20 replies to this topic

[Sonomak]

Just browsing around Neopets - as you do - and I saw my Ylana's Blaster up for trade. Funny, considering it wasn't me.
I'm sure someone is in my account, what do I do? I've changed my password twice. I've just read about "CG" - what's that? I have no clue, I haven't gone onto any external sites or anything.

Help apreciated asap.

[Waser Lave]

Use pins on any areas where you have things of value (bank, SDB etc). If it was a cookie grabber then it's usually a good idea to log in and out which should invalidate any cookies which were taken. And I'd recommend staying away from usershops for a while until the exploits are fixed, that's where they seem to be.

[Sonomak]

Thanks, I've logged out. Used my brothers PC to add a pin on absolutely everything and change my password again. Could someone explain what happened and how I can prevent this?

[Waser Lave]

Thanks, I've logged out. Used my brothers PC to add a pin on absolutely everything and change my password again. Could someone explain what happened and how I can prevent this?

There seems to be some kind of exploit in the usershops which means that people can put code which directs users off-site to a page which can take their cookie information. They can then use that cookie information to access your account but it doesn't mean that they know your password or pin so having a pin on everything valuable means that they're unable to do much damage. There's not too much you can really do about it, the most effective thing would be to disable javascript and perhaps install NoScript for Firefox but a pin is usually good enough protection.

[Sonomak]

Thanks, I'll be more aware in future. So basically I can't buy anything from the sounds of things?

[Waser Lave]

Thanks, I'll be more aware in future. So basically I can't buy anything from the sounds of things?

Well I'd recommend just avoiding the usershops completely for now unless it's a user you trust.

[Casilla]

Use Firefox, and install NoScript add-on.  It will block any Javascript from websites you haven't authorized.  But be sure to mark neopets.com as a trusted site, or else all the JS on the site will be blocked as well.  CGers work by directing you offsite in some fashion, so you do not have to worry about allowing neopets.com.

[jcrdude]

You did the right thing. When you get CG'ed, first step is to log out.... THEN you change your pw.... then you go assess the damage

[Mr. Hobo]

Does neopets ever inform people about a new outbreak of cgers? Or is it purely spread by word of mouth? If people were to talk about it in the neoboards, what would happen?

[bends1]

Does neopets ever inform people about a new outbreak of cgers? Or is it purely spread by word of mouth? If people were to talk about it in the neoboards, what would happen?

I recall a many years ago that it was addressed by TNT when they were rampant. TNT made a great show to tell the small children to not enter their pass unless their address bar read neopets.com. This time not so much.

[WakaWaka]

TNT should just disable HTML on user shops.
I know its a bitch for those people who dont exploit but right now its just running rampant..

[Powerrrr]

Great, someone CG me and i lost 4mil np

[Elindoril]

Great, someone CG me and i lost 4mil np

Take this loss as a lesson to be more careful next time.

[iargue]

That was me. Sorry.

[Powerrrr]

That was me. Sorry.

http://www.youtube.com/watch?v=-gZ6-6RbSEg

[Waser Lave]

Does neopets ever inform people about a new outbreak of cgers? Or is it purely spread by word of mouth? If people were to talk about it in the neoboards, what would happen?

They usually blame it on meepits or something equally stupid.

[luvsmyncis]

They usually blame it on meepits or something equally stupid.

And they only answer your question in the first place if you throw cookies at them, or slap them with a pancake orsumshit.

[Mr. Hobo]

They usually blame it on meepits or something equally stupid.

Well that's stupid. If they wrote a quick guide on how to avoid cgers so many people's hard work could be preserved...

And they only answer your question in the first place if you throw cookies at them, or slap them with a pancake orsumshit.

Good ol' neopian times

[Sonomak]

I just wanted to say thanks for your help guys. I logged on today to find my account safe, but I was kicked not long after. I've been frozen for "my own protection". Last time I had this happen, they refused to give the account back to me

[Waser Lave]

I just wanted to say thanks for your help guys. I logged on today to find my account safe, but I was kicked not long after. I've been frozen for "my own protection". Last time I had this happen, they refused to give the account back to me

Just get in touch with them and make sure you include as much information about the account as you can to prove that it's yours.

[AliceFi]

they should block links to outside sites, i dont get why they didnt do this yet!
and yeah removing html from usershops might be a good idea as well - i blocked images on every usershop bcz it was getting a bit too much >.<