Recent Scam

[Nether$]

Authenticated sessions:

Cookie on the habbo server, Cookie on the client.

When expires the server cookie is destroyed.

If you do manage to gain access to the cookie, there will be no way of replecating the login key with the server and the client id (traced by IP usually) will not match any existing sessions, causing a corruption of the server cookie.

You would not be able to do this, *unless* Habbo is cheap and do not use serverside authentication, if this is the case it violates Europian Legistlation- However habbo breaks the law everywhere :S


Lol

[Shawnstra]

Interesting how they can use the Habbo.co.uk domain. Thanks for the tip