It says that people can track you through images in the forums!!!!!!!

um.. scratch team?

My browser / operating system: Ubuntu Linux, Firefox 69.0, No Flash version detected

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

M

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

True, but that's not what we were talking about.

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

The best security is called “don't be stupid”. Here's what you do: don't have a stupid password. This one-step program will keep your account safe from any attack.

fdreerf wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

The best security is called “don't be stupid”. Here's what you do: don't have a stupid password. This one-step program will keep your account safe from any attack.

I have a strong password…

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, D1s₵oRd makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

Actually, if you get your password wrong 5-8 times (i don't know the exact number) you will be taken to this login page where they ask you to do captcha.

jettypumpkin07 wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, D1s₵oRd makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

Actually, if you get your password wrong 5-8 times (i don't know the exact number)

I tried it, it's actually 4 times.

LankyBox01 wrote:

jettypumpkin07 wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, D1s₵oRd makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

Actually, if you get your password wrong 5-8 times (i don't know the exact number)

I tried it, it's actually 4 times.

To be honest, That won;t stop anyone,

DawnRooney27 wrote:

LankyBox01 wrote:

jettypumpkin07 wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, D1s₵oRd makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

Actually, if you get your password wrong 5-8 times (i don't know the exact number)

I tried it, it's actually 4 times.

To be honest, That won;t stop anyone,

err.. blame it on javascript
You can try it yourself tough, it's true.

LankyBox01 wrote:

get sniprolled
err.. blame it on javascript
You can try it yourself tough, it's true.

I agree with Audrey that scratch should have an extra layer of security.

DawnRooney27 wrote:

LankyBox01 wrote:

get sniprolled
err.. blame it on javascript
You can try it yourself tough, it's true.

I agree with Audrey that scratch should have an extra layer of security.

Ok you can do a suggestion then
https://scratch.mit.edu/discuss/1/

LankyBox01 wrote:

DawnRooney27 wrote:

LankyBox01 wrote:

get sniprolled
err.. blame it on javascript
You can try it yourself tough, it's true.

I agree with Audrey that scratch should have an extra layer of security.

Ok you can do a suggestion then
https://scratch.mit.edu/discuss/1/

Noice

fdreerf wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

The best security is called “don't be stupid”. Here's what you do: don't have a stupid password. This one-step program will keep your account safe from any attack.

*Almost any attack.

You guys went off-topic real quick-

fdreerf wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, Discord makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

The best security is called “don't be stupid”. Here's what you do: don't have a stupid password. This one-step program will keep your account safe from any attack.

I think that it is not really Firefox, but a filter installed on the computer to make sure you are only going on sites that are safe. It most likely is because of the HTTP vs HTTPS image thing, and the password thing too.

Zoomer_X wrote:

-i eat snips for breakfast-
I think that it is not really Firefox, but a filter installed on the computer to make sure you are only going on sites that are safe. It most likely is because of the HTTP vs HTTPS image thing, and the password thing too.

My browser / operating system: CentOS Linux, Firefox 68.0, No Flash version detected (Don't tell me I need a update, it works better than chrome)

DawnRooney27 wrote:

LankyBox01 wrote:

jettypumpkin07 wrote:

AudreyQ2A wrote:

leahcimto wrote:

This is because some images are hosted through cubeupload, which by default used to give a http link. This is fixed now, as they give you https links now, but old images will say insecure. Attackers can’t get to you, don’t worry.

Strongly disagree. There is no way to verify you are the owner of an account on Scratch when you sign in from a new device. For example, D1s₵oRd makes you solve captcha and verify your email. Roblox makes you solve 4 minute captcha. In my opinion, The scratch login is very insecure.

Actually, if you get your password wrong 5-8 times (i don't know the exact number)

I tried it, it's actually 4 times.

To be honest, That won;t stop anyone,

..Except bots.

gosoccerboy5 wrote:

..Except bots.

I understand but you are necroposting.