ScolderCreations wrote:

I'm pretty sure that isn't true. If it was, someone would've pointed it out other than Tim. If you don't trust it, you can try turning off your Internet after it has loaded, which will prevent it from doing that even though it doesn't do that at all.

Manybook123 wrote:

ScolderCreations wrote:

I'm pretty sure that isn't true. If it was, someone would've pointed it out other than Tim. If you don't trust it, you can try turning off your Internet after it has loaded, which will prevent it from doing that even though it doesn't do that at all.

But do you think someone would put something on their profile for literally NO REASON?

ScolderCreations wrote:

Manybook123 wrote:

ScolderCreations wrote:

I'm pretty sure that isn't true. If it was, someone would've pointed it out other than Tim. If you don't trust it, you can try turning off your Internet after it has loaded, which will prevent it from doing that even though it doesn't do that at all.

But do you think someone would put something on their profile for literally NO REASON?

Either he misunderstood something, you misunderstood something, or it really is for no reason. I would like to see a citation here, one that proves Turbowarp this automatically.

Manybook123 wrote:

well I saw it on his profile and it wuz not meh

Manybook123 wrote:

well I saw it on his profile and it wuz not meh

han614698 wrote:

Manybook123 wrote:

well I saw it on his profile and it wuz not meh

If someone else put it in his profile comments, that doesn't mean it is endorsed.

Manybook123 wrote:

At one point TimMcCool wrote on his profile that on video sensing projects, TurboWarp uploads the images to cloud. Is this true? If it is, I’m gonna stop using that…

Manybook123 wrote:

At one point TimMcCool wrote on his profile that on video sensing projects, TurboWarp uploads the images to cloud. Is this true? If it is, I’m gonna stop using that…

GarboMuffin wrote:

Manybook123 wrote:

At one point TimMcCool wrote on his profile that on video sensing projects, TurboWarp uploads the images to cloud. Is this true? If it is, I’m gonna stop using that…

That isn't true and that's not what TimMcCool wrote. Their exact words were “ ⚠️ Do NOT allow TurboWarp to access your camera. If you do, the project can scan your camera picture and then save it using cloud variables. Scammers are tricking people into face reveals by doing this.”

Supposedly some people were using video sensing, touching color, and cloud variables to do naughty things. The issue has been resolved by preventing unshared projects and embeds from detecting the color of the video sensing extension which I believe makes a TurboWarp link about as safe as a Scratch link regarding this particular issue. The exact protective measures may change over time.

Regardless of the website, if you don't want a website to be able to get images from your webcam, you can simply deny the permission when your browser asks.

ZZC12345 wrote:

I feel sad when people post topics like this because someone worked really hard to bring you a useful website, then people have misunderstandings and the website gets rejected, like this topic, where someone who didn't research the project in question rejected it.

Maximouse wrote:

ZZC12345 wrote:

I feel sad when people post topics like this because someone worked really hard to bring you a useful website, then people have misunderstandings and the website gets rejected, like this topic, where someone who didn't research the project in question rejected it.

I don't think the people in that topic were completely wrong. Giving your Scratch password to any website or service other than Scratch, even if you know they don't use it for malicious purposes, is not safe. A mobile app in particular should show a webview with the Scratch login form so that the password is only sent to Scratch.

Maximouse wrote:

Giving your Scratch password to any website or service other than Scratch, even if you know they don't use it for malicious purposes, is not safe.

DifferentDance8 wrote:

Why is that so? Chances are that the website is using the https protocol, as opposed to http. And even if that wasn't the case, then for marketing reasons, https://example.com will gain more visitors than http://example.com (of course, now that browsers are starting to implement a system that upgrades to https for every site that supports it, websites using http instead of https are far less common)

CST1229 wrote:

https does not mean the website is safe, it means that the connections are encrypted so no one else can look at them. It does not mean that the server cannot just send entered login info to somewhere else.

Maximouse wrote:

Giving your Scratch password to any website or service other than Scratch, even if you know they don't use it for malicious purposes, is not safe.

DifferentDance8 wrote:

Maximouse wrote:

Giving your Scratch password to any website or service other than Scratch, even if you know they don't use it for malicious purposes, is not safe.

Why is that so? Chances are that the website is using the https protocol, as opposed to http. And even if that wasn't the case, then for marketing reasons, https://example.com will gain more visitors than http://example.com (of course, now that browsers are starting to implement a system that upgrades to https for every site that supports it, websites using http instead of https are far less common)

Maximouse wrote:

Even if it uses HTTPS, it's likely not as secure as Scratch.