Protecting against Neopets Cookie Grabber (CGer) Guide

Submitted by saudor on Sun, 17/05/2009 - 8:13am

Welcome to the in-depth guide to avoiding cookie grabbers. This page has been generated from background information of how it works, reverse engineering of various neo CGs and 1st hand research. (plus losing 800k + trades along the way, but hey, it's priceless!!)

[SHORT VERSION]

For the in-depth version, please see http://www.neopets.com/~punchback_bob
Remember that Internet Explorer is vulnerable to on-site cookie grabbers (on neopets)
Opera users should use the userjs file called BlockScript. It's sorta complicated but it's here

Get firefox here: http://www.mozilla.com/en-US/firefox/firefox.html?from=getfirefox

Recommended Firefox Add-ons
"NOSCRIPT" This helps block malicious scripts from running. 
Don't forget to whitelist neopets.com and any other sites that you trust (like hotmail.com) (see attachment)

FLASHBLOCK This allows you to selectively load adobe flash player objects. If you need flash to play games, simply click the arrow to enable that object. This is allowed since most browsers don't even come with flash. Do not whitelist neopets as one type of CG uses a redirection of http://images.neopets.com/flash_version_check_v1.swf? to steal cookies.

KEYSCRAMBLER ADD-ON. For protection against key loggers (programs that record everything you type) It's no use changing your password if every key you press is being sent to the "hacker"

ADBLOCK. It allows you to block ads... and other things (like CGs) See attachment for more info

REQUESTPOLICY. RequestPolicy is an extension that improves the privacy and security of your browsing by giving you control over when cross-site requests are allowed by webpages you visit.

 

Think you got CG'd?

If you THINK you were CG'd, the first you should do is LOG OUT. Why? Because this invalidates the cookie that the "idiot" took. Try it yourself. Log into neo in another browser. You will see that you can browse neopets for a bit on both web browsers. Now click the log out button of one browser and see what happens. Contrary to popular belief, clearing cookies will do nothing for you. Just log out, get the keyscrambler add-on (if you can get it), and then log back in and THEN change your password

 

AttachmentSize
Image icon whitelist-neopets.gif74.73 KB
Image icon ablock-instructions.gif43.8 KB
Forums: 
Neopets Misc
  • 230778 reads

This is really weird: 1) I was restocking and this person's shop (I highlighted here in the screenshot) has something weird going on. I clicked the link to go to his shop: http://photos.imageevent.com/fragan01/others/whathe2.bmp This is what I found: 2) http://photos.imageevent.com/fragan01/others/whatthe.PNG What's happening here?! WOW! Selling: Maps, Neggs, Stamps, Coins, Cards, ETC! http://www.neopets.com/browseshop.phtml?owner=1434sweet#p
WOW! Selling: Maps, Neggs, Stamps, Coins, Cards, ETC! http://www.neopets.com/browseshop.phtml?owner=1434sweet#p
1434neopets | Wed, 01/09/2010 - 9:54pm |

I have seen that quite a lot. I think they are shops that had background music and neo may have put a block on those types of files Pets paradise Mall 3 Branches Info http://www.neopets.com/~Shizukeo
Gavin63 | Wed, 01/09/2010 - 10:06pm |

What about people saying for a few days now that CG-ers are on Neoboards? I've been mostly staying away from the boards but saw one person on Charter say it happened to them today.
melaka | Thu, 02/09/2010 - 2:36pm |

Hey All! Can you possibly answer this quickly for me... I have been off neo due to life and illness, for about 2 weeks now. I see that they fixed the mall banners that were not working, which I found to be excellent news, because two weeks ago when I was on I tried to correct the malls petpet page to regenerate the banners but it did not let me and after much frustration and multi tries I gave up, then I had not been on since. My question is that I had all my mallers stop Rsing because many are no computer savey and to explain, well I can not even get them here and setup as a mall in many cases (just as an example). Anyway my quick question after and that blah blah is ... is it safe for them to RS again and if so do they have to be aware of what to look for cause I am not sure I can teach some old dogs new tricks. I am not insulting these members it is just that some ppl get and others do not, so can they safely go back to rsing as usual or do they still need to hover and watch before purchasing to ensure that they are not hit, and for IE do they have to do anything special if it is still not safe, I can explain FF as that is my browser but I was not sure about IE and what to watch for if this is still an issue... Hugs and thanks to all who help (in advance!) Suz --------------------- Best Priced Malls Toys, Plushies, Usuki's, Paintbrush's, Job Coupons, & Morphing Potions http://www.neopets.com/browseshop.phtml?owner=suzierainbow
--------------------- Best Priced Malls Toys, Plushies, Usuki's, Paintbrush's, Job Coupons, & Morphing Potions http://www.neopets.com/browseshop.phtml?owner=suzierainbow
SuzieRainbow | Sat, 11/09/2010 - 11:44pm |

[color=gray]I don't know if Internet Explorer will ever be safe, but the cgers has seemed to lessen recently. Just tell them (In a nice way) to switch to firefox, and follow the instructions that you can find in the first post to this page.[/color] --- [color=blue] From the land where Funny is a smell and Peachy is an emotion... [/color]
[color=Gray]Good Idea: Feeding stray kittens in the park. Bad Idea: Feeding stray kittens in the park... to a bear.[/color]
davymuncher | Sun, 12/09/2010 - 11:03am |

Thanks Davy for getting back to me so quickly, I am sorry to hear that is not over but I will pass the word and hopefully they will come and look. (((Squishes))) Suz --------------------- Best Priced Malls Toys, Plushies, Usuki's, Paintbrush's, Job Coupons, & Morphing Potions http://www.neopets.com/browseshop.phtml?owner=suzierainbow
--------------------- Best Priced Malls Toys, Plushies, Usuki's, Paintbrush's, Job Coupons, & Morphing Potions http://www.neopets.com/browseshop.phtml?owner=suzierainbow
SuzieRainbow | Sun, 12/09/2010 - 8:07pm |

[color=Gray]Protons have mass?[/color] [color=Blue]New Cookie Grabber out! It's in neomails! To prevent, enable plain text neomails. http://www.neopets.com/preferences.phtml Also it would be wise to disable your browser from having any stored PW's for neopets, that is what the Cookie grabber attacks apparently. [/color] [color=Gray]I didn't know they were Catholic![/color]
[color=Gray]Good Idea: Feeding stray kittens in the park. Bad Idea: Feeding stray kittens in the park... to a bear.[/color]
davymuncher | Mon, 25/04/2011 - 9:22pm |

I need 496 more views to get the top shop! http://www.neopets.com/browseshop.phtml?owner=cute_fluffball Please help me get this by either just viewing or buying something1
hunterismyfatcat | Thu, 10/02/2011 - 1:08pm |

HI all! I tried to download the key scrambler that is linked on the first link, and it doesn't work. I did find the link, perhaps you can update it on the first post? *wink, wink, nudge, nudge* http://www.qfxsoftware.com/download.htm Thanks!!
opalsunrise | Sat, 23/04/2011 - 2:45pm |

Are the PMP certification prerequisites easy to satisfy for a project manager who has only been doing project management for two years?
Monausn | Sat, 28/05/2011 - 7:06am |

Pages