This will greatly prevent hacks on Scratch

NanoPIex

So, if the hacker fails 3 times at guessing your password, Scratch will send a full screen message: Scratch has locked you out for guessing passwords, try again in 1 hour.
But only you know your email. So Scratch will send you an email where you can continue guessing as many times as needed.

Maximouse

People who log in to other people's accounts usually know the password anyway.

NanoPIex

Maximouse wrote:
People who log in to other people's accounts usually know the password anyway.

Well, my estimate of people who try to go into @griffpatch account per year is 467. 0.1 peoples have succeeded.

Maximouse

NanoPIex wrote:
Maximouse wrote:
People who log in to other people's accounts usually know the password anyway.
Well, my estimate of people who try to go into @griffpatch account per year is 467. 0.1 peoples have succeeded.

So why would we need something to prevent hacking if nobody has succeeded at it?

sealifefriend

or instead of locking u out for an hour.. u should just get a notification or something that tells u to change ur password.

oofer90

Imagine trying to hack on a coding website….

JPOWERPUFFGIRLS

NanoPIex wrote:
Maximouse wrote:
People who log in to other people's accounts usually know the password anyway.
Well, my estimate of people who try to go into @griffpatch account per year is 467. 0.1 peoples have succeeded.

If I were to look at society's current behaviour, I believe I could assume someone's tried to get into griffpatch's account, but I doubt they've ever suceeded

I'm pretty sure when people try to get into other people's account, they either think the user put a super easy password like 12345 or ‘password’, or they're just doing it for fun, I doubt this is going to reduce the amount of ‘hacking’ on the site

sealifefriend wrote:
or instead of locking u out for an hour.. u should just get a notification or something that tells u to change ur password.

Change the password that the ‘hacker’ doesn't know?

Last edited by JPOWERPUFFGIRLS (Dec. 4, 2020 14:06:56)

gosoccerboy5

Scratch seems to be already pretty secure, and provided you don't have a numbskull password like “12345678” you'll do good. Recaptcha performs well against people and robots who attempt more than like 4 times.

oofer90 wrote:
Imagine trying to hack on a coding website….

Hilarious.

lHatr

There’s no need for this. Scratch isn’t a banking website, there’s not much information that could be at risk that hackers want to grab.

Simply have a secure password. Then, you have a perfectly secure account!

gosoccerboy5

lHatr wrote:
there’s not much information stuff that could be at risk that hackers want to grab.

griffpatch has entered the chat

But, lHatr's right. Keeping a safe and secure password is always a good idea. Just ask fdreerf, I saw a post of his that said the one-step process to securing your account was to not use a stupid password.

Last edited by gosoccerboy5 (Dec. 4, 2020 14:18:50)

-Wildstorm-

There's always a chance that someone will guess your password. I think the suggestion is a great one.

JPOWERPUFFGIRLS

-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.

Do we really need something to prevent something with a very, very, veryy small probability

27lucasl

I completely agree with this suggestion.

It makes a lot of sense, but maybe instead of 3 tries, it could have 5.

I have had multiple times when my password wasn't working for some reason, and it could be helpful to increase the the amount of tries.

Great suggestion!

-Wildstorm-

JPOWERPUFFGIRLS wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Do we really need something to prevent something with a very, very, veryy small probability

It's a good idea, especially since there's most probably a lot of 7-8 year olds on this site who don't have very secure passwords.

Last edited by -Wildstorm- (Dec. 4, 2020 17:23:42)

gosoccerboy5

-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.

Za-Chary wrote:
No one really gets hacked on Scratch, from what I hear. The only times someone gets “hacked” is either they told someone their password, or they forgot to log out of their account before leaving their computer.

src

Za-Chary

I think the other issue with this suggestion is that someone could just try 3 times to log into my account and purposely fail to enter the correct password just to be annoying. If that happened to me, then I would have to go into my email to log onto Scratch whenever I wanted to log in.

