Neopets security breach

[Alister]

Anyway, I know we have gone over that time and time again, but the fearmongering off site really needs to stop. Spreading information on how to feel safe and calm (as possible) in a situation like this is one thing, but threatening to quit, telling people not to trade pets on the PC, saying people's banks will be hacked tomorrow if they do not change their Neopets password, etc... it is all too much.

Completely agree. To be honest, this was probably a good thing for me - apparently I hadn't changed my email password since 2014 😬 I did have 2FA enabled, but this incident was a great catalyst to get me to finally go and actually do some due diligence that'll likely benefit me off Neo in the long run anyway. Outside of the danger to our pets on Neo, which is trivial, any significant potential ramifications can be mitigated very quickly by refreshing off-Neo passwords.

[kittyray]

Completely agree. To be honest, this was probably a good thing for me - apparently I hadn't changed my email password since 2014 😬 I did have 2FA enabled, but this incident was a great catalyst to get me to finally go and actually do some due diligence that'll likely benefit me off Neo in the long run anyway. Outside of the danger to our pets on Neo, which is trivial, any significant potential ramifications can be mitigated very quickly by refreshing off-Neo passwords.

I had an account on an ecommerce site compromised a couple years ago and it had had payment details stored so that was a rude awakening. Encouraged me to finally set up a password manager and change every account I possibly could to a unique and randomized password. I still don't update them as frequently as I probably should.

[Ariealle]

Please log in to view spoilers.

i'm still on, i'm still playing, i'm still trying to reach my goals, and i hope that the time to do all that is available in the future and this dies down. hire someone who can genuinely set the site up with a better security system and keep it as updated as possible. yes, it's the internet, we are as safe as we can make ourselves, but can we at least have something that will allow us to breathe instead of constantly looking over our shoulders? i hope so.

[teslagirl]

Completely agree. To be honest, this was probably a good thing for me - apparently I hadn't changed my email password since 2014 😬 I did have 2FA enabled, but this incident was a great catalyst to get me to finally go and actually do some due diligence that'll likely benefit me off Neo in the long run anyway. Outside of the danger to our pets on Neo, which is trivial, any significant potential ramifications can be mitigated very quickly by refreshing off-Neo passwords.

^ This

I took a look at my account info and I hadn't updated anything since 2020 when time started standing still. I used to be very active in keeping my info safe, updated, and maintained...but then lockdown happened and my routines went by the wayside. I hate that Neopets is so lax about security, but at least its given me an excuse to do an account audit for my non-Neo online accounts as well.

[oventoast]

Im more worried about who may buy the database and what they do with it.

If they get the information they want and then sell it to other sites that have require subscriptions to access the data - it will just be the 2013 leak all over again.

I didn't think of this but I genuinely feel like this would be the best way to monetize the data. I feel like $90,000 would take ages to make back (like at least a couple years to make it back, and I'm not sure if you'd break even at this point, and I feel like there are probably better returns for putting that money in something else) but I guess if you are selling access to the data to many people, you can make a lot more.

I just doubt that one person will buy it and be able to churn enough sales with it alone to make that 90k back.

[Bat]

Q: How do you quickly draw a ton of attention to yourself and the stuff you're selling with minimal effort?
A: Slap an absurd price tag on it and whip everybody into a frenzy.

The exorbitant price is just to draw crowds, and it's working. All of the smaller offerings listed are what the seller is actually intending to make money on. Keep giving them attention - keep giving them sales. There's no such thing as bad publicity.

[Hall]

I've seen lots of talk about password managers but I'm woefully uneducated about them and kinda distrustful. (because I don't know about them)

It's a place you put all your passwords and then what? Is it like Firefox where it just stores them and puts them in for you when you need them?


Edit:
Back to Chameleon Ryu...when will I get the plant line for Mint!?

[Erik.]

I've seen lots of talk about password managers but I'm woefully uneducated about them and kinda distrustful. (because I don't know about them)

It's a place you put all your passwords and then what? Is it like Firefox where it just stores them and puts them in for you when you need them?


Edit:
Back to Chameleon Ryu...when will I get the plant line for Mint!?

My uncle has an app that stores all p-words and fills them in for him. But he says the safest option is still a paper note only you know of. After changing p-words you shred the old one of course.

[Hall]

My uncle has an app that stores all p-words and fills them in for him. But he says the safest option is still a paper note only you know of. After changing p-words you shred the old one of course.

....I have a bit in common with your uncle. I also have a paper list of my passwords. I don't have an app that fills them in for me but still

[Jackalope]

nothing unifies the Neo community back together like a colossal shitstorm with potential irl complications involving your personal data

I hate jawsch lmao there is something so pathetic about posturing for clout, not that you are TNT, but that you're a groupie of TNT

edit to add - seriously the partytime userbar being given out for this thread KILLED ME omg xD

Jawsch has rubbed me the wrong way for SO LONG. Why are you a fanboy for the staff?? I would kill to hear what they say about him behind closed doors. Also didn't he quit Neopets when they first got into NFTs. I see that resolve lasted...
Can't wait to see what amount of NC we get for free after this in the hopes we'll all shut up. 500 for NFTs, maybe 1000 for a site breach? What do we think?