Whats http://device-manager.scratch.mit.edu?

Ciyob86

Got any clue?

Its a registered subdomain but its dead and isn't archived.

Last edited by Ciyob86 (Sept. 12, 2021 23:18:30)

han614698

Why does it say

#http://

instead of

#https://

Credit to -gge for the icons in my signature | I condensed all this code into five lines using [p] tags, idk why

ScolderCreations

han614698 wrote:
Why does it say
#http://
instead of
#https://

maybe it isn't secure?

han614698

ScolderCreations wrote:
han614698 wrote:
Why does it say
#http://
instead of
#https://
maybe it isn't secure?

It doesn’t actually run anything though so I’m not super worried.

How did you find this?

Also, this gives the same error message as
fun.scratch.mit.edu
and
keyboard-spam-fjsosbwtqoshxmcb.scratch.mit.edu

So, I don’t even think it exists.
My browser / operating system: MacOS Macintosh X 10.15.6, Safari 14.1.2, No Flash version detected

Credit to -gge for the icons in my signature | I condensed all this code into five lines using [p] tags, idk why

gdpr5b78aa4361827f5c2a08d700

www.device-manager.scratch.mit.edu doesnt exist, but device-manager.scratch.mit.edu does.

Ciyob86

han614698 wrote:
Why does it say
#http://
instead of
#https://

https://spyse.com/target/domain/device-manager.scratch.mit.edu

Ciyob86

potatophant wrote:
www.device-manager.scratch.mit.edu doesnt exist, but device-manager.scratch.mit.edu does.

http://www.device-manager.scratch.mit.edu probably redirected to http://device-manager.scratch.mit.edu.

Last edited by Ciyob86 (Sept. 13, 2021 00:27:15)

Mrcomputer1

device-manager.scratch.mit.edu is used by Scratch Link. It appears dead because it points to 127.0.0.1, aka localhost. It also doesn't use port 80 or 443, so it will still appear dead even if it is accessed while Scratch Link is installed and running.

More information:
https://github.com/LLK/scratch-link/issues/137
https://github.com/LLK/scratch-vm/blob/f405e59d01a8f9c0e3e986fb5276667a8a3c7d40/src/util/scratch-link-websocket.js#L28

My Profile / My User Page / My Talk Page
——————–
Progress bar to 1000+ Posts - Image might not be up to date

——————–
My browser / operating system: Windows NT 10.0 (Windows 11 - 22H2), Firefox 122.0b4
——————–
My ScratchX Extensions——–If you like this post, give me an internet!——–Sharp Scratch Mod

Chiroyce

(note to self - read all other posts on topic before posting on it and understand that another person already told about the localhost IP address)

Last edited by Chiroyce (Sept. 13, 2021 08:20:40)

April Fools' topics:

— New Buildings in Scratch's headquarters
— Give every Scratcher an M1 MacBook Air
— Scratch should let users edit other Scratchers' projects
— Make a statue for Jeffalo
— Scratch Tech Tips™
— Make a Chiroyce statue emoji

<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence

gosoccerboy5

I get large text saying “It works!”

Jeffalo

it's pointing at localhost, this lets the scratch editor talk to scratch link which talks to scratch compatible devices.

otherwise the browser will raise security concerns, because websites shouldn't be able to talk to other “websites” unless they are permitted by CORS. the device-manager subdomain bypasses this.

han614698 wrote:
Why does it say
#http://
instead of
#https://

https is the secure form of http, because it's only talking to localhost i dont think it needs to use secure connection (citation needed, i think i once heard something about ssl certs baked into scratch link im not sure)

my website: jeffalo.net | ocular: scratch forum search

Chiroyce

Jeffalo wrote:
otherwise the browser will raise security concerns

firefox already did lol

April Fools' topics:

— New Buildings in Scratch's headquarters
— Give every Scratcher an M1 MacBook Air
— Scratch should let users edit other Scratchers' projects
— Make a statue for Jeffalo
— Scratch Tech Tips™
— Make a Chiroyce statue emoji

<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence

Jeffalo

Chiroyce wrote:
Jeffalo wrote:
otherwise the browser will raise security concerns
firefox already did lol

that's unrelated, that's a http warning, but i am talking about cors related errors. essentially, jeffalo.net cannot make requests to google.com, unless google.com allows it.

the same goes for scratch.mit.edu making requests to localhost, which is probably part of the reason they made their own domain. this also allows them to issue SSL certs for localhost.

my website: jeffalo.net | ocular: scratch forum search

Chiroyce

Jeffalo wrote:
the same goes for scratch.mit.edu making requests to localhost, which is probably part of the reason they made their own domain. this also allows them to issue SSL certs for localhost.

ohhhh that makes sense, in order to use HTTPS and not have any CORS issues, it has it's own domain, smart!

April Fools' topics:

— New Buildings in Scratch's headquarters
— Give every Scratcher an M1 MacBook Air
— Scratch should let users edit other Scratchers' projects
— Make a statue for Jeffalo
— Scratch Tech Tips™
— Make a Chiroyce statue emoji

<img src=“x” onerror=“alert('XSS vulnerability discovered')”>

this is a test sentence

gdpr5b78aa4361827f5c2a08d700

Ciyob86 wrote:
potatophant wrote:
www.device-manager.scratch.mit.edu doesnt exist, but device-manager.scratch.mit.edu does.
http://www.device-manager.scratch.mit.edu probably redirected to http://device-manager.scratch.mit.edu.

why would it? people dont make www redirects for every record on their site

Ciyob86

potatophant wrote:
Ciyob86 wrote:
potatophant wrote:
www.device-manager.scratch.mit.edu doesnt exist, but device-manager.scratch.mit.edu does.
http://www.device-manager.scratch.mit.edu probably redirected to http://device-manager.scratch.mit.edu.
why would it? people dont make www redirects for every record on their site

It’s registered for some reason

Last edited by Ciyob86 (Sept. 13, 2021 17:58:19)

Jeffalo

Ciyob86 wrote:
potatophant wrote:
Ciyob86 wrote:
potatophant wrote:
www.device-manager.scratch.mit.edu doesnt exist, but device-manager.scratch.mit.edu does.
http://www.device-manager.scratch.mit.edu probably redirected to http://device-manager.scratch.mit.edu.
why would it? people dont make www redirects for every record on their site
It’s registered for some reason

what do you mean its registered? i get an NXDOMAIN when i try to visit it in a browser.

you don't really register subdomains the same way you have to register normal domain names.

my website: jeffalo.net | ocular: scratch forum search

Ciyob86

Jeffalo wrote:
-snip-

By registered I mean I found it using a crawler.

gdpr5b78aa4361827f5c2a08d700

Ciyob86 wrote:
Jeffalo wrote:
-snip-
By registered I mean I found it using a crawler.

finding a subdomain using a crawler and creating a dns record for it are completely unrelated

Discuss Scratch