Neopets security breach

[Autobot]

This site is actually the entire reason why I got a PW manager in the first place after reading some treads that brought it up in regards to account security.

Please log in to view spoilers.

[samsepiol]

I am already 1000% over every one who acts like they've never gotten a spam email before assuming that this data breach has to be the only explanation for them getting a password reset request or fake response from a website since then. It's the strangest attempt at attention I have ever seen.

[Hall]

This site is actually the entire reason why I got a PW manager in the first place after reading some treads that brought it up in regards to account security.

Please log in to view spoilers.

ooooh so password managers don't just STORE them for you they actually make it safer for you! I was under the impression that you just put them all in one place under a master password! This makes me feel much better about them. Now to look into getting one for myself and all the sites I use. :3

Is interface really the only difference between the different ones?

[Erik.]

....I have a bit in common with your uncle. I also have a paper list of my passwords. I don't have an app that fills them in for me but still

I personally make long random passwords which I memorize by writing them down over and over again lol. But I read on the Neo reddit (I think it was there) that Neo actually only recognizes the first 25 symbols of your password. So if your p is 30 letters long, it still works if you only put in the first 25, or if you botch the last 5.... That's dumb Neo

[isopods]

i wonder if the person with the data specifically waited til SDCC to cause more chaos or if it's just super poor timing, either way glad it got quick traction because i've definitely reused passwords in the past and stuff like this reminds me i need to be more careful!

[Hall]

I personally make long random passwords which I memorize by writing them down over and over again lol. But I read on the Neo reddit (I think it was there) that Neo actually only recognizes the first 25 symbols of your password. So if your p is 30 letters long, it still works if you only put in the first 25, or if you botch the last 5.... That's dumb Neo

With Neo being what it is and this being the 3rd breach, that we know of, having a PW system that doesn't recognize all the characters doesn't surprise me at all.

[Autobot]

ooooh so password managers don't just STORE them for you they actually make it safer for you! I was under the impression that you just put them all in one place under a master password! This makes me feel much better about them. Now to look into getting one for myself and all the sites I use. :3

Is interface really the only difference between the different ones?

No, they really do put it under a big password, sorry I was unclear with that fjdjcjd

Basically, if I want access to my PWs I need to log into the LastPass website. From there it show the various sites I have login info for and options to copy password, edit etc.

It... makes me nervouse sometimes, knowing that if someone had that one string of characters I remember for LastPass and get into all my shit and ruin. But that's just means you also need to update that often as well!

Edit, forgot to answer the question sorry: I don't remember the other sites that I had checked; I'd assume the method of curating your passwords would be the same? Accessibility I think would be more varied?

When I mentioned LastPass letting you save a new PW without having to access the LastPass website, I forgot to mention that it's done via a Google chrome extension

(I don't consider myself computer smart so if there are any nuances or anything I'm leaving out please feel free to say)

[♥ Shazi ♥]

i used to have a separate email just for neopets. guess it's time to go back to that.

neo_truths has been really quiet which i think is so strange?? i'm not on discord so idk about there but he's only made two posts on the subreddit which just seems out of character.

as for jawsch.. i just don't think he's smart enough lol

[Hall]

No, they really do put it under a big password, sorry I was unclear with that fjdjcjd

Basically, if I want access to my PWs I need to log into the LastPass website. From there it show the various sites I have login info for and options to copy password, edit etc.

It... makes me nervouse sometimes, knowing that if someone had that one string of characters I remember for LastPass and get into all my shit and ruin. But that's just means you also need to update that often as well!

Edit, forgot to answer the question sorry: I don't remember the other sites that I had checked; I'd assume the method of curating your passwords would be the same? Accessibility I think would be more varied?

When I mentioned LastPass letting you save a new PW without having to access the LastPass website, I forgot to mention that it's done via a Google chrome extension

(I don't consider myself computer smart so if there are any nuances or anything I'm leaving out please feel free to say)

Fascinating, I'll have to look into this more, but the more I hear and read the more I'll end up using a Pw manager as well. I don't use Chrome so hopefully there is a FireFox friendly extension as well.

Thanks for answering that for me! :3

[Hollow]

It's just wild to me that this has happened a second time, I don't understand why TNT can't invest in good security for the site? I almost feel like they've given up with it since it still feels so broken.