PAT RACK

original url http://www.geocities.com/antineopets/

aka “this shit will be out of date within hours because things keep happening”

Anyways, the official NFT token sale (did I mention you have to buy tokens for these NFTs so you can actually mint them? You don’t buy them directly, for some reason) ended early this morning, and right after that people were able to mint their Neopet NFTs.

The actual sale was botched - the sale began a few minutes before the official start time of 9 UTC, so quite predictably all the cheapest NFTs were sold out within seconds (i.e. bought out by bots)

(chart made by CaptainP on the r/Neopets Discord server)

In the end only 4,233 out of 10,500 NFT tokens sold. So not even half.

Anyways with the token sale ended, people were finally able to actually mint their Neopets NFTs, and not everyone was happy.

The actual NFTs, predictably, look like shit!

In the end only 10 out of 55 Neopets species were used, in only 20 out of dozens of potential colors. Also they did not tell anyone that the species and colors would be this limited, so there’s that.

But wait! There’s more!

Dress to Impress, a Neopets fansite where users can preview clothes on different Neopets, may very well have had its assets stolen for the second time by the Metaverse team. DTI has now put a disclaimer on their site about it:

BUT WAIT, THERE’S EVEN MORE!

People found out, by looking through the transaction history, that 100 more of the NFT tokens were created out of thin air, bringing the total possible NFT count up to 10,600.

When this was brought up in the Metaverse server, a mod finally responded after the second or third time.

(awfully long and stupid way to say “we’ll look into it”)

The tokens will be able to be minted til the 18th. What else will happen between now and then? Who even knows.

bonuses:

This idiot didn’t even know there wasn’t an NFT game to go with the NFTs (Metaverse still hasn’t done anything with the vague ‘roadmap’ they put up before the sale).

But like. Neopets is still very much a game you can play. On the internet. For free.

THEY’RE CALLED GRARRLS. THESE GUYS BOUGHT NEOPETS NFTS WITHOUT KNOWING ANY OF THE SPECIES.

My friend and I re-opened our shop, so Alien Aisha pins are available again for a short time at Goldstar ⭐ Lucky!

ALSO if you’re interested in a pin and you’re outside of the USA you can shoot us a message and we can try to arrange shipping options for you!

(we’re still pretty new at this so we haven’t set up a international shipping option yet within our website, apologies!)

There was also this super catchy tune from bomberman i think on this aisha’s page but i can’t remember the specifics anymore rip..

Who’s excited?! Here are our Official Beta Launch Dates!!

There’s been some confusion about whether or not you can play even if you don’t have a beta invite key, and we’d like confirm that you can!

Above are the launch dates for headstart key holders, standard beta key holders, and the general public! If you don’t have a key, you’ll be able to register only during the sign up windows which are open for a limited amount of time.

We’ll be announcing more open sign up windows around mid March!

Please anticipate possible lag or server outage during our initial launch times! If the site is down for an extended period of time during an open sign up window, we’ll be extending the window or re-opening it once the site is stable again.

OUR KICKSTARTER IS NOW LIVE!

Click here to go to it!

Here is some general info on our campaign for your reference:

It will last exactly 30 days.

You will be charged only at the end of the campaign if it succeeds.

You can pledge with an account or as a guest.

We’ll be looking into setting up backerkit which will allow extra convenience for backers so look for updates on that on social media!

Hooray, yesterday’s Flash-based security vulnerability has been fixed! We’ve confirmed the fix ourselves, and there’s an official announcement on the New Features page.

A big thanks to all y’all who helped spread the word! Very few users were affected, which is unprecedented for an attack of this scale — and it’s all because we all got out there early and spread the word. Go team!

Next Steps

We recommend that you keep the Click-To-Play setting enabled in your browser: it’s just a good idea not to run a plugin unless you specifically want to.

But it’s now generally safe to use Flash on trusted websites, like Neopets.com and fan sites like Dress to Impress. Hooray! (Yesterday, we advised avoiding Flash entirely, just in case.)

The Vulnerability

In order to let you log into PetPetPark.com and Neopets.com at once, the programming team decided a few years ago to allow the Flash files on PetPetPark.com to talk to Neopets.com using your browser’s cookies.

But, they made a mistake and ended up allowing all Flash on all websites to talk to Neopets.com using your browser’s cookies. This meant that any website could do things on Neopets.com on your behalf, like transfer your NP and items to another account.

This morning, however, JumpStart changed this setting, and now only Neopets.com can use your Neopets.com cookies, hooray!

For more technical detail, learn about crossdomain.xml: the Neopets crossdomain.xml file used to say allow-access-from=“*”, and now says allow-access-from=“*.neopets.com”.

This was a Neopets bug, not a Flash bug

Yesterday, we were incredibly vague about the nature of this vulnerability, and even kinda implied that it was a bug in Flash itself.

However, this was not a bug in Flash. Neopets.com was just using a feature of Flash incorrectly.

We were intentionally very unclear about that yesterday. Our goal was to tell you everything you needed to protect yourself, but make it very difficult for potential copycats to understand the attack and create their own version.

Sorry for being misleading, and we hope you understand why :) Now that the issue is resolved, we can safely talk about it all we want — hooray!

What about the Spring Korbat Toy?

Yep, that’s still important! Straight-up lying to the community is unacceptable, and I’m becoming increasingly uncomfortable with the fact that I’m officially affiliated with a company that thinks like that and communicates like that.

But, ending DTI’s affiliation with JumpStart has some implications for the community, so we should talk about all this before making any big decisions.

…that said, this past weekend has been exhausting, and I’m going to need a few days to catch my breath. If you have the chance, take some time to reflect on what you want the future of Neopets and Dress to Impress to look like. We’ll chat about it soon :)

Thanks! Happy Monday! —Matchu