Interesting Experience

First of all, I would like to make it clear that this was more than 2 and a half years ago so a lot of things have changed since then for me and for Club Penguin. This takes place during the Summer of '08 when I still had an interest in this game.

Anyway, I was reading one of the new blog posts about some party (whatever was going on at this point) and saw that the name of the penguin who took the screenshot was partially visible. I didn't recognize it as one of the normal moderators so I decided to go to properties and find the link for the image. Upon doing this, I then went to the URL and changed the number at the end of it as it was common knowledge at this time that other pictures they took could be found this way (soandsoparty[number].jpg). I don't remember how many tries it took before there was a picture with the name fully exposed. I believe it was Deamama or something close to that. Anyway, since I was curious, I went to the login in screen and attempted a variety of different passwords to see if it was possible to log on to. My first attempt at the password "deamama" (or whatever the name was) was accepted. I was very suprised as I expected more security on a penguin that was used by staff. Anyway, I logged in to a server with few people and decided to see that it had in terms of items and stuff. First, I checked its days played and found out that the account was only about 30 days old. Despite this, it had every item in the history of Club Penguin, including the beta hat. This was kind of surprising too since you would think they would want to not direct much attention to this account, especially when it had all this. Anyway, this is all that I really remember, I don't remember who was on its friends list and what the igloo looked like. That very day, I was going on vacation so I wouldn't be able to log on to it for about a week. When I came back, I found that the password had been changed. This meant that a. They found out it had been breached by me, or b. Someone else breached it and they found out. B is unlikely though, as I never read about anyone else ever logging in.

Finally, what was the point of posting all this you might ask? 3 reasons that I can think of. First, to show how Club Penguin's security isn't all that high (I believe there were rumors around this time that you needed the correct IP to log on Moderators). Second, gaining access to a staff account is a fairly serious event and could have resulted in me being banned forever. I don't really have much interest in Club Penguin anymore so wouldn't care that much if it happened. Third, I'm bored, this topic will hopefully get some posts, and we can have a discussion of something interesting for once.

Thank you for reading if you read all that. Now what is your opinion on this?

Cycle22 wrote:

First of all, I would like to make it clear that this was more than 2 and a half years ago so a lot of things have changed since then for me and for Club Penguin. This takes place during the Summer of '08 when I still had an interest in this game.

Anyway, I was reading one of the new blog posts about some party (whatever was going on at this point) and saw that the name of the penguin who took the screenshot was partially visible. I didn't recognize it as one of the normal moderators so I decided to go to properties and find the link for the image. Upon doing this, I then went to the URL and changed the number at the end of it as it was common knowledge at this time that other pictures they took could be found this way (soandsoparty[number].jpg). I don't remember how many tries it took before there was a picture with the name fully exposed. I believe it was Deamama or something close to that. Anyway, since I was curious, I went to the login in screen and attempted a variety of different passwords to see if it was possible to log on to. My first attempt at the password "deamama" (or whatever the name was) was accepted. I was very suprised as I expected more security on a penguin that was used by staff. Anyway, I logged in to a server with few people and decided to see that it had in terms of items and stuff. First, I checked its days played and found out that the account was only about 30 days old. Despite this, it had every item in the history of Club Penguin, including the beta hat. This was kind of surprising too since you would think theywould want to not direct much attention to this account, especially when it had all this. Anyway, this is all that I really remember, I don't remember who was on its friends list and what the igloo looked like. That very day, I was going on vacation so I wouldn't be able to log on to it for about a week. When I came back, I found that the password had been changed. This meant that a. They found out it had been breached by me, or b. Someone else breached it and they found out. B is unlikely though, as I never read about anyone else ever logging in.
Finally, what was the point of posting all this you might ask? 3 reasons that I can think of. First, to show how Club Penguin's security isn't all that high (I believe there were rumors around thistime that you needed the correct IP to log on Moderators). Second, gaining access to a staff account is a fairly serious event and could have resulted in me being banned forever. I don't really have much interest in Club Penguin anymore so wouldn't care that much if it happened. Third, I'm bored, this topic will hopefully get some posts, and we can have a discussion of something interesting for once.

