September 12, 2021
Agent Insights Ep 70: Good and Bad Personal Information
August 06, 2021
Agent Insights Ep 69: WildWorks Mascot Plushie
June 23, 2021
Agent Insights Ep 68: Bot Raids
Hello, everyone. Flint here to cover a topic that you've likely heard about if you've played Animal Jam recently.
Lately, there have been bot raids occurring, mostly on AJPC. What happens is, mass amounts of AI-controlled accounts appear in Jamaa, spamming certain text phrases and doing things they aren't supposed to be doing. For instance, they'll teleport, flash colors, constantly change their handheld item icons, and be flying without a flying animal. They aren't on AJ all the time, but bot raids happen frequently.
These bots fill up servers and cause large amounts of lag. For some players, they can't even log in during a raid due to the lag and the servers being full. Even if you can get in, you'll see these bots everywhere in public areas and will likely still experience lag.
Another thing these bots are known for is spamming. Besides spamming certain phrases in chat, they also spam buddy requests, JAGs, and game invites. If they're spamming you in these ways, it's very hard to get out of the situation long enough to disable your buddy requests/JAGs/etc. The best thing to do if you're being spammed is just to log off or sit there until the bot raid is over. If you aren't currently being spammed, I'd recommend turning off JAGs, buddy requests, and game requests for the time being.
As far as I know, the bots aren't hacking people's accounts. Some of them might be cracked accounts, but as of now the only thing that's coming of the raids is a lot of lag and annoyed players. Be cautious, but don't worry unnecessarily.
One other thing to note is that a way AJ has tried to combat these bots is by banning anyone who says the phrases they spam. The bots get around this by saying other things, but you shouldn't try to say phrases that the bots are spamming.
That's all for now. If anything major changes regarding the bot raids, we'll likely post again, but for now, that's all we have to say on the matter.
June 04, 2021
Agent Insights Ep 67: Epic Plushies
December 17, 2020
Agent Insights Ep. 66: Headless Pet Sharks
November 16, 2020
Agent Insights Ep 65: Two-factor Authentication
What's up everyone! Today, I bring to you the next issue of Agent Insights! Since there was a recent data breach as explained in a previous announcement, I thought it'd be fitting to talk about account security.
Having a strong password isn't the only way you can secure your accounts. Though, having a strong password is still very, very important. You can read more about strong passwords in our previous agent insights here. The method that I'm going to talk about in this agent insights can be used on top of a strong password to add another layer of security on top of it. This method is known as two-factor authentication, or 2fa for short.
2fa can be enabled on many online platforms like Google, and even Discord. Unfortunately, Animal Jam doesn't have the feature (yet, as of writing this post). So, if you have other online accounts aside from AJ, I strongly recommend you to go check if there is an option for 2fa, and enable it if there is.
So, what is 2fa? It essentially is an additional step that people have to do before they can enter their accounts. To set it up, you'd need an authenticator app. One example of such an app is Google Authenticator. What it does is that it generates a six-digit code that refreshes itself periodically. One set of six digits corresponds to one account.
During the setup phase, you must link your account to the authenticator app. Most apps should have the function to use a generated code to link accounts. After logging onto your account and clicking 2fa, there should be instructions to follow. Just follow the steps, and you would be able to enable 2fa for your account.
After 2fa is set up for your account, you need to refer to the app to logon to your account. After keying in your username and password, you would be redirected to another screen. You'd have to key in the six-digit code from your authenticator app that corresponds to your account before it refreshes itself. You can only access your account after you key in a code that exactly matches that in the authenticator app at that point in time.
Since the breach, AJ CEO Clarke Stacey stated that they will be improving their security over time. The whole video may be watched here, with the announcement of new security measures around the 6 minute mark. I sure hope that 2fa is among these new measures that AJHQ will be using!
With that, I've come to the end of this post. Once again, I'd like to emphazise the importance of 2fa. I also encourage all of you to check through your other online accounts to see if they do allow it, and enable it if they do.
That's all from me today. Stay safe and jam on!
-Dew
November 10, 2020
Agent Insights Ep 64: Wiki Worth Scam
Hey all, Jade here with your latest Agent Insights! Today, we'll be talking about a pretty rare kind of scam, but one that's also pretty easy to fall for: the wiki worth scam.
One very helpful tool to anyone looking to trade on Animal Jam is the Animal Jam Item Worth Wiki, or the AJIWW for short. It has pages for the worths of nearly all rare items and is kept very up to date with various changing worths.
However, since the wiki is collaborative, users can choose to edit pages and add incorrect worths. Sometimes this is done for trolling purposes, but it can also be used to scam. When setting up a trade with someone, a scammer could go to the wiki page for one of the items in the trade and edit it so the worth is incorrect. They could use this to get you to trade more for their item, or to get you to accept less for your item.
Since the worths are from such a reputable source, it's very easy to fall for this scam. However, there's an easy way to avoid being tricked: Go to the wiki yourself and check the page edit history. Pages are regularly edited with updated worth, so you can't be suspicious of every edit you see, but if you see a sudden and large drop/gain in worth, a very recent edit, an edit from a new/inactive account, or any combination of the three, it's likely a scammer trying to trick you into a bad trade.
In the case that you find someone attempting this scam, you should simply undo their edit and then report their account. As long as you take some time to investigate and don't let anyone pressure you into trading without double-checking worths, it's relatively easy to avoid this scam!
Well, that's all for today. If you have any questions about the wiki or this scam, feel free to leave them in the comments. Thanks for reading, everyone- Stay safe and Jam On!
November 04, 2020
Agent Insights Ep 63: Strong Passwords
Hello, everyone. Flint here, to talk about how to make a strong password.
Often, when we talk about hacking, we say things like 'just make sure your password is strong, don't give it out to anyone, and don't enter it in weird places, and you don't need to worry'. This is good advice, but we haven't covered what counts as a strong password yet, so I figured it'd be a good thing to cover.
First tip is, don't make it really obvious. Having passwords like 'password' or '1234' makes it much more likely that a hacker will guess your password, as those are the first things they will try. Similarly, making it your avatar's name, your online alias, or other specific information known to be relevant to you is a bad idea, because it's easy for people to guess them. One-word passwords are also easy for people to guess. In general, if your password is super common, short, or relevant to you, don't make it your password.
To make a good password, you should make it long. The more characters a password-cracker has to deal with, the harder it'll be for it to hack your account. It's also hard to guess long passwords that are mnemonics, random numbers, or similar. If you don't have a password manager, mnemonics for sentences that you can remember are good ways to make good passwords.
Don't include actual English words. This makes it so that the bot has significantly fewer variables to consider and makes it easier to crack your password.
In general, you should be including numbers, symbols, and punctuation in your passwords. It makes it that much harder to guess when hackers need to account for them. Combining words and letters with symbols is recommended.
Don't make your passwords the same as other passwords on other sites. If a data breach happens on one, the passwords there will be added to password-crackers that brute force hacking by using bots to try many passwords in a short amount of time, and it's much more likely that other accounts that share the same password as the breached account are at risk, since the password-crackers will try the breached passwords.
Password managers are highly recommended. The passwords they generate are nigh-unbreakable, and you don't need to remember each one. I'd recommend looking them up if you're interested in having an especially strong password.
Most hackers aren't going to try to target you specifically. You are one player out of many, and the chances of you being targeted for hacking specifically are low if you aren't very famous. However, these tips apply to passwords for other things too, and it never hurts to be safe.
That's all for today. Remember to make long passwords with at least some degree of randomness to them, and of course to not share this password with anyone. Bye!