Neopets security breach

[♥ Dita ♥]

Even for the non heavy-hitting data, sometimes it's easy to forget how tame some of our bullshit is. Like nobody is getting (you need an account to see links) over RWs or having (you need an account to see links) over 3Ls.

I can't even imagine that happening! Like it's honestly fucked up that someone who do shit like that. I will never understand this kind of thought process. It's so upsetting. I know we are all collectively accepting we are cheaters but at least we aren't hurting people like you said. Sometimes I think people in like PC and whatnot forget just how tame we are compared to stuff like that!

[Jackalope]

i wonder if the person with the data specifically waited til SDCC to cause more chaos or if it's just super poor timing, either way glad it got quick traction because i've definitely reused passwords in the past and stuff like this reminds me i need to be more careful!

I'm guessing it was planned for when they thought it would get the most attention so yeah I'd say waiting until SDCC was intentional. Now even people who don't know Neopets are likely to hear about the leak while there. This has absolutely been a solid reality check for me. I was being way way way too lax with my passwords.

[morpheme]

For the average user (read anyone that can’t memorize 100+ different randomly generated passwords), a password manager with a length randomly-generated password and 2FA is far superior to any other option. Writing your passwords down is a huge no-no.

[Erik.]

For the average user (read anyone that can’t memorize 100+ different randomly generated passwords), a password manager with a length randomly-generated password and 2FA is far superior to any other option. Writing your passwords down is a huge no-no.

How? No burglar will even find it let alone the chances someone breaks in for your passwords are incredibly slim.

[morpheme]

How? No burglar will even find it let alone the chances someone breaks in for your passwords are incredibly slim.

Because 99.9% of people writing down passwords aren't keeping them in a safe or real safety deposit box and thus open themselves up to an additional vector through which their passwords can be stolen. Not to mention that someone locally can potentially have a much larger impact on your life through those passwords than someone online.

[phantasia]

I personally make long random passwords which I memorize by writing them down over and over again lol. But I read on the Neo reddit (I think it was there) that Neo actually only recognizes the first 25 symbols of your password. So if your p is 30 letters long, it still works if you only put in the first 25, or if you botch the last 5.... That's dumb Neo

Really this is a very intresting fact. I had no idea. Although I would never use such a long password anyway. I dont think I would be able to remember it at all!

[Flordibel]

Hey folks, let's keep on-topic to the Neopets breach, please. Password managers are a useful tool but this topic is for discussing the Neopets breach specifically. Thanks!

[Synth Salazzle]

The hacker would be a lot cooler if they were unbanning people >

[morecoffeepls]

It looks like the news outlets have picked up on the breach. I included the main articles below incase anyone wants to read...

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

(you need an account to see links)

[Fiore]

I do hope we get an update soon. I've been checking Jellyneoo, Twitter and Instagram constantly hoping there's some kind of update. As somebody who has been contemplating calling it quits for a while, this looks like the straw that broke the camel's back for me. I'm not entirely sure what TNT's situation is on why they never dedicated more time and resources in bumping up security and we can only make assumptions...but this procrastination when it came to site security just reeks of sheer negligence and I really don't know how else to see it. You're dealing with peoples sensitive information here! People invest a lot of time and $$$ in Neo, I would have expected at the very least, a modicum of effort on their end to keep our accounts safer.

IP addresses and emails were leaked before and this is what...the 3rd or 4th time? I hope they're able to do something quickly this time around. This should be a huge wake-up call for them. And if it isn't...well, I'm not sure what they're going to do from here on out. I also wonder that this means for the playerbase as a whole. Most players seem like dedicated veterans, and anybody new to Neo doesn't seem to stick around for very long....