Discuss Scratch

MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

The title explains it well, why is there a “not secure” icon in the discussion forums? Is Scratch unsafe? I've been wondering why for 2 months now.

Last edited by MTM828 (Sept. 27, 2020 16:57:11)


I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
-InsanityPlays-
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

Because Cubeupload now supports HTTPS but still gives you HTTP by default. Therefore, Scratch has to make an unsecure connection.

Raise awareness of the COOLEST game in history
What is better? PS5, Xbox Series X, iPhone 12 or FIFA 21?
I think you'll hate me if you click this..
Happy Halloween! MWAHAHAHAHAHAHAHAHAHAHAHAHA!!!!!
ctrl+shift+down







haha nothing here >¦ )
MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

-InsanityPlays- wrote:

Because Cubeupload now supports HTTPS but still gives you HTTP by default. Therefore, Scratch has to make an unsecure connection.
So http websites give you unsecure connections, and cubeupload gives you http by default, so that's why it says that? What if there's no signature or post with a picture from cubeupload? So Scratch IS safe right?

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
-InsanityPlays-
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

MTM828 wrote:

-InsanityPlays- wrote:

Because Cubeupload now supports HTTPS but still gives you HTTP by default. Therefore, Scratch has to make an unsecure connection.
So http websites give you unsecure connections, and cubeupload gives you http by default, so that's why it says that? What if there's no signature or post with a picture from cubeupload? So Scratch IS safe right?
Cubeupload isn't actually bad, it just shows an insecure connection. But Malwarebytes and AVG might not be happy.

Raise awareness of the COOLEST game in history
What is better? PS5, Xbox Series X, iPhone 12 or FIFA 21?
I think you'll hate me if you click this..
Happy Halloween! MWAHAHAHAHAHAHAHAHAHAHAHAHA!!!!!
ctrl+shift+down







haha nothing here >¦ )
Flowermanvista
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

MTM828 wrote:

-InsanityPlays- wrote:

Because Cubeupload now supports HTTPS but still gives you HTTP by default. Therefore, Scratch has to make an unsecure connection.
So http websites give you unsecure connections, and cubeupload gives you http by default, so that's why it says that? What if there's no signature or post with a picture from cubeupload? So Scratch IS safe right?
Yes, Scratch itself is safe. It's only the CubeUpload images that are transmitted over an insecure connection.

ST, Please Add A Warning When A Size Limit Is Exceeded

My Dumb Creations - THE BEST ANIMATION | The Windows 98 Experience (made on Windows 98) | nobody cares about Me…

Do evil kumquats keep eating your signature? Assert your dominance and eat the evil kumquats. Did you know that kumquats are only about the size of an olive?
Byron_Inc
Scratcher
500+ posts

Not secure icon in discussion forums (now showing on the wiki)

Originally, it is secure, as shown in the picture below.

Now, I had an unsecured picture in http, it is now insecure.
Don't worry, I would make them secure again by making it https.

Generation 379: The first time you see this copy and paste it on top of your sig in the scratch forums and increase generation by 1. Social experiment. I did not start this.
About me: (¤¤ :: custom reporter) (Moist :: extension reporter) ((Posts 0 [#fff000][#ffe100][#ffd200][#ffc300][#ffb400][#ffa500][#ff9600][#ff8700][#000000][#000000] 1000 :: sensing reporter) + ([34] dustbined posts :: #aa0 reporter) :: operators reporter) (500 posts! ::#ffd700 reporter) (Top 1000 posters! :: #ffd700 reporter) :: pen stack  
Follow by clicking this link and slam the blue button until you broke your screen or it is gray, whichever comes first.
Scratch on! Be moist!
By Byr- Nom nom nom…
Nay! Where's Nay? Nevermind, I brought a new army.
 good kumquats: (^^ :: motion reporter) (●● :: looks reporter) (■■ :: events reporter) (♤♡◇♧ :: control reporter) (☆☆ :: variables reporter) (▪~▪ :: list reporter) (○○ :: operators reporter) (□□ :: sound reporter) Stop kumquats! :: sensing stack


























There's really nothing here.














Get out.










Why are you still here?






















































Anyway, here's something I like. Credit to -InsanityPlays-.
MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Ah Ok. Thanks for the help.

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Then what do you call this? Is this because wiki editors can change pictures?

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
FloralAnimator
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
Probably cause the picture of the cat in the floaty was supported by a http connection.

Flowermanvista
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".

ST, Please Add A Warning When A Size Limit Is Exceeded

My Dumb Creations - THE BEST ANIMATION | The Windows 98 Experience (made on Windows 98) | nobody cares about Me…

Do evil kumquats keep eating your signature? Assert your dominance and eat the evil kumquats. Did you know that kumquats are only about the size of an olive?
FloralAnimator
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Flowermanvista wrote:

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".
Oh yeah,looks like I was wrong.

60 second rule is *:<

MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Flowermanvista wrote:

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".
Oh so it's the same reason? Good thing I have a wiki account, although I just made it yesterday so I'm new, so if I change it to https it won't affect the picture but fix the not secure sign and I won't get into any trouble?

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
pavcato
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

Flowermanvista wrote:

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".
I changed it to https but the warning won't disappear.





