Kaos is Back - just an FYI

[everconfused]

Don't they have legal recourse for this? Why aren't they doing something to stop him permanently?

Erin, I don't know about legal recourse, though if he (and his cohorts) are in the US it seems to me that the T&C should be able to kick in - the $50k fine for making a program and the fine for every time it's used. I don't know how this works if it's a minor.

As far as stopping him/them permanently, they have tried. According to kaos he's been IP banned and packet banned and finds a way around it. So he's bragged anyway. Don't ask me how, I'm clueless myself on all that stuff. Plus, consider that there are other peoples' accounts being used for this stuff - an account gets taken and cgs are placed on that person's lookup/shop, etc. -- that's unless they decide to have the account frozen for something bad.

What I would hope is that when an account is taken and frozen, that TNT can and will look at IPs accessing that account so the original owner can get it back.

[Erin]

Well considering the fact that Congress actually passed a law that makes it illegal to "annoy, abuse, threaten, or harass any person" anonymously online, I can't imagine why they wouldn't be able to bring similar charges against this little punk. They're spending all this time trying to stop him from accessing the site, when they SHOULD be trying to prosecute him somehow, or sue him, or SOMETHING. I doubt very much that his mommy and daddy would continue to let him play with his computer if they were forced to fork over real money to pay damages, or if he spent some time in a JD center or something. It's just so frustrating that he's still getting away with this crap.

[kuroro]

Exactly.. I can imagine though, that it doesn't have priority before the court.. sigh.. Which is sad.

I want to train my pets.. but I'm now avoiding shops, so I can't buy codestones.

[Nefasturris]

I go off and have a really good weekend and come back to this.

At first I was somewhat amused at the chaos on the neoboards from this... now I'm just annoyed. The boy just doesn't know when to quit.

[May]

Would all of this explain why Neo is running as slow as ever for me (as in, it takes at least 5 minutes for a page to load on cable, and every other website is fine). This kid needs some good old punishment for his mischevious deeds that disrupt other people's livelihoods.

Last edited by May on Sun Feb 12, 2006 11:30 pm, edited 1 time in total.

[mogster500]

Would all of this explain why Neo is running as slow as ever for me (as in, it takes at least 5 minutes for a page to load on cable, and every other website is fine). This kid needs some good old punishment for his mischevious deeds that disrupts other people's livelihoods.

Plus the ad revenue and premium memberships canceled. Think of how much Neopets loses during downtime.

[RolandOfTheEld]

Not this guy again? ARGH!

I have changed my password so many times in the past month that I can barely remember what it is.

Thanks for the heads up though.

[everconfused]

Something I just read on the charter board, please be very careful. There are a couple of people advertising buyable UB in their shop, and also trades -- that don't exist. My guess is they are trying to get people to go to their lookup to get to the shop and assuming that people won't do the smart thing and go directly to the TP and put the username in search there. So far, I've heard of people being cg'ed on lookups, in shops and now in at least one gallery.

So, just be watchful and wary of anything that sounds too good to be true (which we all should anyway).

This just makes me so very and so sad for anyone who gets their account taken.

Be sure to use your PIN for everything you can, even if it is an inconvenience. If you suspect anything, go change your password, then clear everything. Don't waste time clearing your cookies first. Once you've gotten a blank page/redirect back to Neo (maybe with a fake login page) it's too late. Gotta change that word ASAP.

[SuzanneC]

How does Neopet's cookies work? I was under the impression that once you changed your password, even if it is to the same one, that the old cookie that might have been compromised would no longer be valid.

But I had an experience today that challenges that. I access Neopets from my office as well as from home. It's a bad habit, but I don't usually log off before I exit from windows at work. I prefer to rotate between a few passwords, as I can't possibly remember so many. So during the weekend, I changed my password a few times at home. But today, when I went to Neopets in the office, I was still logged in! I think it is the same password as that I was using on Friday when I last accessed Neo from the office.

Does this mean that if somebody grabbed my cookies months ago and if I just happen to use the same password today, then he can access my account?

God, I hope this is just a glitch, or something, or else I would have to create a spreadsheet just to record all the passwords I've used.

[strawberry_mutant]

Poor TNT. I wish we could do something to help them...
...Although PPT was very helpful to me, I think. I went straight to PPT after I heard something about CGers on MSN and I wasn't disappointed.
http://www.pinkpt.com/scammed_practicaldefenseagainstcookiegrabbers.htm
I found this page excellent and I cleared my cookies immediately (although quickly after I realised you cannot enter Neopets without accepting cookies), and I now clear my cookies regularly.
I reccommend reading this page, along with the excellent advice on these pages.
Thanks guys!

[telomerase]

I just got hacked(and I am such a careful person) - I went to buy a codestone and when I clicked on it I was logged out - when I logged in I was missing my ring of the lost, sword of the dead, plus my trades were canceled and my unbuyable snowflakes stolen (i dont know what else). I am very sad. I was busy the past three days fixing another computer problem( jscript.dll was deleted - so nothing was working) and was going to set my pin up today. I had two pets waiting for food and codestones and I should have set my pin up first, but I had been away. I am devestated.

I know these 7 items are gone: RotL, SoD, Talinias Whittling Knife, Staff of Brain (these were equipped), Grape, Dung, and Spicy snowflake (these were in trades).

It doesn't appear that my pets, bank, shop, gallery or SDB were affected. I am too upset to keep looking though.

Edit: they took my blue and cloud petpet paint brushes from my SDB! I don't want to look anymore.

Last edited by telomerase on Mon Feb 13, 2006 11:16 am, edited 3 times in total.

[ira_7700]

I just got hacked(and I am such a careful person) - I went to buy a codestone and when I clicked on it I was logged out - when I logged in I was missing my ring of the lost, sword of the dead, plus my trades were canceled and my unbuyable snowflakes stolen (i dont know what else). I am very sad. I was busy the past three days fixing another computer problem( jscript.dll was deleted - so nothing was working) and was going to set my pin up today. I had two pets waiting for food and codestones and I should have set my pin up first, but I had been away. I am devestated.

Oh gosh! So sorry to hear that. Did you lose anything else? Is your pets ok?

[Q]

It's funny how stupid one can be even when well informed! I have been reading about this all day, have been quite careful, and while refilling my shop just now forgot myself and clicked on a shop with a 1np faerie. Guess what? I was logged out. Freaked out. Never moved so fast in my life. My pw was changed within a minute, then I cleared cookies and everything and changed it two more times, lol.

Actually, are there cookie grabbers on these logout pages, or are they just trying to get you to enter your pw?

[telomerase]

I think they are grabbing your password - because my stuff was gone before I had time to log back in. I dont know what to do. I sent a short (one sentence ) abuse report and changed my password once and added the pin. Should I keep changing it? Should I send a more verbose report?

[kuroro]

This is scary.. *sigh* Avoids shops and the like even more. I guess I will just avoid Neopets alltogether the next days.