Cloud Variable Exploitation

tntman24

My browser / operating system: ChromeOS 14541.0.0, Chrome 123.0.0.0, No Flash version detected

Hello ST,
So, I believe I found a security bug with scratch cloud variables. By using a application called insomnia, you can effectively send HTTP requests to a scratch project cloud variable by using the console in the Web Tools in Chrome, you can see the server it gets sent to along with the data. My idea is to encrypt the data in hash so people can not get it, or make it so you need a password or whenever the you send the data that only the computers have. But, I don't know anything about this, just a theory

Thanks,
@tntman24
———————————————————————–
Come Check Out the TNT Studios Website!
Check Out The Collaborative Project!

DarianDev

what is blud talking ab!?!?!?

cloud variable data are sent via websockets. you can create a websocket w scratch servers and send a handshake, afterwards, its chaos

ametrine_

(edit: just realized you knew what he meant, sorry)

Last edited by ametrine_ (May 17, 2024 22:59:23)

this is my signature, it's added automatically

hi, i'm ametrine
i've been coding ever since i was 5 and i've made music for about 7 years
feel free to ask me if you want me to make a song for your game!

Discuss Scratch