Neo_Truths called out on Neopets Reddit

[gabigabmitch]

Definitely not defending the user in my example. The situation in question (according to reddit) was multi-account beauty contest voting. The user said they didn't even vote in the BC.

Just using it as an example that n_t (if they're not BSing) can pull a crazy amount of data.

I saw another one in passing months ago where someone was complaining that they never get their Trudy's bonus; that it randomly resets and they know for a fact they collect every day. n_t commented with the most recent day they hadn't spun.

Could they be lying? Sure. But even the perception of having that much data at your fingertips should give more people pause, whether it's true or not.

[Lazuli]

We have confirmed this is previous ck member DarkByte right? Bc I remember waaay back when I first became really active on this forum, his posts were pretty popular. And one time he said he was gonna start leaking data from pet transfers. And that it would negatively affect both cheaters and non cheaters. Which of course is not okay. And if I remember right he didn't end up going through with it due to the backlash.

[Miri]

What's the full extent of information he can access?

Ive seen him revealing trades, mystery pic, etc, but what else?

[Habanero]

What's the full extent of information he can access?

Ive seen him revealing trades, mystery pic, etc, but what else?

Apparently he can see which IP address accessed which accounts from his post the other day.

[aymo]

What's the full extent of information he can access?

Ive seen him revealing trades, mystery pic, etc, but what else?

99.99% he or she has had access to people's personal information like name, address, email, possibly even credit card numbers too at one point or another.

[Draothgorin]

99.99% he or she has had access to people's personal information like name, address, email, possibly even credit card numbers too at one point or another.

If TNT is storing credit card data locally they've got a major fuck up on their hands besides the fact the mall still uses HTTP and not HTTPS

[j03]

What's the full extent of information he can access?

Ive seen him revealing trades, mystery pic, etc, but what else?

Pretty much every data field you can imagine.

IP addresses, hashed passwords which in theory could be cracked, browsing history, mail, e-mail('s used in the past) on the account, NP being moved around, etc.

As for NC Mall stuff like your CC if it's stored on there, we aren't sure unless he's specifically mentioned gaining access to that. NC is a separate domain and database, if I'm not mistaken.

[I_royalty_I]

Pretty much every data field you can imagine.

IP addresses, hashed passwords which in theory could be cracked, browsing history, mail, e-mail('s used in the past) on the account, NP being moved around, etc.

As for NC Mall stuff like your CC if it's stored on there, we aren't sure unless he's specifically mentioned gaining access to that. NC is a separate domain and database, if I'm not mistaken.

Pretty sure CC info is stored third party now. At least they took that route rather than keeping it on sitting on their servers.

[aymo]

Pretty sure CC info is stored third party now. At least they took that route rather than keeping it on sitting on their servers.

Yeah but didn't it used to be locally stored, like when Premium first came out?

[I_royalty_I]

Yeah but didn't it used to be locally stored, like when Premium first came out?

Oh who knows about WAY back when.. maybe? I don’t remember back then. Now they mostly use paypal as their payment processor IIRC?
As far as security, there’s a whole suite of PCI compliance that companies need to go through if they want to be responsible. Sometimes credit cards don’t even allow mass payments unless the site is using secure means to do business. I had a brief stint digging into PCI compliance in the tech industry. The requirements are strict, neo would NEVER pass.