Male | 11 | Latino | Owner of The Help House | Basically lives in the forums


Template: https://u.cubeupload.com/Myhouse2345/Screenshot20200828at.png




Template: https://u.cubeupload.com/Myhouse2345/Screenshot20200828at.png




I said “quote me on this” and I did not get quoted.

Nobody wrote:

Don't quote me on this…




Be Dry!

Za-Chary wrote:

No kissy kiss
No stabby stab

Them's the rulez..
Flowermanvista
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

pavcato wrote:

Flowermanvista wrote:

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".
I changed it to https but the warning won't disappear.
According to the browser console it's still being loaded. Odd…

ST, Please Add A Warning When A Size Limit Is Exceeded

My Dumb Creations - THE BEST ANIMATION | The Windows 98 Experience (made on Windows 98) | nobody cares about Me…

Do evil kumquats keep eating your signature? Assert your dominance and eat the evil kumquats. Did you know that kumquats are only about the size of an olive?
MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Flowermanvista wrote:

pavcato wrote:

Flowermanvista wrote:

MTM828 wrote:

Then what do you call this? Is this because wiki editors can change pictures?
According to the browser console, it's because someone put in an image from "http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ - notice the ”http“. If you have a Wiki account you can fix this by changing the ”http“ to ”https".
I changed it to https but the warning won't disappear.
According to the browser console it's still being loaded. Odd…
Now this is getting creepy… it's probably not an attacker but something wrong with the server or something, that's at least what I think it is. And by the way I don't even know what a browser console is! :p

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?
fdreerf
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

It's your signature. The image in your signature is using HTTP.



APPLICATIONS ARE NOW OPEN'T!

I guess I'm a messenger pigeon now
Flowermanvista
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

ignore this

Last edited by Flowermanvista (Sept. 27, 2020 16:24:28)


ST, Please Add A Warning When A Size Limit Is Exceeded

My Dumb Creations - THE BEST ANIMATION | The Windows 98 Experience (made on Windows 98) | nobody cares about Me…

Do evil kumquats keep eating your signature? Assert your dominance and eat the evil kumquats. Did you know that kumquats are only about the size of an olive?
Flowermanvista
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

I found the issue. It's not on the page and it's not caused by any template. Instead, it's caused by a skin that is seemingly called “scratchwikiskin2”, which statically links to "http://images1.wikia.nocookie.net/runescape/images/1/14/Gradient-1pixel-horizontal.png“ and ”http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ to generate gradients - thus, both a horizontal and vertical gradient effect would cause the ”not secure“ warning. If a high-privileged person on the Wiki was able to edit this skin (I do not have a Wiki account and I know little about how these technical intricacies work), they can easily fix the issue by changing the ”http“ to ”https" where they are referenced.

I discovered this with a few minutes of digging in the Inspect Element dev tools. Here is the CSS file generated by the offending skin, in case it may be of any help:

https://en.scratch-wiki.info/w/load.php?debug=false&lang=en&modules=site.styles&only=styles&skin=scratchwikiskin2

ST, Please Add A Warning When A Size Limit Is Exceeded

My Dumb Creations - THE BEST ANIMATION | The Windows 98 Experience (made on Windows 98) | nobody cares about Me…

Do evil kumquats keep eating your signature? Assert your dominance and eat the evil kumquats. Did you know that kumquats are only about the size of an olive?
fdreerf
Scratcher
1000+ posts

Not secure icon in discussion forums (now showing on the wiki)

Why would the gradients be from Runescape?



APPLICATIONS ARE NOW OPEN'T!

I guess I'm a messenger pigeon now
MTM828
Scratcher
100+ posts

Not secure icon in discussion forums (now showing on the wiki)

Flowermanvista wrote:

I found the issue. It's not on the page and it's not caused by any template. Instead, it's caused by a skin that is seemingly called “scratchwikiskin2”, which statically links to "http://images1.wikia.nocookie.net/runescape/images/1/14/Gradient-1pixel-horizontal.png“ and ”http://images3.wikia.nocookie.net/runescape/images/b/b4/Gradient-1pixel-vertical.png“ to generate gradients - thus, both a horizontal and vertical gradient effect would cause the ”not secure“ warning. If a high-privileged person on the Wiki was able to edit this skin (I do not have a Wiki account and I know little about how these technical intricacies work), they can easily fix the issue by changing the ”http“ to ”https" where they are referenced.

I discovered this with a few minutes of digging in the Inspect Element dev tools. Here is the CSS file generated by the offending skin, in case it may be of any help:

https://en.scratch-wiki.info/w/load.php?debug=false&lang=en&modules=site.styles&only=styles&skin=scratchwikiskin2

fdreerf wrote:

Why would the gradients be from Runescape?
Uuugh.. so what do I do? I'm a new wikian so yeah I can't do that thing, bt I think Bigpuppy is so you can tell him. And I didn't understand a word you just said xD I'm bad at that kind of stuff. :p

I hope this post helped you solve your issue!
And if it didn't or you asked for something else too, comment on my profile, I must of forgotten.
Stats:
241 Posts
42 Followers
Intermediate coder
Highlight part of my signature then press shift while pressing down to see the rest of my signature

#Swag

If someone from a shop tells you you forgot the codeword, say:
Does this look like a text font which cares?

Powered by DjangoBB

Standard | Mobile