Discuss Scratch
- Discussion Forums
- » Bugs and Glitches
- » Cloud Variable Exploitation
- tntman24
-
100+ posts
Cloud Variable Exploitation
My browser / operating system: ChromeOS 14541.0.0, Chrome 123.0.0.0, No Flash version detected
Hello ST,
So, I believe I found a security bug with scratch cloud variables. By using a application called insomnia, you can effectively send HTTP requests to a scratch project cloud variable by using the console in the Web Tools in Chrome, you can see the server it gets sent to along with the data. My idea is to encrypt the data in hash so people can not get it, or make it so you need a password or whenever the you send the data that only the computers have. But, I don't know anything about this, just a theory
Hello ST,
So, I believe I found a security bug with scratch cloud variables. By using a application called insomnia, you can effectively send HTTP requests to a scratch project cloud variable by using the console in the Web Tools in Chrome, you can see the server it gets sent to along with the data. My idea is to encrypt the data in hash so people can not get it, or make it so you need a password or whenever the you send the data that only the computers have. But, I don't know anything about this, just a theory
- ametrine_
-
1000+ posts
Cloud Variable Exploitation
(edit: just realized you knew what he meant, sorry)
Last edited by ametrine_ (May 17, 2024 22:59:23)
- Discussion Forums
- » Bugs and Glitches
-
» Cloud Variable Exploitation