I think we should add an advanced control panel in Scratch for Scratchers. It could integrate optional 2FA in it, optional account recovery options, optional extra extensions feature (with stuff like website visiting via systems monitored by the Scratch team or MIT, NFC and USB media, visitor data analytics, JS, and even HTML), as well as account controls, a lock down feature in case a hacker signs in to prevent the hacker from doing harm while requesting to change the password and recommending 2FA, and also an auto sign out feature to sign out of all devices (requiring password and 2FA if enabled)!

Two factor authentication is already being discussed here: https://scratch.mit.edu/discuss/topic/291659

C2PasswordManager wrote:

optional extra extensions feature (with stuff like website visiting via systems monitored by the Scratch team or MIT, NFC and USB media, visitor data analytics, JS, and even HTML)

Can you explain this one a bit better?

What I mean by ‘with stuff like website visiting via systems monitored by the Scratch team or MIT’ is that you can visit external websites via Scratch, but it needs to be motioned by the Scratch Team or MIT (because the Scratch Wiki states that Scratch is developed by the Lifelong Kindergarten Group at the Massachusetts Institute of Technology or MIT).

NFC is a proximity-based wireless communication standard that enables devices to communicate with each other when in close proximity (typically within a few centimeters). Unlike Wi-Fi or Bluetooth, NFC interaction is limited to short-range, one-touch connections. NFC is commonly used for Contactless payments (e.g., mobile payments), data exchange (e.g., sharing files, URLs), and even device pairing (e.g., connecting headphones or speakers)!

USB Media refers to the use of Universal Serial Bus (USB) technology to transfer data, audio, and video content between devices. USB media devices, such as flash drives, external hard drives, and card readers, connect to a computer or other device via a USB port.

What I mean by ‘visitor data analytics’ is when a project is visited, they can see data like the scratch user who saw it, the browser it was seen on, and even how long they seen it on! Of course, we need to be very cautious about that one.

And JS (or Javascript) and HTML are coding languages (I think) and would be nice in Scratch, but we would need to be most cautious of that!

If you don't mind, maybe Scratch should use a unique Fingerprint String that is like a backup to get into your account. But to change it, you will need a new account.

H__4 wrote:

If you don't mind, maybe Scratch should use a unique Fingerprint String that is like a backup to get into your account. But to change it, you will need a new account.

Can't you change the string if you forget, but requiring the password (and 2FA if enabled). There could also be a recovery media (if anyone wants to do it in their own time).

We may also be able to add optional passwordless login (a login without a password, but you may need 2FA for it to be even safe!!!).

C2PasswordManager wrote:

H__4 wrote:

If you don't mind, maybe Scratch should use a unique Fingerprint String that is like a backup to get into your account. But to change it, you will need a new account.

Can't you change the string if you forget, but requiring the password (and 2FA if enabled). There could also be a recovery media (if anyone wants to do it in their own time).

We may also be able to add optional passwordless login (a login without a password, but you may need 2FA for it to be even safe!!!).

But if a hacker got in, changed your password, changed your fingerprint string, and used an auto sign out feature (I don't know but they automatically signed me out every time I got my Scratch account hacked, and stopped me getting in, so I made a new one each time, that happened 4 times.), then you would be locked out.

Username checks out

But like really NFC, i'm going to scan my credit card to my computer to login to scratch? I'd say once there is a sign out all button and passkeys then scratch is fully secure.

Not only credit cards use NFC, but it is also in NFC compatible security keys like the Yubico NFC.

Scratch is not run by MIT, it is now owned by an independent organisation called the Scratch Foundation

iiucandyfloss wrote:

Scratch is not run by MIT, it is now owned by an independent organisation called the Scratch Foundation

Thanks for telling me!

WindowsAdmin wrote:

Username checks out

But like really NFC, i'm going to scan my credit card to my computer to login to scratch? I'd say once there is a sign out all button and passkeys then scratch is fully secure.

Your credit card should be compatible and allow login to scratch.

C2PasswordManager wrote:

What I mean by ‘with stuff like website visiting via systems monitored by the Scratch team or MIT’ is that you can visit external websites via Scratch, but it needs to be motioned by the Scratch Team.

If everyone started using this than the scratch team could not monitor everyone because there are to many people

C2PasswordManager wrote:

I think we should add an advanced control panel in Scratch for Scratchers. (with stuff like website visiting via systems monitored by the Scratch team or MIT,and USB media,

Scratch specifically says that it is a website for beginners to coding and this is to complicated
Also the websites would only be scratch projects because scratch team does not have the time or people to monitor.
USB media could contain harmful software.