Pink Poogle Toy Forum

Has anyone heard any more about this?

Cranberry is in touch with a TNT programmer, isn't she? Cranberry, if you read this, could you possibly talk to you contact, see what's going on with this? Are they working on it? Are they gonna tell us when they've fixed it? Or can they at least tell you so you can tell us?

I really want to be able to shop again!

Just bumping this up - is there any word yet if the problem has been dealt with and fixed, preferably in a permanent way? This having to only use the trading post and auctions is really irritating!

It's been way too long and I'm not bugging a programmer now. But considering Mr. Insane was working on it on the very first day people reported problems, I'm sure he fixed it... I mean, once TNT knows there's a security problem, they're not going to let it go on. They probably don't report it in the news because by the time they have the next news update ready to go, the problem is gone... and announcing that there was a cookie-grabbing problem but they fixed it would just scare all those thousands of people who don't properly understand what cookie grabbers even are.

Also, people tend to blow these things WAY out of proportion. One or two people get cookie grabbed and post about it on the neoboards, everyone else starts thinking hundreds of accounts are getting stolen, and it turns into this huge deal where everyone's terrified to do anything for days and days afterwards.

I accidentally went on to someone's user look-up last night.
I've lost my account.
I filled out the form, do you have any idea how long it will take for them to get back to me?

Edit: Oh jeez I'm an idiot; I changed my password right after going to the user look-up and forgot. Is their a way to unsend the form? Man I feel horrible now.

Just out of curiosity... how do you forget you changed your password?

I paniced when I realised I went to someone's user look-up after all this talk of cookie grabbers. I haven't changed my password in over a year, so I paniced again when my old one didn't work.
Yes, I'm stupid. I know. I feel horrible.

I thought that didn't sound right after seeing no visible uproar in the neoboards.

A "Cookie Grabber" can't get your cookies from other sites, I promise you.

Some kinds can.

That is basically the issue, yes. There are so many ways to insert Javascript (and therefore bad code) into a page, that it's very hard to filter.

Well, MySpace had a very famous exploit a while back. Ironically enough, Neopets had the exact same hole. (They eventually fixed it)

I'm speaking strictly about Javascript cookie grabbers, as those are the only ones you will find on Neopets.

So, to clarify, a javascript cookie grabber you find on neopets cannot access your other cookies.

Your password's strength is basically irrelevant to cookie grabbers, as they are not trying to guess your password.

Sorry.But that is true,java cookie grabers can only get your Neo cookies.

Short Answer: No.
Long Answer: No. Not until you lose your neopoints at least.
No, it's not true, unless the script writer did something horribly wrong.
Just Neopet's cookies. Furthermore, regardless of how many are taken, your computer will not crash.
No.

Do you mean Java or Javascript? (They are two VERY different languages.)