Discuss Scratch

tntman24
Scratcher
100+ posts

Cloud Variable Exploitation

My browser / operating system: ChromeOS 14541.0.0, Chrome 123.0.0.0, No Flash version detected

Hello ST,
So, I believe I found a security bug with scratch cloud variables. By using a application called insomnia, you can effectively send HTTP requests to a scratch project cloud variable by using the console in the Web Tools in Chrome, you can see the server it gets sent to along with the data. My idea is to encrypt the data in hash so people can not get it, or make it so you need a password or whenever the you send the data that only the computers have. But, I don't know anything about this, just a theory
ametrine_
Scratcher
1000+ posts

Cloud Variable Exploitation

(edit: just realized you knew what he meant, sorry)

Last edited by ametrine_ (May 17, 2024 22:59:23)

Powered by DjangoBB