Read the OP, it's way too long to put on the title

SonicFanX123_321

ScratchCatDoBem wrote:
Why

because

Lavender_lillypad

Bump

ScratchCatDoBem

I almost forgor about this topic :skull:

Last edited by ScratchCatDoBem (Oct. 2, 2022 19:25:19)

ScratchCatDoBem

*sigh* bump
why nobody is discussing about this

Last edited by ScratchCatDoBem (Jan. 19, 2023 16:12:49)

RED-001-alt

This would be TFA (2-factor authentication), right? I don't support this, because this is too much work just to sign into an account for a kid's website. Plus, what if the person doesn't have a valid email? If this was something that you could toggle (but be off b default), then that might be OK. I think this might be a dupe too.

SavetheAtlantic

RED-001-alt wrote:
I think this might be a dupe too.

You are correct: https://scratch.mit.edu/discuss/topic/291659/

ScratchCatDoBem

SavetheAtlantic wrote:
RED-001-alt wrote:
I think this might be a dupe too.
You are correct: https://scratch.mit.edu/discuss/topic/291659/

It's not 2FA, it's just a token to change your email or password because you need your password to change it (so if someone knows your password, they could change it, not very safe)
So yeah, not a dupe (i guess?)

Last edited by ScratchCatDoBem (Jan. 19, 2023 21:23:20)

ScratchCatDoBem

RED-001-alt wrote:
I don't support this, because this is too much work just to sign into an account for a kid's website.

It isn't for signing, it's for changing email/password, only
And if someone lost their email, they could use Contact Us to explain the situation, and turn this off

Last edited by ScratchCatDoBem (Jan. 19, 2023 21:12:12)

warriorcats2155

TheTrillion wrote:
ScratchCatDoBem wrote:
-iviedwall- wrote:
PenguinLover1123 wrote:
PenguinLover1123 wrote:
First password, then email. Even more protection
More!:
first password, then email to original (current, non-changed email) email saying "Here's your first stage confirmation url for username: url If you did not request this, ignore this email and contact us“, then after first email, to the changed email saying ”Here's your second stage confirmation url for username: url If you did not request this, please ignore this and contact us"
Why do you need to Contact Us? If a hacker is trying to change your password, just ignore the mail so they can't, so that makes more time for you to change your password before the hacker does something terrible.
Because then the Scratch Team will IP ban the password guesser/hacker
IP bans are useless. VPNs are easily accessible and they will easily bypass the ban.

There are some cases which a website will block VPNs by checking the IP details and comparing them to a VPN details

ajskateboarder

warriorcats2155 wrote:
There are some cases which a website will block VPNs by checking the IP details and comparing them to a VPN details

Then use a proxy! They are even easier to setup because they are usually free, and they can be configured anywhere in the world making them impossible to differentiate from a user directly accessing the site.

SavetheAtlantic

ScratchCatDoBem wrote:
SavetheAtlantic wrote:
RED-001-alt wrote:
I think this might be a dupe too.
You are correct: https://scratch.mit.edu/discuss/topic/291659/
It's not 2FA, it's just a token to change your email or password because you need your password to change it (so if someone knows your password, they could change it, not very safe)
So yeah, not a dupe (i guess?)

That's literally what 2FA is.

moigam

SavetheAtlantic wrote:
ScratchCatDoBem wrote:
SavetheAtlantic wrote:
RED-001-alt wrote:
I think this might be a dupe too.
You are correct: https://scratch.mit.edu/discuss/topic/291659/
It's not 2FA, it's just a token to change your email or password because you need your password to change it (so if someone knows your password, they could change it, not very safe)
So yeah, not a dupe (i guess?)
That's literally what 2FA is.

Yes, that could be described as 2FA.

2FA stands for two factor authentication. With this, you authenticate the program to do it with 2 factors. (Like two keys you need to put into a lock for something to open)

If I'm wrong, sorry but I think I'm correct.

Last edited by moigam (Jan. 20, 2023 08:34:09)

-greats-

9cjames1 wrote:
Yellowsheep43 wrote:
Perfect. This will add extra protection against account “hackers”; Now they need to know both your email AND its password AND your scratch password.
And that's not happening unless somebody got into your email. And even then, in pretty much all scenarios they use it for things other than to “hack” your scratch account.
It has never happend. Scratch does not have “hackers” however some people try to brute force their way into someones account. That's not hacking.

it is hacking too. hacking is a very broad term that can even be used for good.

-greats-

ScratchCatDoBem wrote:
SavetheAtlantic wrote:
RED-001-alt wrote:
I think this might be a dupe too.
You are correct: https://scratch.mit.edu/discuss/topic/291659/
It's not 2FA, it's just a token to change your email or password because you need your password to change it (so if someone knows your password, they could change it, not very safe)
So yeah, not a dupe (i guess?)

u dont even know what 2FA is lol

ScratchCatDoBem

-greats- wrote:
ScratchCatDoBem wrote:
SavetheAtlantic wrote:
RED-001-alt wrote:
I think this might be a dupe too.
You are correct: https://scratch.mit.edu/discuss/topic/291659/
It's not 2FA, it's just a token to change your email or password because you need your password to change it (so if someone knows your password, they could change it, not very safe)
So yeah, not a dupe (i guess?)

u dont even know what 2FA is lol

I once knew, but then i left the forums and forgor :skull:
but i'm sure that this isn't a dupe

softlysinging

You'd have to type your original password, but not if the person who knows your password changes it. You'd have to use a complicated password if you really want to avoid malicious hackers/spam.

SAVVYSCLUTTER

Support. This would stop hackers from locking users' accounts.

ScratchCatDoBem

bump.

ScratchCatDoBem

why is nobody saying anything

SavetheAtlantic

ScratchCatDoBem wrote:
why is nobody saying anything

The word “bump”, surprisingly, is not a genie that magically grants you responses

Discuss Scratch