secret q and a required to delete projects?

doqq

so…lets say I got hacked and the mEAN hacker deleted all my projects!! the mEAN hacker found it v easy to delete my projects. because to do so, all the hacker had to do was put in my password, which is weak protection, since if the hacker where able to guess my password, (s)he would easily be able to delete my projects.
so that's where my suggestion comes in!
what if there where a secret question and answer that you had to type in when you joined Scratch? you could write the question and answer yourself (example: question - What is my guinea pig's name? answer - William Afton (yes that's his name hehe) and you would have to type the question and answer to delete your projects! so even if a hacker guessed your password, (s)he would not be able to delete your projects unless they also knew your secret question and answer. :')

powercon5

Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Last edited by powercon5 (Aug. 2, 2017 23:51:17)

doqq

powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it

powercon5

doqq wrote:
powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it

How are they going to guess it? if it's a good password that's long enough it would be almost impossible. It's much much much easier to guess the answer to a question.

doqq

powercon5 wrote:
doqq wrote:
powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it
How are they going to guess it? if it's a good password that's long enough it would be almost impossible. It's much much much easier to guess the answer to a question.

Most people do not have v. good passwords. I know a friend whose password is her irl name! The q and a would be an extra level of security for those peeps who don't have good passwords

LionHeart70

Neutral support, but..
It's not that easy for someone to hack you. You should choose a secure password.

powercon5

doqq wrote:
powercon5 wrote:
doqq wrote:
powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it
How are they going to guess it? if it's a good password that's long enough it would be almost impossible. It's much much much easier to guess the answer to a question.

Most people do not have v. good passwords. I know a friend whose password is her irl name! The q and a would be an extra level of security for those peeps who don't have good passwords

Surely that's the users fault? Instead Scratch should encourage users to have better passwords? Still, if you can guess a password you can guess the answer. A password is better than a question.

doqq

powercon5 wrote:
doqq wrote:
powercon5 wrote:
doqq wrote:
powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it
How are they going to guess it? if it's a good password that's long enough it would be almost impossible. It's much much much easier to guess the answer to a question.

Most people do not have v. good passwords. I know a friend whose password is her irl name! The q and a would be an extra level of security for those peeps who don't have good passwords
Surely that's the users fault? Instead Scratch should encourage users to have better passwords? Still, if you can guess a password you can guess the answer. A password is better than a question.

I guess you're right

I didn't think of that.

-raspberry_

I support. It is not impossible to guess someones password.

VideoGamerCanInvent

Semi-Support. If you wanna delete all of your projects that's a lot of work, unless after you answer it you don't have to again for a half hour. Anyways though, it should be a security option in Account Settings.

Thelnvoker

LionHeart70 wrote:
Neutral support, but..
It's not that easy for someone to hack you. You should choose a secure password.

cul8er

No support. You should be using a password that can't be guessed (no words or number patterns) and is preferably not susceptible to brute force attacks (long with letters in different cases, numbers and symbols such as @$%&).

FancyFoxy

No support. If a hacker's gone far enough to be able to see the Delete button, something's wrong.

Scratchifier

while I don't think a security question would do the trick, it would be a nice option to be able to set up two-factor authentication for sensitive account functions

WaffleChurro

Why would someone hack a Scratch account?

WaffleChurro

doqq wrote:
powercon5 wrote:
doqq wrote:
powercon5 wrote:
Why not just you an answer to those types of questions as your password? They only use the question if you forget yours as they are not as secure as a password. Make sure to pick a good password.

Because even if I do have a good password (which I do btw) someone might still b able to guess it
How are they going to guess it? if it's a good password that's long enough it would be almost impossible. It's much much much easier to guess the answer to a question.

Most people do not have v. good passwords. I know a friend whose password is her irl name! The q and a would be an extra level of security for those peeps who don't have good passwords

This is an example on how people get into accounts. You shouldn't reveal your passwords to anybody if you care so much about the content of your account.

Galleigo

doqq wrote:
so…lets say I got hacked and the mEAN hacker deleted all my projects!! the mEAN hacker found it v easy to delete my projects. because to do so, all the hacker had to do was put in my password, which is weak protection, since if the hacker where able to guess my password, (s)he would easily be able to delete my projects.
so that's where my suggestion comes in!
what if there where a secret question and answer that you had to type in when you joined Scratch? you could write the question and answer yourself (example: question - What is my guinea pig's name? answer - William Afton (yes that's his name hehe) and you would have to type the question and answer to delete your projects! so even if a hacker guessed your password, (s)he would not be able to delete your projects unless they also knew your secret question and answer. :')

not required

stop having horrible passwords

get some help.

(seriously, if a hacker can GUESS your password without even using any bots, your password must be “Password” or something, in which case you would deserve it.)

Discuss Scratch