-Wildstorm-

Za-Chary wrote:
I think the other issue with this suggestion is that someone could just try 3 times to log into my account and purposely fail to enter the correct password just to be annoying. If that happened to me, then I would have to go into my email to log onto Scratch whenever I wanted to log in.

Maybe it could just block the device for an hour, not the user?

portalpower

hacks barely ever happen, people just use it as an excuse for bad behavior

NanoPIex

Maximouse wrote:
NanoPIex wrote:
Maximouse wrote:
People who log in to other people's accounts usually know the password anyway.
Well, my estimate of people who try to go into @griffpatch account per year is 467. 0.1 peoples have succeeded.
So why would we need something to prevent hacking if nobody has succeeded at it?

True.

sealifefriend wrote:
or instead of locking u out for an hour.. u should just get a notification or something that tells u to change ur password.

True.

oofer90 wrote:
Imagine trying to hack on a coding website….

Ikr.

JPOWERPUFFGIRLS wrote:
NanoPIex wrote:
Maximouse wrote:
People who log in to other people's accounts usually know the password anyway.
Well, my estimate of people who try to go into @griffpatch account per year is 467. 0.1 peoples have succeeded.
If I were to look at society's current behaviour, I believe I could assume someone's tried to get into griffpatch's account, but I doubt they've ever suceeded

I'm pretty sure when people try to get into other people's account, they either think the user put a super easy password like 12345 or ‘password’, or they're just doing it for fun, I doubt this is going to reduce the amount of ‘hacking’ on the site
sealifefriend wrote:
or instead of locking u out for an hour.. u should just get a notification or something that tells u to change ur password.
Change the password that the ‘hacker’ doesn't know?

Oh, yeah.

lHatr wrote:
There’s no need for this. Scratch isn’t a banking website, there’s not much information that could be at risk that hackers want to grab.

Simply have a secure password. Then, you have a perfectly secure account!

If you`re super popular…

-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.

Thanks so much!

JPOWERPUFFGIRLS wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Do we really need something to prevent something with a very, very, veryy small probability

If you`re super popular…

27lucasl wrote:
I completely agree with this suggestion.

It makes a lot of sense, but maybe instead of 3 tries, it could have 5.

I have had multiple times when my password wasn't working for some reason, and it could be helpful to increase the the amount of tries.

Great suggestion!

Thanks! 5 it is!

-Wildstorm- wrote:
JPOWERPUFFGIRLS wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Do we really need something to prevent something with a very, very, veryy small probability

It's a good idea, especially since there's most probably a lot of 7-8 year olds on this site who don't have very secure passwords.

XD

gosoccerboy5 wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Za-Chary wrote:
No one really gets hacked on Scratch, from what I hear. The only times someone gets “hacked” is either they told someone their password, or they forgot to log out of their account before leaving their computer.
src

Oh.

-Wildstorm- wrote:
Za-Chary wrote:
I think the other issue with this suggestion is that someone could just try 3 times to log into my account and purposely fail to enter the correct password just to be annoying. If that happened to me, then I would have to go into my email to log onto Scratch whenever I wanted to log in.
Maybe it could just block the device for an hour, not the user?

Oh, true.

JPOWERPUFFGIRLS

NanoPIex wrote:
JPOWERPUFFGIRLS wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Do we really need something to prevent something with a very, very, veryy small probability
If you`re super popular…

Not everyone is sper popular, plus that doesn't change the very tiny possibility that someone would guess your password out of the infinite possibilities (well that's if passwords don't have character limits)
Popularity changes nothing

-Wildstorm- wrote:
JPOWERPUFFGIRLS wrote:
-Wildstorm- wrote:
There's always a chance that someone will guess your password. I think the suggestion is a great one.
Do we really need something to prevent something with a very, very, veryy small probability

It's a good idea, especially since there's most probably a lot of 7-8 year olds on this site who don't have very secure passwords.

Not all 7-8 year olds are immature
If someone's child is so immature that they can't make a secure password for themselves, I think there parents would know that and do the sign-in process themselves
Still a very small probability

Discuss Scratch