We have had a small security problem tonight, and suggest that you change your password. If a friend is acting strange or unlike themselves, please report it to a User Admin.
Styles have been disabled until we solve this issue :)!
Notice: This is not a Subeta issue, but an issue with Firefox. They are supporting a CSS tag that allows cookie grabbing (not what it's supposed to do, of course, but abused it can). :(! There is very little we can do to prevent issues like this. Regardless, if you use FIREFOX, changing your password is a VERY GOOD idea. :heart:
Update: We have updated various areas of the site to stop this exploit from being possible. However, if you are using Firefox and have browsed Subeta in the past day, it's still a good idea to change your password. I'd also like to note, that this is not an excuse to go running back to Internet Explorer, which has just as many (if not more) exploits and possible problems :)
Posted by Keith
Keith
STAFF
Your password is hashed with one of the most secure methods (MD5) so unless your password is something common (puppiesarecute!) you should be fine, as far as other sites go <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />
I changed my password, and deleted my cookies. Then it wouldn't let me back in through Firefox. I'm using IE now and it stinks so hard. <br /><br />
I'm happy that the staff is working on this as fast as they can. I really love subeta, and I hate when idiots make me feel insecure by playing it grubles at the cookie nabbers
I'm happy that the staff is working on this as fast as they can. I really love subeta, and I hate when idiots make me feel insecure by playing it grubles at the cookie nabbers
There's nothing Keith can't handle. <img src="http://images.subeta.org/smilies/6398_emoticon_wink.gif" border="0" /> Thanks for cleaning up this mess!
User not found:
Im good
<b>Quote:</b><blockquote style="padding:5px; line-height:15px; background-color: #FAFFFF; border: 1px solid #000000; font-family: georgia; font-size: 10;">UGh...I never clear my history...and I used paypal earlier this week...<br />
1) Do I need to change all my passwords, or did this ONLY grab subeta?<br />
2) I second the "am I safe with Firefox and noscript"? Because I use that...constantly...and it's kept me safe from all kinds of crazy things since I disable it. However, if it was a subeta script...then...<br />
3) So this happened from answering the trivia? I took a guess(was confused at while a new one was up, but whatever), so I was affected right?</blockquote><br />
<br />
1) Depends, are all your passwords the same? I'd change at least pay pal, subeta and the email if I was you.<br />
<br />
2) No, cookies are different. Noscript doesn't handle cookies. <br />
<br />
3)This had nothing to do with the trivia? It was just a person who wanted to have fun?
1) Do I need to change all my passwords, or did this ONLY grab subeta?<br />
2) I second the "am I safe with Firefox and noscript"? Because I use that...constantly...and it's kept me safe from all kinds of crazy things since I disable it. However, if it was a subeta script...then...<br />
3) So this happened from answering the trivia? I took a guess(was confused at while a new one was up, but whatever), so I was affected right?</blockquote><br />
<br />
1) Depends, are all your passwords the same? I'd change at least pay pal, subeta and the email if I was you.<br />
<br />
2) No, cookies are different. Noscript doesn't handle cookies. <br />
<br />
3)This had nothing to do with the trivia? It was just a person who wanted to have fun?
I changed mine sweetie <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />
User not found:
Ok that makes me feel much better <br />
Thank you Keith!! <img src="http://images.subeta.org/smilies/6398_emoticon_grin.gif" border="0" />
Thank you Keith!! <img src="http://images.subeta.org/smilies/6398_emoticon_grin.gif" border="0" />
UGh...I never clear my history...and I used paypal earlier this week...<br />
1) Do I need to change all my passwords, or did this ONLY grab subeta?<br />
2) I second the "am I safe with Firefox and noscript"? Because I use that...constantly...and it's kept me safe from all kinds of crazy things since I disable it. However, if it was a subeta script...then...<br />
3) So this happened from answering the trivia? I took a guess(was confused at while a new one was up, but whatever), so I was affected right?<br />
<br />
1) Do I need to change all my passwords, or did this ONLY grab subeta?<br />
2) I second the "am I safe with Firefox and noscript"? Because I use that...constantly...and it's kept me safe from all kinds of crazy things since I disable it. However, if it was a subeta script...then...<br />
3) So this happened from answering the trivia? I took a guess(was confused at while a new one was up, but whatever), so I was affected right?<br />
<br />
User not found:
ahahhaha. keith is the bomb =D
User not found:
Thank you Alraune<br />
And yes I was just wondering, I dont wanna bring up any bad memories :c
And yes I was just wondering, I dont wanna bring up any bad memories :c
User not found:
firetails- yes it was, but I'm not sure if talking about it is allowed.<br />
<br />
Keith- oh okay. Thanks for clarifying.
<br />
Keith- oh okay. Thanks for clarifying.
User not found:
Hello, Keith. <img src="http://images.subeta.org/smilies/6398_emoticon_happy.gif" border="0" /> You're doing an excellent job, despite the paranoid people. <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" /> I support you.
User not found:
sweatdrop Whoo, that's fixed **feels so safe back on my own account -.- Very sory for the interuption, and glad that's all over.
So it's a good thing while this was going on I downloaded the latest version of FF?
Keith
STAFF
Alraune - It was actually a bug in a BROWSER (firefox). We cannot control what exploits are published or put inside of browsers and included in their CSS parsing.<br />
<br />
All we can do is prevent and try to contain damage when that DOES happen.
<br />
All we can do is prevent and try to contain damage when that DOES happen.
