Pink Poogle Toy Forum

Totally unsafe.

I want the pin in the removing petpets section, I don't want to lose any of them. I won't change my petpets anymore, so a pin there would be great

I'll use the PIN, though it's no defense against a keylogger Trojan. It's no harder than saying "yes" or "no" to the script and activex prompts, several times a page, which is how I have things set now.

Of course, if you have your PIN set on things you never plan on doing (changing e-mail, disowning pet, or removing petpets if they add that) the keylogger could never get it, as you're never going to be typing it.

How likely are keyloggers on Neopets? I've really only seen cg'ers. How do people get keyloggers on the site and how do they work compared to cg'ers?

Keyloggers are programs that are on your own computer, and log everything you type. To get one, you need to either download it yourself (but they're often disguised as other things, so you don't know you're doing it) or if there's a security problem with your web browser, it can get downloaded and run without you knowing.

As far as I know there have never been any keyloggers on Neopets. It's harder because not only do you have to find a security hole in a web browser, but neopets also does filtering and it might get stuck in that filter.

However, that doesn't mean it's impossible. If you remember back a few months ago, there was a security problem with IE where just viewing a specially made image could give someone control over your computer (and let them install a keylogger or worse). Someone could have put one of those images in their shop or lookup or guild or whatever, and anyone who went there who used IE would have been infected.

In that regard, neopets is slightly safer than going to a random website elsewhere, because pages not on neopets can put up whatever they want, whereas neopets does do some filtering. In the end, though, the only way to make sure you're safe from that kind of thing is to make sure your browser is up to date and doesn't have any security holes.

(In contrast to the cookie grabbers, where the browser is acting perfectly, and it's just neopets that's having problems)

Multiple PINs wouldn't be much of a problem. It'd be nice to have offered the option to use different ones. For those who are worried about not remembering them, why not keep a record? I have a simple text document on my computer with my various Neopets passwords on it. Just name it something not obvious like "Aunt May's recipes" or "shopping list" or whatever and don't mention that they are passwords/PINs. There's no way someone would know what they were unless they actually saw you saving/checking them there. It's really not that big a deal.

They still haven't added in pins for the areas that we've been concerned about. I'm surprised at this, since we all voiced our concerns so much. (And since it only took a day or so for the email to be added, although that was a security issue.)