Neopets Security Breach

[txtsd]

Ha. Nice.
Hopefully some good will come from it.

[Ice]

(you need an account to see links)

Hopefully TNT fixed it for good this time...

Oh man that's great news actually - cheers to the devs working over a holiday weekend!! They're the real mvps.

[Extraterrestrial]

Huh, I'm really thankful they took this seriously and jumped right on it despite the holiday. Surprised, but thankful.

One thing that confuses me is he mentions a breach in August, presumably of this year? But I don't remember anything like that? Was it never addressed?

[Prose Edda]

TNT is also going to be out of the office until after the New Year so it'll just be Tony telling him to fuck off until then

Lost it in real life thinking about Tony P giving this guy the runaround

FWIW it sounds like they outsourced a bunch of stuff to India, so even if El Pickulsaur or whoever is still in a food coma, poor Chandrasekhar making 2c/hr in Mumbai is still on duty.

[Fiore]

I know shit happens, but TNT has never been smart about these kind of things.... Like are they constantly on top of things security-wise or do they only work on it when it's brought to their attention?

The real question though:

Please log in to view spoilers.

[cornishwall]

Should we update passwords and pins now or wait until after they fix the most critical vulnerabilities?

[Bat]

If you scrambled your passwords and pins now, then the copies that were stolen from the Neopets database will no longer be accurate. Unless the database gets scraped again before the Neopets team fixes the vulnerabilities, your updated details will be safe.

[yesnt]

I'm wondering if anything actually has been scraped/leaked, sounds like these guys were the first to figure this vulnerability out and since they went straight to TNT rather than abusing it we should be ok.

Obviously always better to change passwords and pins anyway (better safe than sorry), but from the sounds of it (and someone correct me if I'm wrong) this is being fixed before anything bad has happened.

[Ked]

I'm wondering if anything actually has been scraped/leaked, sounds like these guys were the first to figure this vulnerability out and since they went straight to TNT rather than abusing it we should be ok.

Obviously always better to change passwords and pins anyway (better safe than sorry), but from the sounds of it (and someone correct me if I'm wrong) this is being fixed before anything bad has happened.

I saw somewhere that they were hacked in august as well. I'm not sure if that information is reliable though.

[Meepit]

You know what, fuck neopets. Sick of this constant shit. They just got a bunch of people to cough up thier cc info for premium for a couple of extra dollars worth of nc too. I was too lazy to update my shit lol, not doing it now hoes.