Discuss Scratch

FishySquid
Scratcher
100+ posts

unknown scratch pages

ninjaMAR wrote:

Maximouse wrote:

(#887)

W1THRD wrote:

blubby4 wrote:

I just changed the “permissions” cookie so that admin=true, then blocked the request to scratch.mit.edu/session/ so it wouldn't get reset

What tool/software did you use?
This can be done in the browser's developer tools.
I've tried to reproduce this, but nothing happens. Admin=true never gets reset back to false for me.
well, as https://scratch.mit.edu/scratch_admin/tickets says, the page is VPN protected. We do not have the MIT/Scratch team VPN, so we won't be able to get the scratch_admin pages or admin=true permissions.
DifferentDance8
Scratcher
1000+ posts

unknown scratch pages

FishySquid wrote:

ninjaMAR wrote:

Maximouse wrote:

(#887)

W1THRD wrote:

blubby4 wrote:

I just changed the “permissions” cookie so that admin=true, then blocked the request to scratch.mit.edu/session/ so it wouldn't get reset

What tool/software did you use?
This can be done in the browser's developer tools.
I've tried to reproduce this, but nothing happens. Admin=true never gets reset back to false for me.
well, as https://scratch.mit.edu/scratch_admin/tickets says, the page is VPN protected. We do not have the MIT/Scratch team VPN, so we won't be able to get the scratch_admin pages or admin=true permissions.
I tried to “fake” it by setting admin=true manually and blocking scratch.mit.edu/sessions requests which works well to get the admin panel to pop up but it doesn't work for any /scratch_admin/ pages
FishySquid
Scratcher
100+ posts

unknown scratch pages

DifferentDance8 wrote:

FishySquid wrote:

ninjaMAR wrote:

Maximouse wrote:

(#887)

W1THRD wrote:

blubby4 wrote:

I just changed the “permissions” cookie so that admin=true, then blocked the request to scratch.mit.edu/session/ so it wouldn't get reset

What tool/software did you use?
This can be done in the browser's developer tools.
I've tried to reproduce this, but nothing happens. Admin=true never gets reset back to false for me.
well, as https://scratch.mit.edu/scratch_admin/tickets says, the page is VPN protected. We do not have the MIT/Scratch team VPN, so we won't be able to get the scratch_admin pages or admin=true permissions.
I tried to “fake” it by setting admin=true manually and blocking scratch.mit.edu/sessions requests which works well to get the admin panel to pop up but it doesn't work for any /scratch_admin/ pages
Does the panel work?
DifferentDance8
Scratcher
1000+ posts

unknown scratch pages

FishySquid wrote:

DifferentDance8 wrote:

FishySquid wrote:

ninjaMAR wrote:

Maximouse wrote:

(#887)

W1THRD wrote:

blubby4 wrote:

I just changed the “permissions” cookie so that admin=true, then blocked the request to scratch.mit.edu/session/ so it wouldn't get reset

What tool/software did you use?
This can be done in the browser's developer tools.
I've tried to reproduce this, but nothing happens. Admin=true never gets reset back to false for me.
well, as https://scratch.mit.edu/scratch_admin/tickets says, the page is VPN protected. We do not have the MIT/Scratch team VPN, so we won't be able to get the scratch_admin pages or admin=true permissions.
I tried to “fake” it by setting admin=true manually and blocking scratch.mit.edu/sessions requests which works well to get the admin panel to pop up but it doesn't work for any /scratch_admin/ pages
Does the panel work?
The panel appears but no it doesn't work in that none of the buttons do anything.
Redstone1080
Scratcher
1000+ posts

unknown scratch pages

2016s4m29
Scratcher
1000+ posts

unknown scratch pages

Redstone1080 wrote:

Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley
What Is This?
BigNate469
Scratcher
1000+ posts

unknown scratch pages

2016s4m29 wrote:

Redstone1080 wrote:

Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley
What Is This?
I'm guessing something related to the VPN that ST members are required to use, considering

other domains owned by the ST that used to redirect to the main page wrote:

Error 403 Hissssssss! Markley VPN Only.

Last edited by BigNate469 (Sept. 8, 2024 16:30:00)

2016s4m29
Scratcher
1000+ posts

unknown scratch pages

BigNate469 wrote:

2016s4m29 wrote:

Redstone1080 wrote:

Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley
What Is This?
I'm guessing something related to the VPN that ST members are required to use, considering
Is It A Mod Panel Or Something?
BigNate469
Scratcher
1000+ posts

unknown scratch pages

2016s4m29 wrote:

BigNate469 wrote:

2016s4m29 wrote:

Redstone1080 wrote:

Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley
What Is This?
I'm guessing something related to the VPN that ST members are required to use, considering
Is It A Mod Panel Or Something?
A VPN is software used to hide your IP, usually by sending your request through several different servers (and making it appear as if those servers sent the request themselves).