User not found:
Nothing's ever 100% secure from hackers =/
User not found:
potter puppet pals rock ^^<br />
I wasn't freaking out I was just worried that I would have to start over (I know you are talking about everyone; but I'm just saying why I said that...)
I wasn't freaking out I was just worried that I would have to start over (I know you are talking about everyone; but I'm just saying why I said that...)
User not found:
coughs <br />
...TBH, I can see why people may be a little worried. But freaking out because you can't login and being 'afraid' because Admin is frozen? Really, it's not like someone just stole your soul and put it for auction on eBay. x3 Just chillax and wait out the storm by watching Potter Puppet Pals on YouTube instead of stressing yourself over pixels. <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />
...TBH, I can see why people may be a little worried. But freaking out because you can't login and being 'afraid' because Admin is frozen? Really, it's not like someone just stole your soul and put it for auction on eBay. x3 Just chillax and wait out the storm by watching Potter Puppet Pals on YouTube instead of stressing yourself over pixels. <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />
I know one of my friends hasn't been on in a while and now it says she logged in 2 hours ago. She may have logged in but I'm not sure.
Should I clear my cache or no? I just downloaded the newest FF browser while this whole thing was going on and changed my password once the post was put up.
User not found:
yeah adding a pin # is a good idea
Ah! I was so worried O___O Because I changed my password, and cleared my cache, and it took me several tries to log in D=<br />
<br />
Quick question: If a situation like this (or similar to this) ever occurs again, would it be helpful if you had a PIN?
<br />
Quick question: If a situation like this (or similar to this) ever occurs again, would it be helpful if you had a PIN?
User not found:
oh nevermind I got back in now<img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />
I reseted my password for my account...but it won't let me sign in using the new one...<br />
<br />
how do I get back in? (My Account is Angelicanimelover)
<br />
how do I get back in? (My Account is Angelicanimelover)
User not found:
yeah, thanks Keith...<br />
<br />
what about that trivia?... o___o
<br />
what about that trivia?... o___o
Keith
STAFF
Everyone's account is just fine <img src="http://images.subeta.org/smilies/6398_emoticon_smile.gif" border="0" />! As far as the staff is concerned. If you are worried, I would highly suggest changing your password. This person was crafty, knowning that we suggest Firefox and used for users <img src="http://images.subeta.org/smilies/6398_emoticon_sad.gif" border="0" />!<br />
<br />
So ESPECIALLY if you use firefox, change your password <img src="http://images.subeta.org/smilies/6398_emoticon_grin.gif" border="0" />!
<br />
So ESPECIALLY if you use firefox, change your password <img src="http://images.subeta.org/smilies/6398_emoticon_grin.gif" border="0" />!
User not found:
TBH I think Keith and the staff deserve to be thanked for working so hard so quickly and being so informative. So thank you. <img src="http://images.subeta.org/smilies/6398_emoticon_grin.gif" border="0" />
User not found:
er, I logged out but couldn't get back in. My password wouldn't work TT_TT's up. <br />
<br />
This is obviouslly Bells weeps And I want my account back sobs
<br />
This is obviouslly Bells weeps And I want my account back sobs
Keith
STAFF
Just change your password, if you feel like you need to.<br />
<br />
we are working on the password, since, as always, you come first.<br />
<br />
We aren't neopets, we understand that when there is a security threat, <strong>we need to tell you</strong>. There was a cookie grabber, which we are working on solving.<br />
<br />
I'm sorry for this! <img src="http://images.subeta.org/smilies/6398_emoticon_sad.gif" border="0" />
<br />
we are working on the password, since, as always, you come first.<br />
<br />
We aren't neopets, we understand that when there is a security threat, <strong>we need to tell you</strong>. There was a cookie grabber, which we are working on solving.<br />
<br />
I'm sorry for this! <img src="http://images.subeta.org/smilies/6398_emoticon_sad.gif" border="0" />
User not found:
h your right forgottenmoments that makes alot of sence
*For as long as...<img src="http://images.subeta.org/smilies/6398_emoticon_raspberry.gif" border="0" /><br />
And I'm wondering what us trivia winners are expected to do with the shirt we won from the trivia before the bogus one was posted. People are selling their shirts and putting them in their galleries. I figured we'd be expected to delete them..but I've seen no mention of it.
And I'm wondering what us trivia winners are expected to do with the shirt we won from the trivia before the bogus one was posted. People are selling their shirts and putting them in their galleries. I figured we'd be expected to delete them..but I've seen no mention of it.
Guys. You'll get an explanation eventually, so calm down. Jeez. It's not that important ATM at what exactly happened. If you were on to see all of this happen and haven't changed your password, do it. If you weren't on to see it, you'll find out what happened soon enough. So chill pills for everyone. :O
Thanks for the heads up, and hope it gets sorted out soon! n-n Wonder whats going on o.o I changed my pass though...I just updated firefox today too, so I think I'm protected as much as I can be...
As long as I've been around..there has been a delay to login after changing a password. I don't think you need to worry about that.
User not found:
*shes
User not found:
people of subeta. just calm down and get some sleep, or eat breakfest where ever you are now xD<br />
keithy will inform us about what happened yesterday/today.<br />
or i hope so. xD
keithy will inform us about what happened yesterday/today.<br />
or i hope so. xD
User not found:
I'm assuming this would be the place to ask: Firefox users with noscript. Safe, y/n?
User not found:
I changed my password and couldn't log in for a while. Obviously it finally worked since I'm here now, but still don't understand what the problem was. Was that a legit message - to change the password? Do I need to change it again?
<br />
Nothing is ever completely safe from any and all threats.