darkhappy

Keybase proof

I hereby claim:

• I am darkhappyy on github.
• I am darkhappy (https://keybase.io/darkhappy) on keybase.
• I have a public key ASAKu4H3M6vyTriAl7iztWACgjYNjMa9VLZdsFJdqb500Qo

To claim this, I am signing this object:

darkhappy

Keybase proof

I hereby claim:

• I am darkhappy on github.
• I am darkhappy (https://keybase.io/darkhappy) on keybase.
• I have a public key ASDq2zU41L0WHU0AvJ5JfZhN1WEvJ4wAPXd5BaRLdGGGWAo

To claim this, I am signing this object:

darkhappy

Toontown Rewritten: Playcookie Hijack

I've been seeing a lot of people misunderstanding the exploit that was used on April 17th, 2020. This gist should help explain how the exploit is done, and how to protect your account. Personally, I wouldn't call this an exploit, as this is more of social engineering than actual hacking, but nevertheless, throughout the gist, this will be referred to as an exploit.

UPDATE 2020-04-19: EXPLOIT PATCHED

As of April 19th, 2020, this exploit has been patched. Playcookies are now printed only after authentication, which means that even if you get your log files exposed, an attacker cannot login to your toon directly.

Do note however that logs can still be used to impersonate you, so remember to keep them safe!

Playcookie

darkhappy

Toontown Rewritten - Cog Field Offices ARG

• Status: Concluded
• Start date: 2021-11-20
• End date: 2021-11-29
• Parts: 4

This is all the information on how to solve the ARG revolving Toontown Rewritten's Field Offices update.

Help solve ARGs!