All ST members are required to use one, specifically Markley, which the devs seem to be going to lengths to keep what it really is and how it works secret. One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
ChameleonGamerYT
Scratcher
500+ posts

unknown scratch pages

BigNate469 wrote:

(#898)
One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
I wonder why it hisses at you for not using Markley
BigNate469
Scratcher
1000+ posts

unknown scratch pages

ChameleonGamerYT wrote:

BigNate469 wrote:

(#898)
One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
I wonder why it hisses at you for not using Markley
That would be a question for @codubee*.
scratcherman507
Scratcher
78 posts

unknown scratch pages

Will you plzzZzzzzzzzzzzzzzzzzzzzzzzzzzzzz add this one I found its scratch.mit.edu/news
scratcherman507
Scratcher
78 posts

unknown scratch pages

You can see the admin panel but only a bit but it doesn't work but I'm not telling anyone the link
Jeffalo
Scratcher
1000+ posts

unknown scratch pages

BigNate469 wrote:

ChameleonGamerYT wrote:

BigNate469 wrote:

(#898)
One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
I wonder why it hisses at you for not using Markley
That would be a question for @codubee*.
scratch.pizza is used for something for the scratch team only. to help ensure the access is locked down, it requires the VPN which acts as gateway to only let in authorized people
BigNate469
Scratcher
1000+ posts

unknown scratch pages

Jeffalo wrote:

BigNate469 wrote:

ChameleonGamerYT wrote:

BigNate469 wrote:

(#898)
One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
I wonder why it hisses at you for not using Markley
That would be a question for @codubee*.
scratch.pizza is used for something for the scratch team only. to help ensure the access is locked down, it requires the VPN which acts as gateway to only let in authorized people
Yeah but before scratch.org was changed to what it is now, for non-st people it would just redirect to the front page.

This behavior is also present in other domains that used to redirect to the front page, such as scratch.love.
W1THRD
Scratcher
71 posts

unknown scratch pages

Redstone1080 wrote:

AGScratcherBest-2 wrote:

Vpn required page: https://scratch.mit.edu/vpn_required/
Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley

I already found that one.

scratcherman507 wrote:

Will you plzzZzzzzzzzzzzzzzzzzzzzzzzzzzzzz add this one I found its scratch.mit.edu/news
Why do people keep on talking about this one
8to16
Scratcher
1000+ posts

unknown scratch pages

https://scratch.mit.edu/fly
It redirects to the make it fly tutorial, and is linked on the make it fly studio.
RobotChickens
Scratcher
500+ posts

unknown scratch pages

BigNate469 wrote:

(#897)

2016s4m29 wrote:

BigNate469 wrote:

2016s4m29 wrote:

Redstone1080 wrote:

Technically not on Scratch, but: https://scratchfoundation.atlassian.net/wiki/spaces/IBE/pages/46465303/VPN+to+Markley
What Is This?
I'm guessing something related to the VPN that ST members are required to use, considering
Is It A Mod Panel Or Something?
A VPN is software used to hide your IP, usually by sending your request through several different servers (and making it appear as if those servers sent the request themselves).

All ST members are required to use one, specifically Markley, which the devs seem to be going to lengths to keep what it really is and how it works secret. One of the only reasons that the community knows that it exists at all is scratch.mit.edu/vpn_required , and sites like scratch.pizza that are owned by the ST and used to redirect to the main page, but now say that Markley VPN is required (with some hissing).
VPNs can be used to hide IP addresses, but for a use-case like this, a VPN can be used to “remote in” to another more secure network. What I think is happening is that the ST has locked stuff down so that only one network can access the admin tools. This is most likely the Scratch headquarters network. That means that Scratch moderators can't do anything moderation-related unless they're 1: Using a computer AT headquarters on the secure network. OR 2: Using a personal computer at home to “remote in” using a connection to a VPN server that's inside the HQ secure network. This kind of model isn't uncommon and businesses use it all the time for employees working from home!
(I learned all about this in my computer nerd certification last year)

Edit: If this post is removed, so be it. But let its censorship be a testament to the truth.

Last edited by RobotChickens (Sept. 17, 2024 22:49:56)

BigNate469
Scratcher
1000+ posts

unknown scratch pages

RobotChickens wrote:

VPNs can be used to hide IP addresses, but for a use-case like this, a VPN can be used to “remote in” to another more secure network. What I think is happening is that the ST has locked stuff down so that only one network can access the admin tools. This is most likely the Scratch headquarters network. That means that Scratch moderators can't do anything moderation-related unless they're 1: Using a computer AT headquarters on the secure network. OR 2: Using a personal computer at home to “remote in” using a connection to a VPN server that's inside the HQ secure network. This kind of model isn't uncommon and businesses use it all the time for employees working from home!
(I learned all about this in my computer nerd certification last year)

Edit: If this post is removed, so be it. But let its censorship be a testament to the truth.
Yeah, I figured. The side effect is that it also does hide ST members IPs (assuming that they're using their ST accounts and not ordinary Scratcher alts), which would go a long way to hide their actual location- and therefore anyone who might be a security threat against them.

Of course that assumes someone gets into Scratch's system and gets their IP addresses, but that's not impossible.

of course none of that would matter back in the 1.x days when your profile page showed not only the country you were in, but also your region and town/city, assuming you didn't live in a city with a population of over about a million

Last edited by BigNate469 (Sept. 18, 2024 00:12:05)

BigNate469
Scratcher
1000+ posts

unknown scratch pages

cdn.assets.scratch.mit.edu - found it by accident, the Wayback Machine confirms its existence.

Powered by DjangoBB