget we cant get anoyed when we lose out, we cheat by abing etc when other people wait all day for an item