Preventing hacking by Edge Secure Network users

SAVVYSCLUTTER

I block IPs that try to hack my website or repeatedly submit spam in my survey. Microsoft recently added a VPN to Edge that runs on all HTTP sites by default.

As I don't use Edge, I'm unsure if Secure Network always uses the same IP for a user. If it doesn't, is there a solution that doesn't use JS or SSL?

Last edited by SAVVYSCLUTTER (May 23, 2023 18:44:16)

I deleted my account on 9 June 2023. My best projects are still on Scratch. Visit my website for my latest work.

medians

oh god not again, I know what’s going to happen next..

Last edited by medians (May 23, 2023 11:07:33)

hi875230163394: You're similar to valve in that you both hate a certain number…
Medians bamboozled by 3.0 (both projects back up): Original and https://scratch.mit.edu/projects/878470775/
Scratch 0.x, 1.x, 2.x, 3.x and LogoBlocks Archives
medians: Oh god not this utc - 12 thing again..
Fun_Cupcake_i81: What, were you expecting not to see the utc - 12 thing again? THE UTC - 12 THIGN ALWAYS RETURNS. ALWAYS.
medians: I knew it would happen. I was the one who started it last year.
Fun_Cupcake_i81: Well then if you didn't want it back maybe you need to time travel to last year and fix that

Oh wait if you could time travel I think we all know exactly when you would go-
user1: That picture is from 2.0. Now he’s at my house and is my pet.
user2: But this is medians we're talking about, so “from 2.0” can mean the same thing as “from five seconds ago”.
Detect Scratch version here
My other accounts: @selfexplanatory @modesties @chaircard @fireflyhero @dividendyield @colloids @radians @skeuamorphism @dihectogon @anglebisector @aau- @EditBlockColors
i trolled redcat LOL

if you see this

{what method did you use::control hat
answer on profile ::motion
} ::operators

;

ajskateboarder

Couldn't people just use a free proxy list to spam form submissions anyway? Your methods of site security are either archaic or just non-existent.

Just use hCAPTCHA or somthing

I always seemed to get mad at people in 2022 posts and overuse things like :facepalm: If you are looking at one of those posts, just note I don't write like this anymore
software developer
artist
swimming and biking enjoyer

DifferentDance8

ajskateboarder wrote:
hCAPTCHA

not possible, relies on JS

Words? scoffs Who needs one? not when you have blinkies stamps - so confusing terminologies!

ajskateboarder

DifferentDance8 wrote:
ajskateboarder wrote:
hCAPTCHA
not possible, relies on JS

Tough luck

I always seemed to get mad at people in 2022 posts and overuse things like :facepalm: If you are looking at one of those posts, just note I don't write like this anymore
software developer
artist
swimming and biking enjoyer

medians

ajskateboarder wrote:
Couldn't people just use a free proxy list to spam form submissions anyway? Your methods of site security are either archaic or just non-existent.

Just use hCAPTCHA or somthing

Top quote in my signature.
Also I knew this would happen, I’m gonna follow this topic just to see what happens next.

DifferentDance8 wrote:
not possible, relies on JS

Well it’s because it is savvycutter

Last edited by medians (May 23, 2023 11:17:15)

hi875230163394: You're similar to valve in that you both hate a certain number…
Medians bamboozled by 3.0 (both projects back up): Original and https://scratch.mit.edu/projects/878470775/
Scratch 0.x, 1.x, 2.x, 3.x and LogoBlocks Archives
medians: Oh god not this utc - 12 thing again..
Fun_Cupcake_i81: What, were you expecting not to see the utc - 12 thing again? THE UTC - 12 THIGN ALWAYS RETURNS. ALWAYS.
medians: I knew it would happen. I was the one who started it last year.
Fun_Cupcake_i81: Well then if you didn't want it back maybe you need to time travel to last year and fix that

Oh wait if you could time travel I think we all know exactly when you would go-
user1: That picture is from 2.0. Now he’s at my house and is my pet.
user2: But this is medians we're talking about, so “from 2.0” can mean the same thing as “from five seconds ago”.
Detect Scratch version here
My other accounts: @selfexplanatory @modesties @chaircard @fireflyhero @dividendyield @colloids @radians @skeuamorphism @dihectogon @anglebisector @aau- @EditBlockColors
i trolled redcat LOL

if you see this

{what method did you use::control hat
answer on profile ::motion
} ::operators

;

DifferentDance8

medians wrote:
Also I knew this would happen, I’m gonna follow this topic just to see what happens next.

Me too!

Words? scoffs Who needs one? not when you have blinkies stamps - so confusing terminologies!