Thank you for reading if you read all that. Now what is your opinion on this?

Ok, that's weird, now you would think they would defend their online game more than the people who paid GOOD MONEY to have an extra copy of a movie on their computer.
Are you sure that your penguin wasn't banned? I think they check your IP.

I Am Fun1 =) wrote:

Cycle22 wrote:

First of all, I would like to make it clear that this was more than 2 and a half years ago so a lot of things have changed since then for me and for Club Penguin. This takes place during the Summer of '08 when I still had an interest in this game.

Anyway, I was reading one of the new blog posts about some party (whatever was going on at this point) and saw that the name of the penguin who took the screenshot was partially visible. I didn't recognize it as one of the normal moderators so I decided to go to properties and find the link for the image. Upon doing this, I then went to the URL and changed the number at the end of it as it was common knowledge at this time that other pictures they took could be found this way (soandsoparty[number].jpg). I don't remember how many tries it took before there was a picture with the name fully exposed. I believe it was Deamama or something close to that. Anyway, since I was curious, I went to the login in screen and attempted a variety of different passwords to see if it was possible to log on to. My first attempt at the password "deamama" (or whatever the name was) was accepted. I was very suprised as I expected more security on a penguin that was used by staff. Anyway, I logged in to a server with few people and decided to see that it had in terms of items and stuff. First, I checked its days played and found out that the account was only about 30 days old. Despite this, it had every item in the history of Club Penguin, including the beta hat. This was kind of surprising too since you would think theywould want to not direct much attention to this account, especially when it had all this. Anyway, this is all that I really remember, I don't remember who was on its friends list and what the igloo looked like. That very day, I was going on vacation so I wouldn't be able to log on to it for about a week. When I came back, I found that the password had been changed. This meant that a. They found out it had been breached by me, or b. Someone else breached it and they found out. B is unlikely though, as I never read about anyone else ever logging in.
Finally, what was the point of posting all this you might ask? 3 reasons that I can think of. First, to show how Club Penguin's security isn't all that high (I believe there were rumors around thistime that you needed the correct IP to log on Moderators). Second, gaining access to a staff account is a fairly serious event and could have resulted in me being banned forever. I don't really have much interest in Club Penguin anymore so wouldn't care that much if it happened. Third, I'm bored, this topic will hopefully get some posts, and we can have a discussion of something interesting for once.

Thank you for reading if you read all that. Now what is your opinion on this?

Ok, that's weird, now you would think they would defend their online game more than the people who paid GOOD MONEY to have an extra copy of a movie on their computer.
Are you sure that your penguin wasn't banned? I think they check your IP.

As far as I know, my account as has never been banned. It might have been during the week I was on vacation, but they send you some sort of notification right?

Very surpirising, the company is owned by Disney, so you obviously would expect it to be secure.

The staff can do anything. They made the game. But the mystery is the security strength...

I remember me onetime breaking into billybobs account.

I had everything including the beta hat and that stuff.

I could even banned other penguin! 8D

Why did you tell us this now? It's cool but you should've told us sooner.

Alien Santa wrote:

I remember me onetime breaking into billybobs account.

I had everything including the beta hat and that stuff.

I could even banned other penguin! 8D

Somehow I doubt that...

ThunderBolt wrote:

Why did you tell us this now? It's cool but you should've told us sooner.

Because to be honest, I was kind of scared that I would be banned for thisl. By the time I no longer had that fear, I had long since quit Club Penguin and became inactive here.

Ah, reminds me of breaking into Happy77's account.

I banned a person : DDDD

I also broke in some persons account by mistake.
(toxicsmoke or something)

You could still check if you were banned if you make a parents account. Lol I thought this was some noob post until I looked at the username :P. Lol i too go an account by mistake. Like 4 years ago I was looking at some unwanted penguins hoping for a tate one ( what a noob I was :P) and the username was bary something. Anyway I typed in Barry by mistake and got a member penguin :P.

Wow that's amazing1