SAVVYSCLUTTER

Can anyone give a solution that doesn't use JS or SSL?

Last edited by SAVVYSCLUTTER (May 23, 2023 12:33:14)

I deleted my account on 9 June 2023. My best projects are still on Scratch. Visit my website for my latest work.

ajskateboarder

SAVVYSCLUTTER wrote:
Can anyone give a solution that doesn't use JS or SSL?

Server-side rate-limiting or CAPTCHA generation

I always seemed to get mad at people in 2022 posts and overuse things like :facepalm: If you are looking at one of those posts, just note I don't write like this anymore
software developer
artist
swimming and biking enjoyer

SAVVYSCLUTTER

Does Secure Network always use the same IP for each user?

I deleted my account on 9 June 2023. My best projects are still on Scratch. Visit my website for my latest work.

BreadcatGames

SAVVYSCLUTTER wrote:
Does Secure Network always use the same IP for each user?

most VPNs do not use the same IP for each user afaik

catvibing.gif

neuralink is for losers

MagicCrayon9342

SAVVYSCLUTTER wrote:
Can anyone give a solution that doesn't use JS or SSL?

Modern problems require modern solutions. Use JS and SSL.

SAVVYSCLUTTER

MagicCrayon9342 wrote:
SAVVYSCLUTTER wrote:
Can anyone give a solution that doesn't use JS or SSL?
Modern problems require modern solutions. Use JS and SSL.

I can't - as I've told you many times, I want to support old devices.

I deleted my account on 9 June 2023. My best projects are still on Scratch. Visit my website for my latest work.

BreadcatGames

deleted

Last edited by BreadcatGames (May 23, 2023 18:43:34)

catvibing.gif

neuralink is for losers

MagicCrayon9342

SAVVYSCLUTTER wrote:
MagicCrayon9342 wrote:
SAVVYSCLUTTER wrote:
Can anyone give a solution that doesn't use JS or SSL?
Modern problems require modern solutions. Use JS and SSL.
I can't - as I've told you many times, I want to support old devices.

You shouldn't.

SAVVYSCLUTTER

MagicCrayon9342 wrote:
SAVVYSCLUTTER wrote:
MagicCrayon9342 wrote:
SAVVYSCLUTTER wrote:
Can anyone give a solution that doesn't use JS or SSL?
Modern problems require modern solutions. Use JS and SSL.
I can't - as I've told you many times, I want to support old devices.
You shouldn't.

My site's for me to use as well as others and must support my devices, both old and new.

Last edited by SAVVYSCLUTTER (May 24, 2023 05:43:47)

I deleted my account on 9 June 2023. My best projects are still on Scratch. Visit my website for my latest work.

ajskateboarder

SAVVYSCLUTTER wrote:
My site is for me to use as well as others and must support my devices, both old and new.

Look, just display an hCAPTCHA for modern browsers. For older devices, you don't have to show anything. It's a win-win

I always seemed to get mad at people in 2022 posts and overuse things like :facepalm: If you are looking at one of those posts, just note I don't write like this anymore
software developer
artist
swimming and biking enjoyer

MagicCrayon9342

ajskateboarder wrote:
SAVVYSCLUTTER wrote:
My site is for me to use as well as others and must support my devices, both old and new.
Look, just display an hCAPTCHA for modern browsers. For older devices, you don't have to show anything. It's a win-win

That defeats the purpose of an hCAPTCHA. One can simply make their device appear as an older device with an older browser using various methods.

ajskateboarder

MagicCrayon9342 wrote:
ajskateboarder wrote:
SAVVYSCLUTTER wrote:
My site is for me to use as well as others and must support my devices, both old and new.
Look, just display an hCAPTCHA for modern browsers. For older devices, you don't have to show anything. It's a win-win
That defeats the purpose of an hCAPTCHA. One can simply make their device appear as an older device with an older browser using various methods.

You mean user agent spoofing, right? There are many ways to detect spoofing

I don't even understand the concern about using JavaScript, especially when a CAPTCHA won't affect site navigation. On browsers without JS support, the site will still work fine. Then again, rate limiting on the backend is a fine choice that is relatively effortless

Last edited by ajskateboarder (May 23, 2023 19:15:17)

I always seemed to get mad at people in 2022 posts and overuse things like :facepalm: If you are looking at one of those posts, just note I don't write like this anymore
software developer
artist
swimming and biking enjoyer

uwv

SAVVYSCLUTTER wrote:
(#13)
I can't - as I've told you many times, I want to support old devices.

waaaa waaaaa waaaaaaaaaaa get over it holy *

i use arch and sometimes gentoo btw

Discuss Scratch